Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File:                     jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier:          yeqXPGzZ/0tHELxKG7CADWEJnbyuHTQ0I/7+o0Ks1Ao=
Subject key identifier:   30:F1:50:F8:2F:84:75:37:62:D5:F0:A6:5D:EF:65:24:F0:5B:74:6C
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer:       /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial:       01962F3DAAB42C557197BB9B6AF3448348BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
                          2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
                          3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
                          4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: XmhE6fy3FDpGOADihHMgGUQL8LXxwiEgy9UjDJeVpnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:aa:b4:2c:55:71:97:bb:9b:6a:f3:44:83:48:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=30f150f82f84753762d5f0a65def6524f05b746c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:67:10:b6:23:23:fa:a4:31:a8:0b:5c:5e:
                    49:e8:99:e3:20:41:19:46:0f:40:ea:ab:19:98:a9:
                    0c:6d:62:af:36:8d:9d:08:f3:97:4e:4c:3a:bf:0c:
                    ba:d6:8b:37:92:aa:2c:cc:22:a4:7c:35:a3:db:c3:
                    98:c7:41:f2:d1:4b:ed:95:07:7c:ac:72:1d:97:6c:
                    8e:ff:6e:fb:ee:50:52:62:e8:69:a8:7c:74:27:ef:
                    4b:0c:7a:cd:15:9d:23:be:b5:3e:a5:fc:14:71:64:
                    e9:ed:15:bc:e1:be:38:6a:11:01:a2:bd:c2:57:50:
                    5c:a9:7d:b6:fb:0c:73:26:a8:8b:a5:01:51:bc:c4:
                    b8:ff:ca:e5:27:31:b5:1a:2e:d7:e7:88:b9:25:67:
                    4d:e4:3b:f4:ff:e5:04:f5:9f:4d:39:0f:12:e8:10:
                    80:36:72:7f:7d:cf:75:d4:95:24:ab:8b:33:f6:92:
                    98:27:66:26:92:bd:67:b1:7e:91:34:f9:e1:5c:e1:
                    6d:cd:ee:85:8d:42:15:b9:11:97:9c:5f:17:98:fd:
                    99:3d:60:73:64:22:b4:ed:0a:92:f5:2a:6d:7d:79:
                    56:df:13:46:30:f2:20:70:35:df:d7:1d:b5:6f:f3:
                    a9:27:79:61:3f:85:ca:5e:2d:1b:e1:05:8d:56:fe:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:50:F8:2F:84:75:37:62:D5:F0:A6:5D:EF:65:24:F0:5B:74:6C
            X509v3 Authority Key Identifier:
                keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:2d:21:92:d2:5a:e4:cc:d3:a0:65:e7:4f:15:c2:7d:7b:
         dc:d2:eb:d1:89:34:12:a0:ae:bd:f9:e6:0b:db:2f:44:af:67:
         3f:0e:33:d0:53:da:2a:24:ca:03:04:b1:31:e2:9a:2e:c0:d5:
         d6:e4:7d:a4:95:75:2e:25:6c:2c:d8:5b:57:85:bd:dc:b4:95:
         6e:35:13:93:a7:8b:30:a2:64:44:7e:27:37:ca:4e:df:c3:7f:
         a1:75:09:db:1e:80:7f:c4:34:1f:2f:ac:b9:dc:b7:14:a5:8d:
         28:ba:9e:1a:df:a8:db:67:71:91:79:a7:7c:f8:1b:24:34:c8:
         ad:05:7a:d6:ce:da:76:8b:5f:64:07:93:62:eb:e5:c8:e5:e8:
         41:84:b6:b9:b5:02:f3:dd:2e:5e:18:2d:61:a6:0a:b7:3e:74:
         e6:f6:cb:61:e6:56:29:05:97:69:5f:ff:36:68:f0:53:ad:e9:
         52:e7:12:16:77:b9:fc:73:3e:35:13:ee:95:4d:18:8a:18:cc:
         3f:5f:9c:11:89:6c:d0:7e:bd:ee:7b:a2:a4:95:51:65:92:38:
         75:1d:77:81:39:f2:55:9d:40:e2:c1:38:b0:8a:d3:37:37:a7:
         17:d6:2e:e7:76:fb:3e:b7:26:ae:53:8f:92:fc:74:74:84:55:
         79:c6:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----