Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          p/AppqrkkHt3IcBLNLtewkizaGbW1bNsmylF1aoFJdI=
Subject key identifier:   10:A7:10:95:AF:06:9D:35:41:BE:86:0E:C4:78:B8:A5:92:C6:F1:2B
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       01962F74EC3EE330BA0B222EF6591B4FEFA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0BB9
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: Mcj/ir+8+WuOmjn7bJZxtBH4CE1w6BGLDh6i2bn9tcM=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ec:3e:e3:30:ba:0b:22:2e:f6:59:1b:4f:ef:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=10a71095af069d3541be860ec478b8a592c6f12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:b6:7a:45:55:72:66:2e:86:cb:f0:68:95:
                    fd:68:5b:3a:ce:ef:09:cc:d0:38:f3:4e:49:47:b0:
                    dc:e8:ae:7d:c5:a2:34:de:b2:56:1d:7f:9e:0a:dc:
                    ec:b0:13:54:7d:a8:17:68:5e:7a:d7:40:75:59:a1:
                    fa:5c:72:89:d6:c1:03:a8:21:ae:9e:e9:cd:36:57:
                    43:8a:ad:0e:30:00:fa:e9:e8:cc:9c:76:86:57:1e:
                    71:83:bd:83:6b:f6:74:a1:c9:00:4c:19:0e:bc:a9:
                    b4:5b:b7:e7:98:af:1b:13:f8:c8:83:c0:8d:1a:97:
                    95:16:85:6a:c1:2d:25:6a:19:7e:22:0c:ba:ac:89:
                    11:c6:c4:de:95:4b:4a:1c:db:a8:f9:9b:14:2c:bd:
                    a4:25:cc:8b:d6:e4:d3:d8:19:bb:09:a0:1d:16:1a:
                    b7:08:33:15:40:88:b7:4d:73:4c:98:ea:91:cf:11:
                    a9:94:f9:58:93:eb:1b:91:d5:f3:b4:5f:c3:25:3d:
                    df:f2:05:ec:d3:32:4d:c9:ca:35:41:83:ba:84:b8:
                    4c:0f:32:f0:79:88:3f:ac:a6:de:22:7e:13:d2:b3:
                    9c:80:53:b1:6f:02:6d:3a:73:29:ef:8b:ff:34:e8:
                    b8:e2:89:95:e5:76:ee:37:63:fb:b2:cc:dc:28:32:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A7:10:95:AF:06:9D:35:41:BE:86:0E:C4:78:B8:A5:92:C6:F1:2B
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5e:77:22:cc:8a:79:d9:3b:aa:8b:fc:af:b6:a1:ce:1b:a8:
         d5:d8:82:9d:0e:ca:d0:d1:19:18:63:ef:e7:ad:f1:b1:8d:84:
         0f:b0:3a:da:41:d9:47:29:d2:ab:ef:78:ef:d4:1b:cf:ab:4d:
         ce:a8:db:03:57:4b:7a:77:99:ad:42:4d:b9:2e:fd:24:06:0b:
         f4:41:e7:b4:9b:5a:6d:db:13:95:5d:dc:54:64:28:d0:5d:9a:
         32:ba:53:b0:95:70:7c:6f:44:59:9c:7b:db:e2:5e:20:05:43:
         de:c8:59:99:80:df:18:6c:d5:4d:df:cf:8c:ce:cc:0d:bc:d5:
         b8:42:2b:27:67:13:53:11:3d:c0:a3:40:81:7c:32:67:00:30:
         10:58:de:fd:90:6b:0b:65:cd:bd:dc:d5:2e:51:83:c5:33:ff:
         29:dd:16:70:61:78:26:bb:b0:b0:4f:94:56:15:4d:8c:10:45:
         97:dd:93:d3:da:6a:7e:91:46:f5:69:22:8f:3c:08:82:6c:91:
         4b:31:a6:b7:5a:e4:29:cc:92:5b:4e:70:99:8b:99:44:6f:0f:
         a6:73:e8:da:95:2c:dd:5c:c7:62:59:e7:22:0e:94:32:ea:2d:
         ac:fa:c0:3a:fc:72:b2:f6:0f:87:91:d4:6b:a9:25:e8:bd:63:
         34:94:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----