Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
File:                     JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json)
Hash identifier:          kuyNH9hYFm+t4bRYTQsqziJCH00Gwyn81ZItdsJdBHs=
Subject key identifier:   D4:BB:66:44:59:D1:F9:96:41:39:2C:1C:71:FA:2C:A6:59:34:C1:E0
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Certificate issuer:       /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial:       01962F750457A1E222F1A909C6555035CE84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft
Manifest number:          1224
Signing time:             Sun 13 Apr 2025 14:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:00 +0000
Files and hashes:         1: 1GXRp3uT7hSMRzWjOxU0QktVRiY.roa (hash: aqIqmb81zi2cD6sMblBWQoAdH8B6EoMHMa2iFTOnb0c=)
                          2: 7w1YPyzlBEZNMOyEUCFkNc0ECPQ.roa (hash: 0dazsLMYx/MeDO19uGuuYzM5rCd3NgH7NYuHWn+o7Y8=)
                          3: 9S6VN8W0AB42Tjfsy_52eVj_HF8.roa (hash: U/0clwp2HZIEVyJ8jDxjulKSBf1aha8MkLQgHpOloog=)
                          4: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (hash: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=)
                          5: FCh0pju_b1XDjIA8N5RktFi16SI.roa (hash: nzz37F+/F7FQRtoCdt1NMVOBQ7kMdP9rhDen0hB2f8U=)
                          6: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: iIW8eX6a8yGXogsHjkBaEjVY5XcFhivaDnD7AWEEie8=)
                          7: KKECh8K7hNffHVDT8ywINErgd1U.roa (hash: jFVe6x1L0XuZf3m6Z9ZwhiY43bHKM8ZXgM5AwxJ+SJ4=)
                          8: Neg-GaKgdY6gnpXCEHzkL9JlhS0.roa (hash: YgY5UaAq6hQXGaoygI0YizLwZ/ppqq3rjPmBhu92jjc=)
                          9: QBe6vAE6rYSA8KCQoO7i8f2keWY.roa (hash: /ZgtoN8+dacZMoQUvXB0j9wPVe+O1WRxUSH58QMyIv8=)
                          10: Vtk_Tnk8KAs0CjXnZIyyZkbT5r0.roa (hash: 7t2sO9mvSNvzcvmONk+O+iPzP5t53OvX6VGO7czBxUE=)
                          11: XkXy4rFVu6JKAbUcEbjCs_ol8Mc.roa (hash: KEboU/fmZ1raaMqRFHeXS/DA8vof1Lf7hts2MdqUMFk=)
                          12: ZMDHfiorAQeHiAr2VSo31IrsX9Y.roa (hash: 2rW77gP54+olCRPQkqdpt6U7rC4Eivix0JgQsNBRA0A=)
                          13: b9LZtPjPcGkqch-QIMPmNiY1GfY.roa (hash: wVwwQPvK556ifQMFCqlsaWU8LCMEwKfjuZYfw4kZ7Ug=)
                          14: eq_1NPXQGhoWTMBNC9PaXKKEltM.roa (hash: Hq4HlvjEPgU16G6jBR0u/BxOO81trhl4PXHhgLXPBd4=)
                          15: u1jdAQ2eshDqHXq4UFjEjcuXmsI.roa (hash: 7O01VUQlx2/5mCx+t4SgO9Lggi1VIhx12oZO6kEvwsM=)
                          16: vhjrtMMdROIFj167BFR3pGrdrb8.roa (hash: mHe16RuP6X+5Fin2ZffJO/Ym51XZo7pnKG1BIGBPcUQ=)
                          17: vtNeTxZnHuMsF3rl3ZSPlMog7F0.roa (hash: FfGF+21HwGvE0iZhE2YJptjryuHFZ0BNSqu9xGqCr6Q=)
                          18: xtI4FxymYzhmmmKad9ZOkzTos1E.roa (hash: Xd4WHKpPZgsYedQWZYH07M7z75l0J2MM4sU9jDdQuXM=)
                          19: ybY_u3UcfjTzRF7Lg69rgFhBEj8.roa (hash: nu5/GLbVUR3XCx38teE1KgYIK7z4r/T9zMV4tmz1880=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:04:57:a1:e2:22:f1:a9:09:c6:55:50:35:ce:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
        Validity
            Not Before: Apr 13 14:02:00 2025 GMT
            Not After : Apr 14 14:02:00 2025 GMT
        Subject: CN=d4bb664459d1f99641392c1c71fa2ca65934c1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:07:e3:68:4f:7c:ee:46:4d:b1:10:4b:02:
                    f1:10:66:11:fe:7e:98:18:5b:5f:40:18:dd:27:b5:
                    6e:e1:2f:77:34:0d:7f:78:0e:f8:d0:fe:65:df:85:
                    8a:9d:0a:f3:9c:7e:de:04:42:55:fb:15:f2:cb:3b:
                    da:7a:3c:0c:c7:26:23:ab:a5:ee:d1:e5:79:3b:56:
                    14:e5:bf:77:f7:7c:28:3b:d1:cf:a8:5c:3b:4f:87:
                    24:1d:7b:dd:3e:07:fc:8e:73:4c:06:e5:59:54:45:
                    57:3f:16:fe:93:49:27:71:3d:c7:15:e6:46:ba:45:
                    bd:69:a0:20:14:2a:74:e5:59:7b:59:a4:c3:3d:4e:
                    77:93:af:23:55:23:b5:7e:0b:f1:5a:bf:f7:89:b4:
                    e8:68:f2:60:84:ce:9e:4c:32:97:fb:6d:63:40:96:
                    3b:41:ad:f2:a0:c8:7e:00:cb:6a:5e:a6:42:23:43:
                    4c:90:37:eb:5e:75:37:16:30:b7:c9:a6:bb:48:7b:
                    fe:7c:fe:58:5f:5e:48:11:7d:ca:b2:2e:82:08:27:
                    2c:0a:5e:44:4b:e6:34:c9:33:c4:ac:13:23:1a:e4:
                    d9:ed:57:57:29:f8:6c:ea:70:f2:79:fe:30:13:db:
                    34:bc:81:09:e9:09:80:89:3e:6e:7b:b2:1a:d0:9f:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BB:66:44:59:D1:F9:96:41:39:2C:1C:71:FA:2C:A6:59:34:C1:E0
            X509v3 Authority Key Identifier:
                keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9a:10:86:3c:6c:a3:8a:73:b6:45:ed:6f:d8:61:32:93:6a:
         86:93:bb:53:df:2a:7f:a3:63:e2:36:d6:f0:54:c8:a7:11:f7:
         3e:b4:07:50:45:34:76:f9:79:23:02:07:35:42:ff:d4:93:52:
         0e:8c:9f:0f:65:ba:5c:ea:35:81:99:08:5b:81:b1:3d:35:66:
         33:d5:1d:0b:93:ed:01:bc:95:f2:a3:b8:10:6d:05:02:f9:52:
         92:d8:84:ed:d9:38:3f:62:9a:b3:b0:20:b0:b6:06:fa:a8:74:
         2a:a9:7f:5e:70:91:fb:2f:15:1c:3b:b6:f2:4f:28:15:8e:c1:
         9d:86:1e:06:96:f6:6b:13:78:c3:7a:34:57:49:70:7c:8f:95:
         bf:c8:d7:b9:22:ee:a3:04:09:8c:20:c6:3a:67:27:93:50:c4:
         62:f0:43:b3:11:33:95:9e:b6:00:41:6f:5f:e8:a6:9d:89:ba:
         5a:9c:89:ef:d8:b0:11:19:9f:5a:ff:4c:3d:de:71:b4:f7:e0:
         1f:c2:92:8f:fc:a8:89:79:d1:f0:ad:60:0e:6c:3e:36:8e:ce:
         d9:78:db:06:65:2c:cd:c1:ac:5a:9f:a3:63:b3:96:90:2c:ba:
         ef:1b:d3:ed:ae:eb:c8:2e:3c:38:18:e5:8a:57:54:91:68:8c:
         c2:45:7a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----