Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
File:                     JGJNNpZGiPmJxkSsIBH0Fl086wc.mft (raw, json)
Hash identifier:          6zSnmR49YIdq+b5seQcEgaNkpaYufL6dToqcb1U6yh8=
Subject key identifier:   F3:EF:8B:6B:CF:79:F2:DC:9C:BD:B4:00:A3:97:29:56:F6:63:26:34
Authority key identifier: 24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07
Certificate issuer:       /CN=24624d36964688f989c644ac2011f4165d3ceb07
Certificate serial:       01962E98A46505A6614B84E22D694EDDF4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft
Manifest number:          0842
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: JGJNNpZGiPmJxkSsIBH0Fl086wc.crl (hash: +VwfXuuaFNjltHrg8Rok8iKLqKIL6UZ7wgJ0jYAJJ+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a4:65:05:a6:61:4b:84:e2:2d:69:4e:dd:f4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24624d36964688f989c644ac2011f4165d3ceb07
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=f3ef8b6bcf79f2dc9cbdb400a3972956f6632634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:35:1b:0f:85:52:47:66:dd:25:24:97:2e:
                    92:e8:8b:dd:cb:25:05:83:07:ce:34:99:08:cb:90:
                    c7:aa:5c:86:6c:a8:bc:fb:71:c5:2d:33:50:79:e7:
                    35:33:e7:8f:e1:60:d3:38:2e:04:8b:29:d6:ca:8e:
                    67:27:9f:a7:c6:65:e6:f2:de:2a:05:e2:63:f7:61:
                    88:9d:b6:1f:8b:b5:7e:2e:e7:20:17:d7:af:9c:51:
                    c1:ff:86:ed:9f:db:be:df:a1:23:6b:c5:47:4f:a8:
                    0a:5a:f6:e8:60:33:7f:b3:18:1d:a4:ba:77:d8:80:
                    69:9d:0b:16:19:45:39:e9:04:92:67:23:36:48:c1:
                    7b:ca:2e:70:0b:eb:53:0f:13:50:e6:04:68:b9:27:
                    56:51:ad:7c:3e:ed:01:17:1d:d3:7d:02:55:0b:8d:
                    e8:00:51:e6:c8:f7:1a:be:5e:94:82:8d:ad:76:c8:
                    aa:1f:67:c0:94:06:83:df:e7:c4:a5:ab:dc:3f:d3:
                    da:8f:c1:80:53:b8:2a:ba:a1:53:54:3a:84:34:80:
                    80:29:84:eb:8b:b7:76:ba:12:1f:64:11:b7:60:e6:
                    a4:90:77:45:62:a9:0b:1d:42:19:e9:a5:91:5f:3a:
                    d9:0a:0d:d5:5a:da:c5:ec:e4:1f:f3:7f:23:ed:74:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EF:8B:6B:CF:79:F2:DC:9C:BD:B4:00:A3:97:29:56:F6:63:26:34
            X509v3 Authority Key Identifier:
                keyid:24:62:4D:36:96:46:88:F9:89:C6:44:AC:20:11:F4:16:5D:3C:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGJNNpZGiPmJxkSsIBH0Fl086wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/739291-2d5c-4c1d-9079-027e8c09146b/1/JGJNNpZGiPmJxkSsIBH0Fl086wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:cd:e9:4c:b2:04:1b:4e:2a:7f:f0:c9:c0:6a:13:13:a9:74:
         40:60:2d:20:80:e2:80:8e:ea:3e:73:01:d5:4f:df:f7:2a:16:
         6c:89:8c:dd:08:73:fc:3a:60:20:55:dc:37:ce:f6:d4:f5:1c:
         c7:ab:7d:b2:c9:01:06:16:4c:ed:02:1c:26:64:a0:c0:b1:1e:
         61:e6:0a:1c:53:5e:b2:f4:71:75:cb:22:8b:bd:87:7d:87:7d:
         ea:b7:94:18:db:3f:57:eb:52:b7:3c:c8:7d:7f:2f:8f:24:fb:
         67:19:4c:27:70:51:94:d7:8c:41:d7:88:12:cb:0b:fc:0f:bb:
         fe:0f:a2:12:f9:49:48:9d:a8:5a:93:54:d2:f6:fd:83:76:cc:
         f5:9d:da:03:dc:2f:3e:49:ec:2e:a1:2e:0a:fe:7b:a1:e4:12:
         03:40:6d:9c:38:6f:c5:9c:35:4e:96:03:31:9a:6d:0c:95:1c:
         16:45:88:b2:c8:e6:fc:38:92:d9:8f:5f:84:21:90:a1:71:22:
         23:cb:c1:cd:4a:26:2d:9d:f4:cd:95:22:4f:0e:02:67:00:88:
         49:1e:df:7c:3b:9c:17:4f:0e:69:5a:7e:39:2e:8a:00:1a:3b:
         ce:ce:da:23:1d:8d:b0:78:14:2a:7a:4c:a8:4a:52:4c:6a:b8:
         51:72:17:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----