Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
File:                     jHVawZtqHD41NGRn_nDrVR_S7n0.mft (raw, json)
Hash identifier:          gU0fIaTko/YzXQBEIpZRxY86Dn4AiKQh6jTNFYa+egU=
Subject key identifier:   4F:33:E4:9E:F3:6B:2F:C6:CF:58:0B:FC:CB:34:59:21:83:72:83:01
Authority key identifier: 8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D
Certificate issuer:       /CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
Certificate serial:       01962ECF86AE21B6BEB43F8CA405261DD1F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft
Manifest number:          0D8B
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: jHVawZtqHD41NGRn_nDrVR_S7n0.crl (hash: pogkfIjGt2/tZVsd+QCCvgapBgbITwEbO6KOIvHK8AE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:ae:21:b6:be:b4:3f:8c:a4:05:26:1d:d1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c755ac19b6a1c3e35346467fe70eb551fd2ee7d
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=4f33e49ef36b2fc6cf580bfccb34592183728301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:87:84:de:4b:64:a8:cc:ac:3f:8e:50:16:
                    1d:93:f4:aa:ab:a4:2e:23:16:72:28:47:a3:a5:55:
                    4f:a8:08:86:fe:59:20:61:6f:62:db:ef:7d:ea:4f:
                    32:38:6d:4b:c5:1e:59:d4:3e:d6:7a:78:f4:ed:a1:
                    7e:15:22:30:11:fd:64:1c:14:cf:65:9d:3d:d5:ba:
                    16:e1:18:f4:f8:e4:e3:da:f0:da:f9:97:7c:93:69:
                    b4:89:08:70:b9:30:ef:39:8b:fd:c7:28:35:07:10:
                    3f:e2:86:8c:b4:35:b8:d9:03:16:35:38:d1:7c:18:
                    93:12:0a:33:15:bc:65:2d:7e:e1:ed:62:3e:74:e0:
                    6a:e5:7e:ab:3c:29:28:7c:85:e5:6a:ac:dc:3b:32:
                    2b:3b:26:94:2e:e7:37:4a:40:39:0d:e7:4b:bd:63:
                    fd:bd:18:2e:1b:b1:bc:67:79:5c:86:a9:4e:3f:e7:
                    6c:aa:95:19:b1:9c:16:b3:d4:b7:41:49:02:e2:ea:
                    77:0c:2d:3e:ce:bf:3f:f9:42:13:20:ba:0b:0b:5e:
                    45:3a:4c:f9:c9:fc:c7:b8:17:9d:ec:90:73:3b:af:
                    55:53:3d:a2:ed:4e:1f:c5:39:d2:a8:3c:fa:0c:db:
                    ce:95:a4:73:51:3b:84:9c:27:cd:db:c8:08:8e:7a:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:33:E4:9E:F3:6B:2F:C6:CF:58:0B:FC:CB:34:59:21:83:72:83:01
            X509v3 Authority Key Identifier:
                keyid:8C:75:5A:C1:9B:6A:1C:3E:35:34:64:67:FE:70:EB:55:1F:D2:EE:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHVawZtqHD41NGRn_nDrVR_S7n0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/9ec471-5d03-4548-b3b7-bd9c360ae06e/1/jHVawZtqHD41NGRn_nDrVR_S7n0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:f8:ec:8e:36:f2:7e:71:b4:98:83:92:51:89:85:41:f6:
         29:c4:30:f5:6b:9d:d7:51:b4:d1:89:42:4d:59:47:7f:dd:53:
         42:e0:1e:fe:a2:ce:bd:aa:81:4e:a2:49:70:a0:3a:d9:09:e8:
         12:12:bb:42:0b:3e:fe:f9:e9:4d:1e:2a:4a:f1:49:9d:7d:15:
         88:1c:08:78:15:6f:63:54:39:e0:e3:47:17:78:cf:09:cf:24:
         23:d8:89:91:19:1d:7f:01:02:11:9f:9b:ed:2f:63:0c:39:48:
         ac:76:86:93:7a:fd:f5:da:10:4c:8f:db:cf:d1:d8:10:74:30:
         e4:ae:f1:2d:b8:3a:d5:df:1c:fb:19:88:28:51:01:62:08:9e:
         21:db:c0:c8:d3:b0:fc:b8:47:7e:a7:ab:9c:30:f0:97:e7:dc:
         d8:c3:88:e3:b1:89:79:ab:31:2a:cd:d5:07:f3:17:2e:48:cc:
         03:14:c6:6b:6e:db:e1:7c:e9:4e:a6:41:64:8d:7c:9a:6e:0f:
         29:95:99:15:c1:6b:cc:ea:cd:50:a1:c1:1e:54:d9:fb:b0:1b:
         ab:b2:04:ad:2b:e7:bb:43:35:fa:ee:7b:c2:b3:57:cc:55:98:
         b3:2f:d1:f2:ce:aa:ea:33:74:2c:ca:c6:ba:d4:22:de:75:ba:
         5c:8e:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----