Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File:                     jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier:          4vTVrv4WDx1XUY1xJdmiK+Hafgwdzhp+IZl2TDcNsXo=
Subject key identifier:   41:A7:54:83:E4:A9:5B:0F:FD:BC:E8:CE:D9:1A:2B:F4:A7:A0:0F:9B
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer:       /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial:       01962DF3CA2B7D3E31F39140D9194A57D961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number:          14BD
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
                          2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: Q36GeA23eQg2gD/0zT8WdttaPgqCAEt2UWq7o/F47zg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ca:2b:7d:3e:31:f3:91:40:d9:19:4a:57:d9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=41a75483e4a95b0ffdbce8ced91a2bf4a7a00f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:33:d3:2b:a9:66:b8:5c:5d:4b:b4:d6:83:
                    7e:5b:5c:93:96:e6:e6:c5:41:9e:63:e7:d3:97:6c:
                    f2:2a:07:bb:65:15:7b:4f:70:b6:b5:b2:bc:3c:a8:
                    b0:9a:92:61:8f:ad:6c:9c:78:7f:18:f0:69:a7:db:
                    eb:82:1b:a9:cf:bf:6f:47:8e:e8:50:1b:60:47:8e:
                    cc:00:41:05:4b:66:f8:5f:6b:8e:60:97:61:f5:07:
                    f8:2a:50:01:43:18:1d:de:4c:f9:1a:6c:f5:5d:02:
                    d3:30:a6:b0:6a:8e:2c:a6:3c:74:5d:e3:14:95:9a:
                    ee:84:7c:46:08:48:be:ec:d7:44:13:24:43:21:ec:
                    85:bd:50:6f:74:14:ff:1e:b4:ae:50:65:d9:ae:fe:
                    19:85:8f:72:b7:66:6f:8f:54:59:11:ba:a3:19:fb:
                    18:dc:c4:4a:9c:f4:27:01:c2:56:f1:a6:57:41:4a:
                    0e:31:03:aa:d2:8e:b1:03:38:61:15:e4:63:0b:76:
                    d4:a5:45:3c:00:0c:55:a9:90:24:d1:7f:17:2f:60:
                    06:f5:25:64:47:8c:9d:83:58:a1:b2:eb:19:86:c4:
                    0e:79:ac:a8:27:d5:34:53:89:e4:d4:ac:7d:99:1a:
                    88:b2:83:97:c6:f3:6d:12:f8:6e:a6:10:75:65:40:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A7:54:83:E4:A9:5B:0F:FD:BC:E8:CE:D9:1A:2B:F4:A7:A0:0F:9B
            X509v3 Authority Key Identifier:
                keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bf:ad:55:90:50:aa:a0:6e:e9:d9:10:4c:b6:37:95:84:f9:
         37:a6:2b:26:09:0e:a5:bd:37:be:34:4c:b9:5c:72:2a:e7:37:
         6d:0a:8a:ed:b5:94:8e:1c:4e:06:b1:a5:f1:99:c7:02:c2:6e:
         54:fb:5b:84:a0:a4:f5:93:94:3b:d7:9e:e9:51:87:b0:85:8f:
         8d:d9:25:28:f2:44:4b:98:50:f1:d8:c3:40:2c:78:03:21:be:
         ff:a3:ba:ed:82:6f:1d:24:41:2b:50:e6:17:f3:98:a9:b0:27:
         5a:f0:a2:a8:59:cf:27:5b:e2:d8:46:38:fb:79:d2:56:da:2e:
         25:5d:5e:e4:e7:68:6d:46:03:1a:d0:fa:14:c1:b2:5c:e3:34:
         21:ec:d2:12:83:71:b8:01:43:ee:5e:69:d0:18:1f:62:5b:6a:
         3c:64:c8:80:79:bc:f7:05:2f:0d:1e:c9:be:44:6c:e2:6d:5d:
         e3:29:d0:e6:99:e1:1c:03:1e:84:b9:d3:9e:71:d0:bf:ac:b7:
         e5:51:ea:f7:2b:e1:9a:74:44:f3:bb:9f:21:7e:31:27:df:a0:
         18:ab:ae:e7:11:25:dc:cc:c7:b9:5e:e6:a5:44:f3:39:6e:eb:
         21:e5:72:29:b0:c1:f6:d9:ed:dc:3d:ba:25:bb:70:4f:14:80:
         fe:5e:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----