Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
File:                     jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft (raw, json)
Hash identifier:          XfwcpfuZ4/Q0ARkkV7j3t+TrDzifGT3MShAYZ5y7BDA=
Subject key identifier:   C5:E7:20:D1:99:54:D0:CF:CD:48:99:B4:21:A9:3E:C8:25:63:E4:23
Authority key identifier: 8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F
Certificate issuer:       /CN=8e3088ee71cb6815990dc24867b4a0e31968000f
Certificate serial:       01962ECF9C153A397E683ACA434B6263BB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: LgIPOaS3n2sqiXRF04UEQLyEYsM.roa (hash: YqN1B/tx43sTxDsP8Z9eF6NTn7buBeb+1tzSiGZZDN8=)
                          2: jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl (hash: iKmBNTbZpp+7pi4l5J0vxfbUCt05dkVqemDe9LJb7CQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9c:15:3a:39:7e:68:3a:ca:43:4b:62:63:bb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3088ee71cb6815990dc24867b4a0e31968000f
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=c5e720d19954d0cfcd4899b421a93ec82563e423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:fb:98:b3:23:47:f5:aa:05:17:f6:72:6f:
                    53:88:41:29:49:9a:72:a4:e5:d1:36:36:c7:9d:2e:
                    90:64:a2:27:95:d4:c5:92:a1:3e:26:ed:bf:76:e7:
                    d1:ef:1c:44:c6:91:bc:d7:da:23:32:60:3b:b9:94:
                    2d:22:c1:a1:85:98:9a:3f:76:e5:75:ac:98:77:d7:
                    d4:43:55:5c:61:ac:06:d8:29:c4:ab:7f:66:ba:29:
                    7e:fb:ca:a1:fb:23:ec:f8:4d:76:fb:b0:57:65:a5:
                    f5:4e:c1:d5:6b:de:e0:4f:a3:34:a4:60:f8:54:58:
                    76:bf:c0:49:22:d0:5c:4a:8f:d7:5b:6c:1f:f9:8e:
                    48:53:7a:5b:c0:69:d1:f8:ba:58:ce:c0:64:46:24:
                    0c:de:90:fa:bc:4b:91:77:1a:f9:99:e2:ac:ea:d1:
                    36:09:20:cc:7b:19:ae:a7:57:0d:ff:2b:02:f4:dd:
                    d4:e5:35:90:62:d1:d2:38:cd:58:88:53:7b:a1:56:
                    c6:b1:e5:49:6f:ee:a1:81:b4:c6:09:e1:0e:b0:d7:
                    3b:d3:94:37:a8:b3:f3:67:03:24:f5:55:2f:1e:a8:
                    e6:c3:4e:d0:83:e5:b8:8c:40:ed:d9:fc:25:6d:6f:
                    00:1e:cd:2d:d2:eb:44:4f:49:10:8e:92:1d:96:72:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:20:D1:99:54:D0:CF:CD:48:99:B4:21:A9:3E:C8:25:63:E4:23
            X509v3 Authority Key Identifier:
                keyid:8E:30:88:EE:71:CB:68:15:99:0D:C2:48:67:B4:A0:E3:19:68:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1adf46-f498-4748-a47a-9ec2a2a094d7/1/jjCI7nHLaBWZDcJIZ7Sg4xloAA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:7f:6a:15:af:94:ac:6b:13:54:ce:70:85:cd:57:42:67:
         32:a0:8c:a7:ae:ac:51:89:d2:56:18:c6:27:bb:84:6d:6e:9b:
         8f:8d:b8:a6:21:1d:f1:38:b8:5c:2a:35:76:51:64:3b:36:4c:
         01:10:87:4c:bc:a4:dd:f1:bd:35:a6:cd:9f:ef:95:12:6c:b4:
         dd:66:6e:73:87:ab:d2:0d:da:4f:70:67:a1:f2:9e:df:d8:b5:
         d9:c9:2f:dc:2a:1c:90:22:f0:91:93:c0:d0:66:68:2a:ff:05:
         55:eb:9f:81:a0:53:b2:a8:93:82:37:9d:c7:bc:f6:47:24:a3:
         f9:02:3c:d1:b7:fe:de:95:eb:a1:d0:f5:97:05:0f:94:62:58:
         03:bf:de:a0:08:3f:dd:c3:23:2a:96:a7:ff:31:ad:d2:32:14:
         08:cf:51:43:dc:fa:be:b3:8e:e8:60:32:b4:c4:93:4d:14:b9:
         01:da:18:23:53:38:2c:ea:ba:08:71:10:91:81:cf:18:44:7e:
         69:2a:07:f1:34:fe:a6:30:ed:93:94:7a:86:28:e6:30:35:e9:
         3f:17:e1:ad:20:24:67:1e:bf:0f:ef:18:aa:fa:78:19:44:d2:
         c0:6d:af:0c:c4:31:0f:2a:50:59:30:00:97:36:88:33:26:d3:
         36:23:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----