Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
File:                     jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json)
Hash identifier:          c0fq2vTuu2vK3Aue6svXPvpVAxcwHSeJRDCumb3HuHY=
Subject key identifier:   B9:3C:8F:CE:FB:94:2B:D2:14:3D:38:9D:38:D6:7A:F0:1B:6C:A3:42
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Certificate issuer:       /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial:       0195E046A0FEB2332170995D67F376A54E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
Manifest number:          11E2
Signing time:             Sat 29 Mar 2025 05:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:19 +0000
Files and hashes:         1: 4OlXHZjPNi_ZrlyOHLrnACz2H5w.roa (hash: WcKTWMqR73pqlk4NefweGCzhLoO2KaXXmg8w4iimJxY=)
                          2: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: qQ+Qv0JZCULNhoGQWtnQ4ymbReld3O/AdbJrPmeLTFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:a0:fe:b2:33:21:70:99:5d:67:f3:76:a5:4e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
        Validity
            Not Before: Mar 29 05:01:19 2025 GMT
            Not After : Mar 30 05:01:19 2025 GMT
        Subject: CN=b93c8fcefb942bd2143d389d38d67af01b6ca342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ab:4e:5a:96:1d:9a:47:f1:9c:9d:64:6b:44:
                    8d:a3:1e:87:8e:82:9c:ab:0d:de:ca:1c:d3:b6:ed:
                    81:c9:a9:a6:0c:64:93:6a:c2:21:ad:d3:71:e4:77:
                    69:99:d1:3e:d9:c9:25:f6:4a:ca:80:a4:73:10:c4:
                    80:38:c5:cc:3a:16:bc:a7:f6:66:eb:c8:47:07:73:
                    ec:84:1c:bc:4c:3a:6d:36:72:97:e0:80:ed:95:9b:
                    71:dc:5b:ba:2d:ea:4f:11:3e:68:c1:09:ae:f4:b0:
                    b9:fe:42:87:40:93:85:fc:6e:15:8c:4f:e1:2c:59:
                    9e:24:ba:cc:a5:b3:1e:89:00:b4:c8:ee:77:b7:30:
                    04:ae:d0:2e:a5:d0:9b:f9:ea:d5:47:a6:15:c4:8a:
                    94:b1:e5:69:02:a6:50:ff:4e:46:ce:86:35:1e:5d:
                    51:1a:72:f2:b9:12:15:6c:3c:bb:7a:42:e0:0d:58:
                    81:d5:30:97:fb:91:f4:3a:09:6e:a1:84:b6:3a:6f:
                    d5:bb:f8:c5:91:35:0a:02:1e:1b:dc:91:bf:83:0e:
                    eb:c9:42:4e:4b:b6:12:b2:79:18:5f:c6:23:e6:02:
                    a1:a6:28:ee:4e:e2:75:00:9d:d8:ea:b0:8c:f6:06:
                    0f:13:39:38:17:a9:15:43:e4:bd:ac:43:ee:ae:60:
                    17:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3C:8F:CE:FB:94:2B:D2:14:3D:38:9D:38:D6:7A:F0:1B:6C:A3:42
            X509v3 Authority Key Identifier:
                keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:83:46:01:9d:9e:b6:18:87:25:bb:e1:7a:7e:f1:98:03:
         8a:5f:a3:8a:d1:74:27:84:82:c3:05:74:ea:92:b6:63:01:88:
         5f:76:47:dd:d0:02:36:29:f6:50:dd:b0:82:72:36:70:cc:43:
         91:93:1f:1d:e9:eb:7c:a8:a5:a0:27:93:1e:fd:31:d6:7f:c8:
         10:c2:27:fd:7c:a0:3f:66:25:76:7f:66:8b:4c:85:62:9f:7e:
         4a:52:94:47:33:1a:1c:97:aa:5c:c4:fa:ee:85:70:72:8f:a5:
         5d:70:67:b6:24:03:bc:82:f6:79:0c:5e:56:97:f4:50:42:d2:
         7c:54:c8:c5:86:ec:42:1d:a8:6f:5e:f7:ee:c3:62:61:fc:0a:
         47:54:7a:98:b7:3f:c3:25:59:82:19:2b:89:d2:26:00:53:d8:
         d4:d5:b9:a9:fa:b5:94:eb:6b:e8:71:f8:94:a9:06:4f:b3:8b:
         56:84:a0:36:b1:ee:1c:62:70:e8:06:bd:d3:b8:12:ae:71:ee:
         03:31:a6:e4:11:0f:a4:bf:ab:cd:23:24:07:18:7f:93:2e:20:
         86:e3:b4:5f:61:09:e0:7b:a6:8b:ea:c8:80:6f:07:ac:d9:ad:
         d7:25:d5:6d:19:fe:8a:06:d6:2d:c0:ee:74:65:4e:30:1e:38:
         e4:d1:76:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----