Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
File:                     J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft (raw, json)
Hash identifier:          ytC6d33sskzDwdeV03Eayj+69u+IlIwXVf9EKOf5Cfg=
Subject key identifier:   5B:A3:C1:7C:66:A9:B8:58:51:E7:62:BB:5A:23:EA:6F:53:AF:90:94
Authority key identifier: 27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4
Certificate issuer:       /CN=27fdce9db6af9b8133a32617eef4e046444efdd4
Certificate serial:       01962E98B3859E9BEF468601EF585AC441C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft
Manifest number:          065F
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl (hash: LYW/6wtj3WNKoNAVHGKkpr3fDjv/4BGkMtgwC56gWu8=)
                          2: dXMPZ44H3EK1ymUiEeV-kdVqljI.roa (hash: Z4FUo52Ap+7Yha/WP9YTa5vSQDQbjhKN2zcbF3wPUtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b3:85:9e:9b:ef:46:86:01:ef:58:5a:c4:41:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27fdce9db6af9b8133a32617eef4e046444efdd4
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=5ba3c17c66a9b85851e762bb5a23ea6f53af9094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:f8:d0:43:74:69:c0:c0:11:5d:45:7d:9a:
                    6a:bb:c9:f9:d5:cf:91:fb:9d:58:44:6d:25:dd:e5:
                    5f:9c:ea:aa:a6:b8:d1:69:e3:2a:63:4c:15:c7:94:
                    47:76:10:67:75:5e:e1:be:6c:5f:7a:2d:be:4c:a2:
                    3d:8e:11:48:59:96:75:71:4e:0b:c2:f9:eb:63:95:
                    93:aa:3b:cc:ab:50:5f:41:d9:2a:5c:57:6b:11:99:
                    17:18:31:b0:8f:bb:fd:db:8f:6e:66:1f:fe:9a:dc:
                    3d:ba:82:6b:86:3d:6c:05:3b:83:48:50:08:88:59:
                    5b:b1:0c:af:8c:36:a0:60:b0:af:a5:06:01:7f:e6:
                    aa:53:bc:09:d3:bc:f1:83:20:4b:c2:84:5c:58:1a:
                    79:7a:75:b6:4e:1d:a1:68:3f:64:15:76:bf:b3:7a:
                    1e:0f:94:bd:97:ed:88:88:8a:73:ee:58:0d:df:ed:
                    a1:10:c6:60:af:97:56:d8:35:65:8d:fe:d1:02:0a:
                    95:e7:d8:d7:54:ab:e4:69:f4:cc:59:8c:54:45:87:
                    75:ae:15:18:64:10:85:da:ba:09:46:d4:5a:41:79:
                    5f:ed:4e:4e:a1:55:a3:f2:1a:35:7d:16:da:f3:4a:
                    8b:2a:eb:b9:70:f2:70:e6:f3:e5:fd:d9:81:81:f6:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:C1:7C:66:A9:B8:58:51:E7:62:BB:5A:23:EA:6F:53:AF:90:94
            X509v3 Authority Key Identifier:
                keyid:27:FD:CE:9D:B6:AF:9B:81:33:A3:26:17:EE:F4:E0:46:44:4E:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_3Onbavm4EzoyYX7vTgRkRO_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0433e3-bd61-4d13-847a-d90c6177e402/1/J_3Onbavm4EzoyYX7vTgRkRO_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:3f:72:c4:71:84:07:4f:c2:9d:9e:fe:7c:95:ad:e7:2b:1c:
         2a:cc:c7:4f:49:2d:68:4e:0e:f7:fd:1e:b0:82:7a:f2:bb:b7:
         cd:a0:f4:51:32:d0:1e:8e:fe:68:d6:54:bf:3b:71:8f:45:43:
         0d:20:72:92:c2:16:76:d3:77:d2:0c:3b:0d:1c:30:8f:f2:d3:
         5a:05:ca:9a:c9:a9:2b:e3:7f:7c:db:61:8e:3d:0a:f1:95:d8:
         cd:30:4f:5e:79:be:b6:47:1a:0b:76:79:55:d4:88:79:9e:a6:
         72:ed:af:8c:cc:a5:6b:7f:af:1f:65:ef:36:56:69:af:a8:45:
         a3:0b:0b:39:da:0f:2c:cd:91:91:9a:23:dc:5d:23:d5:c2:ff:
         2a:14:91:0b:be:8f:a1:d6:24:ee:b0:42:9d:73:3f:80:54:ee:
         0e:e1:86:30:a0:4a:c6:f7:18:99:e8:23:58:a5:dc:e1:cd:3a:
         01:0e:df:48:02:c6:4b:dc:7c:9c:4a:1e:6d:ab:3f:79:fc:87:
         7b:fb:a7:f7:de:56:1c:b7:c7:af:62:f9:53:62:7f:99:96:df:
         25:55:53:86:3d:38:c1:a9:08:f2:8a:a2:2d:6d:1c:fd:e4:00:
         c6:f0:71:ef:f2:fd:06:62:4e:0f:f7:7a:59:ca:58:33:50:fb:
         26:7a:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----