Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
File:                     JY8HU8Azwa8JGGbQlCZFEmlspos.mft (raw, json)
Hash identifier:          UcBqP8DK9leSAa7FsVVkvkm/Lu02Itw59SlgnLucOQQ=
Subject key identifier:   5D:83:5A:08:38:F2:DD:2C:3E:99:34:BF:CE:9D:FC:03:FD:31:7E:BD
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Certificate issuer:       /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial:       01962E2B169264B1FB77DC884EF6B642C19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
Manifest number:          0835
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: BQh7QT9BX7cTqXjHHhGh4E0jau4.roa (hash: ji+6a8qXV045VZtKjEfl6cGy7fTl7ME8scmY2gpWI2s=)
                          2: JY8HU8Azwa8JGGbQlCZFEmlspos.crl (hash: cfXIdaIizkSsNhaGoW83utcEa96fArhfDputiVaDeI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:16:92:64:b1:fb:77:dc:88:4e:f6:b6:42:c1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258f0753c033c1af091866d094264512696ca68b
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=5d835a0838f2dd2c3e9934bfce9dfc03fd317ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:8c:1c:49:49:70:59:e4:21:1d:46:79:ab:
                    7c:75:84:b6:b0:ca:8f:36:70:70:0d:35:d6:c1:85:
                    4f:79:d9:57:4e:0b:e4:e4:bf:dd:0e:e6:f6:30:6c:
                    bc:ea:31:bd:2e:66:c8:ae:1c:70:20:be:78:e6:f5:
                    8f:bf:08:65:4f:23:16:f6:f6:f2:42:79:20:69:2f:
                    74:51:f3:2f:b3:7f:9f:a4:b4:5d:26:ac:cb:f2:dd:
                    61:f5:09:5d:95:86:aa:cb:e4:d2:fb:99:16:23:1e:
                    51:03:e7:d8:db:3e:85:5e:65:6c:40:1a:d7:b7:2f:
                    46:54:a4:5e:0c:ea:a3:97:45:61:c9:db:1e:df:d8:
                    cb:e3:35:cf:d1:76:ae:ff:64:2a:9b:ae:57:8f:8c:
                    88:10:c9:95:f4:1e:df:70:1d:ac:ba:7c:86:95:f3:
                    46:0f:90:3e:0e:07:48:2a:8d:ed:73:23:37:e6:13:
                    14:63:06:57:48:ad:a5:41:d4:71:88:f9:35:3a:b3:
                    7f:b0:48:fb:d2:37:8b:97:b2:3c:60:1c:b8:a1:d1:
                    aa:76:3f:d6:1d:5d:ea:fd:bb:d3:48:63:6b:5e:ea:
                    c6:0a:4f:12:db:68:9a:5c:f0:f2:3f:4d:16:15:03:
                    36:29:4a:7f:f5:40:6b:f3:c6:0a:6c:6d:e1:0b:84:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:83:5A:08:38:F2:DD:2C:3E:99:34:BF:CE:9D:FC:03:FD:31:7E:BD
            X509v3 Authority Key Identifier:
                keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:44:ee:d4:69:40:d9:ce:e6:34:39:60:71:67:ab:44:5c:93:
         a7:35:b9:f2:f4:fe:fd:54:1d:1a:78:fc:69:e4:3d:16:4d:37:
         0d:a9:e2:ba:14:ce:2c:63:98:e0:4a:d6:a0:36:3e:b6:49:ed:
         fb:6c:11:e9:93:a7:5a:24:83:e3:49:4b:10:48:40:72:17:b7:
         56:c4:72:02:06:b2:3d:56:f2:e5:43:8d:59:9d:72:7c:7a:e9:
         f9:81:cf:59:bb:f7:2d:75:b1:f2:4b:54:81:99:81:09:4f:b8:
         2a:01:42:79:1d:15:32:e9:eb:24:e1:04:39:97:bb:21:b0:a2:
         55:82:a8:15:cf:bf:0d:46:41:d6:44:47:de:17:35:de:db:f7:
         97:b4:d5:ff:7d:56:22:93:d5:1e:eb:c2:85:d7:47:c9:5d:87:
         75:72:93:ee:22:0c:2d:92:02:98:37:be:95:fb:2a:7b:8e:f3:
         1b:7b:d4:a0:bf:75:48:8e:54:da:84:29:7a:03:a9:c5:2a:83:
         bf:92:a0:d6:aa:83:d2:b6:03:97:f3:fc:28:f9:d1:ba:e9:97:
         81:cc:d4:c1:74:25:a9:59:11:e5:12:9f:f3:6a:6b:c6:2c:c5:
         b0:41:6c:ed:5c:93:13:e6:60:b7:ed:36:72:3e:0d:f0:42:94:
         6c:35:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----