Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
File:                     JIuM0rt0TFcgVwRl3le0yjWjcvA.mft (raw, json)
Hash identifier:          gIkAELdCqFwO2t9G6PSot4qaRGoRjKsLhqRPwpkKnIU=
Subject key identifier:   05:97:C8:CF:57:CB:57:8C:08:E4:5B:63:F5:0F:F9:8F:82:A5:22:30
Authority key identifier: 24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0
Certificate issuer:       /CN=248b8cd2bb744c5720570465de57b4ca35a372f0
Certificate serial:       01962FAB701189D0055C3F9920D09DBCB2C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: JIuM0rt0TFcgVwRl3le0yjWjcvA.crl (hash: d8qfIne9FdVPqSvhFLus47XHtGJKZrcBfda4yjmCkY8=)
                          2: yQqcMeWPVR3gPJhw22lJYkcoC6w.roa (hash: gPSCyPa7byqT2dADD2nEHydwwchUGHgO0WIjWbFS9eE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:70:11:89:d0:05:5c:3f:99:20:d0:9d:bc:b2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248b8cd2bb744c5720570465de57b4ca35a372f0
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=0597c8cf57cb578c08e45b63f50ff98f82a52230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:9f:9c:ed:f5:95:fe:38:5c:ae:b9:13:d8:
                    2f:60:0f:48:30:19:e6:6b:7e:f9:0f:24:d8:2a:bd:
                    5b:01:36:1f:3a:e3:41:ce:d6:9f:e0:b7:db:2d:79:
                    66:26:74:b4:da:00:97:f5:05:e5:91:6c:93:e1:31:
                    04:c9:f3:bd:27:09:45:6c:20:15:09:43:40:cd:f0:
                    49:01:e9:17:f8:0e:17:a3:87:15:41:c9:1e:5a:98:
                    14:86:8a:03:28:fb:c1:10:d0:57:f3:a3:87:b3:87:
                    4e:2f:c3:e9:dd:89:c8:ed:cc:4f:f7:8d:21:ed:70:
                    27:79:9c:d6:13:fa:3f:c3:82:57:0d:24:05:69:92:
                    f4:3c:66:ac:41:d6:b7:a5:2f:65:0d:0e:9b:c8:1c:
                    eb:4f:26:ca:b7:c4:8f:ed:e6:13:50:be:a7:72:76:
                    cd:a9:b0:aa:9d:1b:6e:c4:16:c8:0f:d3:9b:01:de:
                    74:ce:f5:1f:c8:37:9c:f3:53:9e:81:ad:3a:fb:05:
                    34:0c:36:c8:7d:13:ce:7a:e3:27:b2:fd:40:36:c1:
                    32:86:31:82:72:22:52:15:f3:ca:ce:3d:a0:c8:51:
                    d0:fa:5d:26:99:68:32:85:c3:e4:e1:33:9b:39:b6:
                    72:e5:9b:52:39:f4:7e:d1:a4:43:d5:b0:2f:f8:92:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:97:C8:CF:57:CB:57:8C:08:E4:5B:63:F5:0F:F9:8F:82:A5:22:30
            X509v3 Authority Key Identifier:
                keyid:24:8B:8C:D2:BB:74:4C:57:20:57:04:65:DE:57:B4:CA:35:A3:72:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIuM0rt0TFcgVwRl3le0yjWjcvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/13a2cf-0f0d-4e44-aa92-8518ca4a5fca/1/JIuM0rt0TFcgVwRl3le0yjWjcvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:85:0c:19:e7:0c:0d:a7:df:0f:e9:5e:47:b6:82:83:f6:91:
         bf:45:82:c0:aa:e9:3a:61:e8:63:9e:9e:cb:a3:f3:c7:d4:bf:
         7f:fc:1d:dd:a5:f2:7d:5a:e6:35:ac:17:b0:44:24:5f:f0:89:
         c2:4c:90:43:76:2d:00:12:5a:8f:a9:6c:9b:6e:12:3a:47:10:
         be:43:6d:c3:a3:58:85:ed:d6:28:7d:68:bf:60:88:59:2f:6b:
         8f:ef:cb:10:4c:a3:76:9d:31:8e:d9:96:f2:47:c6:78:fc:77:
         35:32:af:3d:81:a1:f4:1e:a4:b3:c0:70:64:da:ab:6f:1b:5a:
         dc:23:0a:a2:9c:9d:35:57:b0:99:d9:80:71:bb:c8:36:6b:4a:
         c2:07:c7:79:64:2f:5f:7a:5b:a8:d7:c3:a7:01:c7:ba:7c:14:
         ca:e1:42:9a:a9:3b:03:d8:ed:1a:de:64:7f:61:b2:3b:5a:66:
         14:f8:3b:89:bb:b8:ce:a2:b0:47:79:a1:df:a2:e1:60:f0:90:
         91:b5:fa:38:13:29:df:d2:81:46:86:3a:d3:18:f9:7f:ea:e3:
         68:50:d1:82:3c:c3:47:e8:14:9c:f0:df:21:cd:f5:ff:ba:18:
         66:24:56:51:ac:4d:58:a9:ce:44:6d:e1:55:08:61:a9:8d:fe:
         41:0f:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----