Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File:                     JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier:          EIpC/Xh0LCVjxPb3kKHqJPyEn7X2a1P/ZEC+m5gq6M0=
Subject key identifier:   6B:9B:BB:B0:E4:B5:97:27:4B:45:CF:6D:F3:A6:61:31:98:0A:04:3D
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer:       /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial:       01962F3D442335703E3B92AC063533BC8536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number:          B0
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: pxpURca5NHfIXJtnb9bl+GytDX+ywnC4cSiCOasXRl8=)
                          2: myWr4RM0KjaGFLw7rDn2QhBZHjQ.roa (hash: v3M/68TF83GRhsjwIwly84Tjuf8KBFKnUC06+RwEUuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:23:35:70:3e:3b:92:ac:06:35:33:bc:85:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=6b9bbbb0e4b597274b45cf6df3a66131980a043d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:50:25:38:84:0b:be:6c:36:0a:6f:20:2e:
                    29:72:2a:55:75:c8:ed:8b:fa:26:55:71:59:cf:3d:
                    b0:32:17:a9:88:7d:f2:17:f6:50:2a:4a:cd:08:35:
                    55:fb:40:ba:e5:92:1b:49:ed:35:2b:53:5c:7e:96:
                    01:ad:5c:46:dc:07:f5:fc:52:8b:14:31:40:52:b9:
                    94:5e:a2:f7:f0:7f:4d:f3:38:d6:fb:54:9c:a0:b9:
                    9f:8e:a9:87:c2:bc:36:8a:5c:5c:62:94:fb:c0:1e:
                    5f:11:22:90:e2:87:a4:18:8f:6b:74:96:b8:48:90:
                    68:60:95:95:6f:3c:dd:36:93:7d:60:b2:4f:6a:e3:
                    be:83:19:51:6e:c6:de:c0:51:e9:2e:36:42:e7:f8:
                    a0:56:4d:84:1f:5d:39:c0:3a:05:28:dc:2f:64:9f:
                    c7:5c:b9:0f:90:29:bd:5e:0c:65:20:a1:c2:e3:95:
                    e7:9b:44:c0:aa:f0:80:73:e1:ae:96:4a:35:b2:79:
                    b7:b7:31:cc:c2:d8:25:53:f0:59:f1:2a:2c:38:05:
                    8f:10:22:d4:a9:6d:2a:b7:83:7c:0f:c0:6c:d2:56:
                    ba:76:eb:d9:75:16:06:93:28:59:65:7c:8a:14:c6:
                    a0:c9:fa:c3:54:7f:65:f9:a2:a8:c2:9a:99:01:4d:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9B:BB:B0:E4:B5:97:27:4B:45:CF:6D:F3:A6:61:31:98:0A:04:3D
            X509v3 Authority Key Identifier:
                keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:22:be:78:3c:b5:6c:5d:54:8f:e3:28:46:d4:0a:8f:5a:69:
         53:b7:72:41:d7:0e:a3:91:db:01:dc:a6:95:be:33:0e:fb:2d:
         aa:8b:0c:5a:c2:46:62:53:47:51:d5:1c:6a:57:1b:36:76:f7:
         5d:43:13:77:2f:27:6a:88:1e:76:db:a6:fe:f3:a0:c7:b0:cf:
         26:2d:4b:09:92:8d:3c:71:a3:a6:13:03:12:7f:06:6c:20:4f:
         d1:d0:fe:48:e7:20:eb:79:c0:a4:89:9b:d0:c3:cd:87:90:5b:
         49:e4:f2:e3:77:b8:6a:fc:54:e9:99:37:e2:46:cf:a0:3f:9c:
         6a:d4:53:0f:ea:47:df:95:26:53:20:51:ea:73:6c:43:7a:d2:
         7f:bf:9e:7e:d4:47:9c:21:31:d1:45:83:48:67:c8:0c:b8:38:
         36:f3:19:3a:4b:46:4f:67:7f:7d:57:4a:c3:33:84:00:89:5c:
         f8:70:14:2f:ba:20:36:7d:98:1a:eb:c5:b0:56:d1:da:d7:69:
         3a:fe:15:7c:ff:c1:51:42:b7:9e:f0:2d:8f:d8:6a:9f:22:46:
         63:8e:95:8d:ce:de:ea:cb:66:f0:6f:0e:b9:ae:a0:e5:6d:20:
         19:13:f8:dc:4e:21:7b:55:03:43:fe:4d:c5:7f:c5:a1:63:20:
         19:83:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----