Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File:                     JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier:          iHCJZeQQmG0pB2UU5i5SB6U5UbLQRopxGeEFbIOkWoo=
Subject key identifier:   FC:77:45:5F:C8:44:A4:9E:FD:9B:1C:42:F4:70:60:82:9B:AB:C3:48
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer:       /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial:       01962E61FA77675B6ABE0BB3C414DEC8DA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
                          2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: 8O3fJzWz1rr1/GBKi15NFG31tBKvpeiQtc+O/BCP/GQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:fa:77:67:5b:6a:be:0b:b3:c4:14:de:c8:da:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=fc77455fc844a49efd9b1c42f47060829babc348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:a6:d3:0e:11:8c:cf:0b:40:3a:4d:b3:9a:
                    79:ef:a1:a0:a2:6e:0e:bd:08:50:28:4b:25:e6:04:
                    40:2e:8a:e5:63:f3:26:0a:d4:34:4f:9a:ab:84:92:
                    36:c9:99:1b:17:60:25:d3:62:3f:41:b8:b2:a0:ca:
                    01:f9:66:1b:dc:c6:e4:00:f7:fc:2b:8b:66:f9:21:
                    01:32:55:7c:7e:05:39:0c:58:01:5c:eb:f0:a4:5b:
                    fa:3c:39:5c:ee:56:9b:9f:44:36:36:4e:68:04:32:
                    a8:f8:9a:2e:32:46:4e:11:19:92:30:11:0a:1b:c1:
                    40:c4:2b:00:09:16:1b:26:de:af:b7:32:f7:88:f7:
                    be:03:f4:ec:f2:c6:ae:fc:e9:6e:bd:e5:51:e8:ec:
                    8e:ce:34:77:54:e8:bf:71:db:dd:cd:96:49:6a:86:
                    c6:0c:68:d1:94:1d:b0:84:5a:9a:1a:2a:9e:b1:7f:
                    af:12:c2:4b:43:eb:48:0a:f6:80:77:3c:bb:c2:d2:
                    79:39:12:b1:01:57:f8:bc:c1:24:dc:b2:73:33:ad:
                    4d:84:5d:90:d3:ca:6e:2d:5c:43:a9:e4:e4:56:d7:
                    f8:d2:92:6c:a4:ca:39:87:fd:51:5f:5c:2e:56:e6:
                    f9:56:52:00:85:fa:02:e4:3b:43:74:66:2a:4c:ed:
                    2a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:77:45:5F:C8:44:A4:9E:FD:9B:1C:42:F4:70:60:82:9B:AB:C3:48
            X509v3 Authority Key Identifier:
                keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:cc:1e:27:0e:48:41:86:bc:fc:b3:b2:0b:0f:c7:80:e8:0c:
         0e:ee:b2:3a:d4:21:b0:30:53:28:d9:1a:62:9b:6b:d2:6b:4d:
         23:1f:da:47:f4:f0:b7:51:14:4d:06:3a:53:75:32:d1:15:f4:
         c6:66:d7:84:4f:f9:01:a9:9b:48:d0:e3:16:e6:1c:45:dd:d0:
         e4:a1:b9:ff:44:bf:39:ec:c5:cc:21:e2:6a:14:00:8d:aa:95:
         70:f3:d5:45:15:06:91:99:f9:3c:f3:8c:c1:df:7e:5e:63:55:
         57:6a:29:dd:a9:eb:61:72:30:46:9a:d0:59:98:7d:c9:af:98:
         48:b0:af:bf:36:e1:a4:66:3e:4d:ba:ab:d7:20:25:50:bb:ed:
         ff:cd:b3:d4:0e:f9:f9:3f:ec:bc:38:1a:16:f6:38:78:80:4e:
         16:3c:3d:77:a3:1f:0b:01:0e:32:e0:ed:f4:31:21:ba:6a:17:
         e9:a5:9f:86:f1:08:40:88:6e:ed:6c:bb:c4:5c:8c:3b:8f:ee:
         6b:3f:4a:78:93:01:60:d4:1d:c4:cb:ae:78:b1:5e:e5:10:3a:
         fe:52:7e:c4:db:75:2f:bc:89:3a:e8:ce:55:2b:5e:0f:f2:6a:
         4f:46:ae:95:09:c1:4f:3d:62:82:3c:97:9a:97:aa:ec:74:a5:
         14:99:72:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----