Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
File:                     CNJq20T1SwmSx1PrF7q-gSsHSGM.mft (raw, json)
Hash identifier:          D0x4MaRR1Kk4RxOo5cQ9J+3fcgbmU5o+Rbj9jmaQYF0=
Subject key identifier:   F8:BD:7E:AF:F7:BB:F7:F4:29:BE:EE:E1:A0:0C:B1:CD:88:22:AD:19
Authority key identifier: 08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63
Certificate issuer:       /CN=08d26adb44f54b0992c753eb17babe812b074863
Certificate serial:       01962E98E644ED1836AEE5D4DAFDDBFF8103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: CNJq20T1SwmSx1PrF7q-gSsHSGM.crl (hash: rUz/RlDMw2Uj6/iaSuaIfVi1vT7yTZCUIhDbN2YJ5wE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e6:44:ed:18:36:ae:e5:d4:da:fd:db:ff:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d26adb44f54b0992c753eb17babe812b074863
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=f8bd7eaff7bbf7f429beeee1a00cb1cd8822ad19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:88:c9:d7:bd:4a:07:16:f4:b8:f0:7e:6d:
                    45:b2:76:ec:c2:bb:26:cb:85:fc:77:b7:87:67:81:
                    05:63:b1:f2:15:4f:8a:8d:f3:06:89:3b:7a:24:1d:
                    6b:19:14:75:13:8f:b7:4c:59:5e:ac:b7:5a:f9:b4:
                    2a:29:c8:39:f6:16:72:21:4a:55:ea:65:91:74:64:
                    22:6e:10:d2:a1:e0:ba:82:92:61:f9:58:4c:b7:ae:
                    2c:37:8d:d6:fe:72:0b:57:3e:3d:f2:71:50:7c:d5:
                    be:1c:5f:96:70:8b:d3:e5:c3:7f:e3:af:a1:78:69:
                    d3:b6:da:50:f4:11:c3:3a:41:c2:7b:a3:ad:fc:46:
                    c7:53:89:e9:03:80:db:1d:f1:30:49:86:4d:d2:e6:
                    c7:91:95:62:14:4d:86:58:f7:fb:c1:1a:42:12:c1:
                    65:02:69:2b:f4:1a:ae:21:f0:ea:9c:76:3e:32:3b:
                    ad:05:ec:ce:fe:38:8a:65:2e:92:df:72:ca:98:63:
                    0a:e1:4c:4d:e3:9d:03:96:cc:da:0c:f2:90:76:24:
                    cc:2d:0b:4a:e8:01:61:e4:fa:fa:f8:67:c6:01:59:
                    9f:70:2d:18:b4:e9:27:84:83:96:7c:20:68:e0:0d:
                    41:16:f4:28:17:34:98:d7:55:1e:d1:e2:72:94:41:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BD:7E:AF:F7:BB:F7:F4:29:BE:EE:E1:A0:0C:B1:CD:88:22:AD:19
            X509v3 Authority Key Identifier:
                keyid:08:D2:6A:DB:44:F5:4B:09:92:C7:53:EB:17:BA:BE:81:2B:07:48:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJq20T1SwmSx1PrF7q-gSsHSGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ace8dd-d3a8-42f0-a3c3-cce49a931c9e/1/CNJq20T1SwmSx1PrF7q-gSsHSGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:dc:32:7e:2b:fc:67:33:a1:bc:a5:6f:3e:0f:00:0f:54:
         17:79:d8:fb:26:65:28:0b:bc:6d:78:b8:39:b4:27:cc:93:65:
         6a:1c:45:8c:50:cd:b2:45:7a:8b:1a:67:63:e0:ce:74:74:2a:
         06:5a:bd:2b:13:72:b8:5b:a9:1e:2c:98:11:d8:24:75:0a:d0:
         4e:8b:99:6e:74:ab:6e:75:c8:f7:1c:30:7e:74:57:8a:9c:b1:
         e4:65:c9:08:93:c1:9c:5d:8e:50:82:fc:60:37:23:2c:09:c3:
         91:94:62:b7:93:8e:2b:37:ca:b7:6a:6c:26:90:21:ff:e5:be:
         34:f2:0a:fc:84:5a:5b:cb:c4:60:62:61:63:37:63:7e:60:4a:
         a6:eb:fd:0b:16:54:f1:06:25:5f:d1:57:27:79:3c:95:60:b8:
         75:57:39:be:97:96:72:13:ce:2e:b3:54:98:19:9f:be:b9:85:
         36:2c:b7:f4:af:34:36:24:65:fd:0a:9f:66:5e:c9:eb:9e:4f:
         8e:43:ad:e3:5b:55:79:33:14:be:31:ca:bc:dd:ad:76:ce:9f:
         bf:c7:62:27:d5:19:b3:20:e9:15:76:22:80:98:fe:40:d3:3d:
         2b:03:92:85:79:90:31:88:56:25:53:cd:06:ad:5e:36:3e:fb:
         f9:28:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----