Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          rrGuRNrFksRj5lHSEnv0czzwxeEMy2VZ74pirfFYF6k=
Subject key identifier:   A9:E8:F9:3E:E1:38:BC:D7:0B:B5:E1:D3:2C:E4:AB:6F:1A:96:74:8E
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       01962FAB170C7A9EB499C91C18E007277C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: IFfbrNglbgjHXuG7XNB28Nih9S+Q2U35CiwH+ViMf7g=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:0c:7a:9e:b4:99:c9:1c:18:e0:07:27:7c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=a9e8f93ee138bcd70bb5e1d32ce4ab6f1a96748e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b3:6c:6f:bb:ab:73:15:55:da:7a:8c:73:41:
                    81:52:28:a7:49:20:62:61:2a:20:13:eb:2e:cc:13:
                    91:45:a8:31:b8:5e:a3:47:6d:86:a3:9f:f7:2a:7c:
                    ea:67:05:f4:f9:67:57:ed:f7:b1:89:9b:fe:77:28:
                    47:43:ee:09:aa:d9:ef:b6:9b:94:89:4a:13:a2:6d:
                    61:bc:8e:17:ca:d1:de:28:89:0a:54:b4:27:9a:84:
                    50:84:70:02:90:16:57:53:cb:61:04:12:f9:2a:49:
                    47:08:c5:19:e1:ed:f1:10:5a:05:32:46:6d:89:83:
                    8a:b3:3f:c1:c4:eb:a8:41:d0:f5:c8:21:e9:56:4f:
                    d0:58:3c:b1:55:49:cb:39:83:5a:68:14:b0:b4:bc:
                    7d:25:7f:1c:a2:ab:68:52:4a:78:a8:3d:55:47:57:
                    b9:06:b8:39:4b:59:51:db:32:35:1b:76:a2:bd:3e:
                    66:80:1b:79:a9:95:e7:ee:03:45:b6:f5:8b:aa:38:
                    69:71:2b:13:fc:6e:78:7b:1b:65:26:a3:75:a5:19:
                    00:67:c0:ce:88:1c:1e:51:b0:09:ae:37:cd:f2:0d:
                    91:f5:79:a3:ea:45:86:43:da:c0:80:8f:b5:d5:61:
                    bf:d2:b0:4e:59:7a:c5:66:09:b6:18:08:b0:01:64:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:F9:3E:E1:38:BC:D7:0B:B5:E1:D3:2C:E4:AB:6F:1A:96:74:8E
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:0d:eb:5d:9c:04:a7:7e:77:20:27:46:05:4c:44:55:7b:
         b3:9f:28:6f:3c:79:fc:08:1a:ac:ac:c9:ea:39:ae:f2:88:df:
         d2:76:2f:5f:72:0d:c0:d4:85:7a:b8:8d:87:19:6b:a6:26:7a:
         3a:cb:87:af:dd:20:39:1b:d5:cb:82:9e:bb:7e:fe:94:69:78:
         7b:d3:b5:83:6d:a4:23:b1:90:a2:2a:65:21:d0:5a:d2:72:a3:
         5f:51:84:c8:ad:7e:a5:d4:ad:2a:d1:1b:d5:d0:c4:bc:3d:64:
         40:07:26:e0:82:8e:60:a0:81:da:9e:f2:69:37:39:2a:5f:23:
         23:0a:78:60:51:ab:5a:39:44:82:3e:46:3f:23:3c:4b:d2:29:
         8a:b6:ff:a2:6f:ea:2b:42:73:8f:fa:8c:82:20:5a:78:54:38:
         8b:93:f5:da:17:46:f1:53:3f:21:34:13:e3:ce:1e:4d:8e:08:
         3a:b6:3a:55:7b:62:c2:18:33:6d:bb:21:ab:ea:be:c5:bd:75:
         7e:94:d7:38:ad:a6:38:8d:c8:e3:74:31:cd:eb:79:40:9c:7b:
         4b:3e:76:36:d1:3b:97:34:a8:a0:ac:74:19:0a:89:71:2a:16:
         e2:96:a4:64:fe:5a:14:5f:7a:d7:a9:9c:e4:c0:97:13:f5:cb:
         ed:e1:02:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----