Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File:                     Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier:          fZEEjqwxXnos9zMoBvLTa6XiOe/8gXjfMyOW3R8YsMs=
Subject key identifier:   52:90:65:CC:83:44:DE:70:10:65:CA:6E:5A:6A:9B:0F:A4:6D:BB:3F
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer:       /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial:       01962DF4516C7CE44DF86F79B97D59EF6529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number:          0E1B
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: mP35cdDHqL8VOC47cRYiobsEMgIrKnVatm8PVEhLHwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:51:6c:7c:e4:4d:f8:6f:79:b9:7d:59:ef:65:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=529065cc8344de701065ca6e5a6a9b0fa46dbb3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:07:59:10:26:a7:d5:7d:04:11:99:32:05:64:
                    1e:f9:7b:fe:d5:17:60:58:d6:8e:6a:22:73:3e:f4:
                    ca:94:a9:b7:a0:45:ab:96:22:a3:c0:d9:2b:13:7e:
                    d9:ca:d4:6c:f3:a2:52:8d:8d:be:c1:c3:eb:26:4d:
                    c0:a5:22:0e:03:92:81:be:31:e3:82:34:3c:ca:d6:
                    3c:cb:9b:b4:d6:10:0b:6f:6e:bc:29:a3:23:f8:17:
                    33:58:d4:4a:bb:a5:26:1a:6f:8e:5c:78:b9:98:1d:
                    9d:d2:b7:e9:ba:01:59:72:57:c1:f2:d0:a2:5d:09:
                    d8:e1:02:7b:41:b4:a7:47:0f:4d:99:79:7b:43:18:
                    e4:8f:79:b7:99:e6:ed:8d:e7:00:26:74:0c:2c:05:
                    2c:c2:a4:4c:5e:2b:ed:f6:02:98:19:a7:d2:b2:a4:
                    5a:18:26:85:92:c0:50:29:f5:2f:12:41:95:1b:cc:
                    3e:b2:a7:8b:40:4d:ec:08:89:10:db:63:a3:f2:06:
                    94:0b:da:71:ac:0c:90:9e:05:ac:02:ac:7f:a3:d3:
                    75:94:5f:b6:69:2f:2b:a3:36:cc:46:d6:22:1e:bd:
                    c2:34:53:ef:86:3e:3e:03:cf:bf:50:36:b6:53:d9:
                    e2:d7:97:51:78:e9:49:bb:cd:29:c5:df:f0:96:d8:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:90:65:CC:83:44:DE:70:10:65:CA:6E:5A:6A:9B:0F:A4:6D:BB:3F
            X509v3 Authority Key Identifier:
                keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:2d:33:ee:bf:8d:d1:a8:1c:ca:6d:dd:c4:65:ef:4c:1a:61:
         60:5b:7d:36:7c:83:15:a2:8b:28:1a:91:a2:d5:1a:20:ec:f6:
         e8:2e:2c:03:fc:45:d2:0a:49:0b:bc:ba:4c:20:fb:9b:8b:0d:
         bb:b3:42:7c:7b:70:50:42:83:99:22:dd:06:de:22:03:31:69:
         ba:2c:fc:33:fa:3b:f3:87:2a:85:7e:01:66:eb:a8:dd:23:d4:
         bc:08:65:dc:57:64:6b:2d:12:08:03:36:bb:4b:4c:61:b0:dd:
         59:e7:b9:33:57:a1:05:f1:52:60:87:a0:19:d8:3a:f9:41:3b:
         68:81:6b:e6:e5:0a:15:37:6a:6f:e4:56:48:1d:78:ca:5a:c3:
         da:83:cd:2a:76:6d:0e:70:44:2b:07:eb:8c:8a:cc:d2:f6:2b:
         fe:5e:d2:b4:d4:5d:94:79:42:45:d2:5a:5d:59:15:a0:30:da:
         b8:a0:70:e7:cb:bb:6d:da:3b:1d:bc:b2:c4:54:9a:e5:07:37:
         c6:60:c2:59:25:09:eb:76:db:ec:e8:61:3f:14:0f:52:7c:c4:
         56:d8:a6:ba:51:e4:fa:71:d6:e7:32:5e:1b:95:8d:9e:e1:fe:
         4c:6b:dc:d6:9a:df:69:91:5d:6a:4d:a2:d9:1f:10:6c:d5:01:
         e9:fa:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----