Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File:                     J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier:          F6oO5qXz4E4LYSVBvAx+D0ktR3209oWPbduQyYoa0QY=
Subject key identifier:   40:4A:55:76:88:45:38:68:F7:29:8E:5E:5F:06:FA:56:8B:7C:18:AB
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       01962F07370D1BCCDE55F60B440A4612BBE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number:          09C4
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: 2PPfPp92gP7ZN1XYTs05NdeNFe0.roa (hash: VL63d4eCMXJ85KSNT/DG966gx4kgp15bsn+i+OHsgV4=)
                          2: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: wknAhHIYPa7MSRLT19ROz5msUf5Hzmms2jhJ2mVk4AA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:37:0d:1b:cc:de:55:f6:0b:44:0a:46:12:bb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=404a557688453868f7298e5e5f06fa568b7c18ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:48:f5:0c:35:4d:42:7d:39:90:2f:94:d2:9e:
                    cf:9b:aa:cd:48:21:2d:bc:26:60:d9:65:d3:1d:67:
                    c3:2d:f5:f1:52:50:99:be:bc:fd:40:99:78:b8:96:
                    9b:6a:cb:b0:7f:c0:08:92:20:48:6b:d9:94:d6:22:
                    38:c2:2b:f0:a5:2d:75:ee:3f:23:5e:c8:ea:56:9c:
                    40:ec:cc:d9:6d:12:11:6c:9e:ff:45:f2:93:7e:6d:
                    7c:fb:75:ec:6c:e4:01:ae:d7:82:63:46:14:3c:01:
                    86:3b:15:27:03:4a:53:3f:47:b2:66:82:7d:b5:84:
                    27:db:5a:00:a5:15:78:f2:b7:90:7e:98:e7:9e:90:
                    31:0b:c9:fb:f3:ed:b8:a8:e6:a3:2d:b6:d9:d1:52:
                    a9:93:bf:b6:f4:df:bd:d5:de:83:df:50:27:c2:d6:
                    87:c5:3c:36:7e:48:a3:a3:43:34:52:c9:55:24:67:
                    78:48:1d:e6:3f:8a:9b:32:5a:dc:45:86:1f:15:52:
                    2a:9d:f3:e8:d3:78:db:1d:cf:6e:8c:dc:74:65:61:
                    80:3f:e8:04:7c:c6:1c:ad:30:01:df:6a:8c:8d:86:
                    6b:ff:c0:32:9f:98:01:d1:3a:5a:1e:6f:a7:f5:1c:
                    db:84:6d:f9:4d:7a:a3:dd:c2:e5:d9:a2:72:bb:5f:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:55:76:88:45:38:68:F7:29:8E:5E:5F:06:FA:56:8B:7C:18:AB
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8e:c6:6a:5b:ff:66:f3:fd:c1:0e:e7:4f:43:ae:a4:a7:39:
         30:31:c6:30:ac:81:fc:11:e1:64:95:dc:78:3e:2d:72:78:87:
         00:f7:b0:af:e6:88:d0:f9:6e:b3:3d:09:8b:6d:17:99:ba:a5:
         fc:d6:d1:c5:fc:5c:54:1e:3c:a6:7e:58:da:7a:9d:5b:d0:26:
         4b:3c:62:bb:64:07:fa:ca:ee:72:96:05:8c:f7:c9:f9:a2:9a:
         ce:37:07:dc:58:d3:ec:cd:60:8f:d6:99:2b:d2:ad:bb:af:0d:
         b3:e8:c0:a9:37:79:31:0f:a0:10:85:34:01:53:4e:5d:c1:ff:
         ad:71:2e:1f:b0:5e:51:a2:51:f3:45:73:6d:7a:51:21:d4:6d:
         4e:7f:f1:e7:a3:eb:8e:36:76:72:a9:82:fc:c4:ea:38:f7:b0:
         a9:32:ff:43:0c:98:f7:89:20:c6:4a:54:29:c4:22:af:03:ac:
         04:8d:ac:54:d5:70:93:e5:2c:5a:9b:2d:c3:55:81:73:a2:e4:
         47:3a:8f:5e:d5:06:c5:f8:97:ce:45:44:d9:11:fe:d0:6d:80:
         d5:21:7a:c3:9d:67:41:1f:06:c8:81:5d:41:a0:f9:b1:d5:1a:
         1d:32:db:ac:5f:e4:c3:79:2d:91:88:0e:8e:76:dc:7b:a8:a0:
         0a:3c:58:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----