Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
File:                     JMrM7uNf-HzWeO9qkiYs786Ekt8.mft (raw, json)
Hash identifier:          JfPl6QmhLSSMaYMduLS2IH7jdxn/NI52sl8qjWsPCXQ=
Subject key identifier:   D2:CC:33:55:B0:A2:28:51:FA:A9:2B:45:09:76:AE:BE:12:05:A5:1C
Authority key identifier: 24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF
Certificate issuer:       /CN=24cacceee35ff87cd678ef6a92262cefce8492df
Certificate serial:       01962E9864F77CC666EC93069500A4931D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft
Manifest number:          121D
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: JMrM7uNf-HzWeO9qkiYs786Ekt8.crl (hash: HoJgYMKsseK1H3oJaX7tU+B70QVgwPetK2eaBmmGTC0=)
                          2: dc8PgnhayzDZSzqf3yg7QDbNGi8.roa (hash: J+tA+61lQEEvu8m1aPgIRjodULbBtcVS6a22ypCO1hM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:f7:7c:c6:66:ec:93:06:95:00:a4:93:1d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24cacceee35ff87cd678ef6a92262cefce8492df
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=d2cc3355b0a22851faa92b450976aebe1205a51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:5d:b5:ec:66:07:f6:a2:bc:19:05:35:a8:
                    bf:a8:4c:0c:ce:64:e6:2d:f7:3a:f0:37:9b:ce:74:
                    2d:a3:9a:1a:9a:43:2f:fc:18:0e:9d:c7:14:c1:20:
                    62:22:48:26:10:ab:09:9b:bd:73:04:99:24:df:c4:
                    f4:73:72:67:a8:ba:37:ac:e0:20:cd:07:55:4e:8a:
                    e7:fe:d1:d9:99:0e:a0:2a:df:2b:87:50:fb:d8:29:
                    39:cd:7a:4a:40:f0:8d:76:76:ab:86:0b:78:b2:6c:
                    94:23:20:4c:1b:b0:75:d2:9c:e4:bb:a2:f6:ea:ea:
                    cd:a6:1e:55:10:f8:f6:d7:31:65:da:31:b7:81:62:
                    82:64:57:64:34:08:8e:ef:cd:51:65:e5:c3:14:16:
                    47:6c:bc:f6:86:04:ad:e0:e4:29:27:e8:bb:dd:95:
                    bc:b0:2b:63:87:35:d6:77:ca:1e:0f:fe:ae:6a:d3:
                    43:31:6f:8e:d8:a6:76:4d:38:c8:92:79:79:0c:5c:
                    ba:10:fb:5a:10:21:82:9b:26:e8:ea:be:89:35:47:
                    62:e6:39:70:4d:cc:de:10:62:93:8e:b8:54:d8:63:
                    ea:ef:6e:98:66:60:f4:dd:e1:2c:d6:c8:72:78:26:
                    23:38:ce:7c:3b:86:5c:60:0b:56:38:7f:c6:81:56:
                    05:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:33:55:B0:A2:28:51:FA:A9:2B:45:09:76:AE:BE:12:05:A5:1C
            X509v3 Authority Key Identifier:
                keyid:24:CA:CC:EE:E3:5F:F8:7C:D6:78:EF:6A:92:26:2C:EF:CE:84:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMrM7uNf-HzWeO9qkiYs786Ekt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/6670f9-418e-4275-8000-a29eb139e79d/1/JMrM7uNf-HzWeO9qkiYs786Ekt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5f:5f:d5:a4:06:78:7d:0a:03:63:1d:ed:d0:82:58:c4:dd:
         df:17:a6:64:8a:d2:14:7d:fb:90:5d:49:c5:23:f6:24:f8:48:
         1d:c4:48:57:36:fb:10:c7:12:ec:b4:58:f1:1a:66:bb:c0:c9:
         8b:b9:e1:ce:2d:9f:f8:39:2e:2e:20:25:c7:3e:88:f3:de:7b:
         85:5f:a2:f1:b2:35:dd:35:8f:bd:26:94:53:cb:c0:a6:36:51:
         e0:c9:d8:e0:e0:2c:42:fb:f3:6e:e7:41:34:47:b5:87:2b:9f:
         8c:9d:9c:5c:51:ef:14:e5:74:18:85:02:36:da:99:9c:a1:ec:
         dc:f6:81:28:8c:a6:f6:96:78:5f:a0:74:81:03:9a:7d:4e:ea:
         6c:25:19:1b:57:68:66:55:cf:01:85:39:ee:4f:4f:3a:1d:ed:
         3a:b8:e2:24:e6:b1:94:9a:1f:bc:78:4b:77:10:7d:bc:e1:b1:
         1d:df:ac:41:94:8a:c3:cf:34:66:ef:54:f9:7b:47:35:7e:9d:
         55:de:3b:73:0a:77:8c:ee:9e:3f:6f:62:5e:a0:fc:b9:2b:d0:
         9b:4c:91:c0:d8:7d:e9:7d:8a:00:60:c7:d8:37:e8:ea:bf:93:
         c9:3d:b3:16:e0:e7:4f:8b:5b:48:8e:27:98:55:f9:00:cd:6f:
         64:e2:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----