Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File:                     j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier:          DXXUfw1DLbel6ht24OOqS0DeWIUGpF84mbOqH8OVsC4=
Subject key identifier:   F6:6C:B0:5E:67:AD:4B:64:AB:8B:87:48:28:7A:67:0F:37:D1:BD:32
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer:       /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial:       01962ECF8C36314FF5BFE64848C963DAF683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number:          0F79
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: zLlBznQkJPGbQbB1jeHKriW4nfDZ8qLVn+C0txoyAt4=)
                          2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8c:36:31:4f:f5:bf:e6:48:48:c9:63:da:f6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=f66cb05e67ad4b64ab8b8748287a670f37d1bd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:42:d8:3c:7e:d1:5a:ad:ff:f5:b7:04:2b:
                    29:66:69:c9:72:ec:4e:f7:0c:dd:9b:cf:35:b4:a2:
                    95:fb:31:8b:73:a6:61:97:1b:8e:b1:10:c0:52:80:
                    21:32:48:23:c4:a3:59:9b:16:2d:84:6f:bf:27:16:
                    7b:99:31:17:6c:44:18:46:0b:68:ac:66:0b:19:dd:
                    8c:b0:a6:97:3f:07:7c:ba:d1:0d:7f:37:af:97:35:
                    d2:9a:19:4d:89:1b:44:00:15:50:5d:9b:5d:c4:67:
                    a3:aa:17:22:29:90:e8:c8:f9:c8:1e:47:3d:6d:af:
                    70:a9:32:1d:22:17:2b:f0:35:4a:eb:b3:54:42:f2:
                    4d:cd:c2:32:34:37:1b:30:a5:27:ec:15:7e:a7:e6:
                    48:be:cc:ab:25:1b:94:13:6e:1d:8d:a8:5f:93:e3:
                    72:f3:75:6a:94:f9:e2:9f:82:24:4b:09:0b:0b:af:
                    5a:08:fe:8f:d7:45:08:f6:d4:02:59:bb:d5:80:9a:
                    e5:d4:92:55:ef:92:d8:e8:84:4d:40:f8:84:35:9a:
                    2e:f6:ae:4f:bd:03:19:d0:48:54:db:56:d8:c6:b8:
                    ee:59:e6:38:5a:ad:39:f9:c7:bf:74:76:9d:56:f9:
                    89:a8:86:0c:4e:ab:a6:18:9d:93:85:74:cf:38:1e:
                    38:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6C:B0:5E:67:AD:4B:64:AB:8B:87:48:28:7A:67:0F:37:D1:BD:32
            X509v3 Authority Key Identifier:
                keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:6c:75:16:26:5f:d7:e6:20:5f:d1:88:ac:5b:fa:f6:1b:e0:
         06:bd:f8:e7:42:6a:77:1a:4d:da:ae:75:be:72:60:54:f8:87:
         b2:6c:b9:4e:9e:13:03:7c:64:b6:88:3f:c7:ad:ee:8e:55:39:
         af:32:14:c8:5e:f2:08:46:bd:59:47:76:59:09:2d:c9:39:42:
         d4:7f:54:a1:9c:20:8a:ee:81:1c:8f:a2:bc:5d:18:d6:df:8e:
         af:53:bb:72:a5:14:6a:74:b2:2e:05:8a:93:76:78:5c:75:57:
         f6:17:f2:fc:33:02:ed:f0:87:6a:82:e5:46:99:ab:25:e9:9d:
         d5:e1:5d:54:5d:4d:e5:60:47:97:ff:10:80:ff:19:18:65:d8:
         6d:b2:73:9a:7e:6f:cf:61:a2:50:1d:bf:11:fc:c5:e5:d7:64:
         45:46:f7:df:b0:43:83:50:14:14:e2:f1:3a:78:e8:e5:ef:55:
         92:02:8c:65:10:5b:5b:ef:8a:f2:42:2a:29:1a:78:70:e2:42:
         f4:be:cc:b5:b1:ac:af:32:10:09:ab:1f:d2:f1:4a:ad:4d:43:
         b9:4e:fa:72:4f:ad:be:27:18:5a:28:4c:8c:7a:07:f5:13:67:
         04:e1:dc:f7:cd:94:ca:3c:f3:3f:d9:9c:2e:b7:e9:cc:01:26:
         46:39:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----