Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File:                     JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier:          a5EuOphqtzfaDw8ZL8897ueil1hASFzfUkeRIv01bFg=
Subject key identifier:   31:4D:4F:FD:0D:BA:8A:30:59:CE:68:82:79:02:C5:BF:8B:0C:7D:82
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer:       /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial:       01962F3D62600E33C0EC6082B639C239D515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number:          023A
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: v9cmfs9dXFvwIao9B+T2AaNEVPvd5gaiaJl20hD3DYs=)
                          2: h7fbgIdbSscgO_YAEoL2izsx0aU.roa (hash: b6MfVV56XvIQObG8YUHRDlYJr5JSPkYRhFBNakc5qf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:62:60:0e:33:c0:ec:60:82:b6:39:c2:39:d5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=314d4ffd0dba8a3059ce68827902c5bf8b0c7d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:eb:dc:4e:5b:5e:3a:4a:a6:75:d6:14:b6:
                    78:15:6a:8c:c5:d0:b0:1a:1e:ae:ed:d5:08:7a:0d:
                    c2:11:c7:dd:0c:96:78:e9:c6:92:46:f2:45:85:b4:
                    4b:6e:6f:20:7f:61:9d:58:8e:65:ba:48:d8:0b:3e:
                    b0:6c:b0:a8:3d:c3:73:41:34:19:cd:b3:f7:33:fa:
                    a6:2e:8b:35:74:bb:98:bd:78:20:b7:7d:84:2c:74:
                    85:c1:83:1f:67:9b:3b:cf:4a:30:d1:8f:18:74:f2:
                    2d:40:ce:4f:6f:da:bb:3e:2a:2d:c6:54:c1:c1:24:
                    b7:7c:14:14:2e:cb:67:5d:a4:1a:aa:00:02:66:a5:
                    c7:9c:a8:62:e3:95:fd:8d:19:13:b9:5e:1c:a4:3b:
                    05:82:9e:2d:bd:f2:46:76:2e:95:81:ff:99:d9:fd:
                    c9:c5:e8:21:bc:e9:17:57:f4:bd:e4:27:a7:07:2f:
                    c2:52:a2:e2:12:0e:45:6d:ee:60:4f:a0:fc:74:17:
                    a3:6c:0b:1b:2a:d3:6b:40:dc:b8:88:fd:af:96:3e:
                    01:ad:e5:a9:1d:64:92:8e:22:1e:18:c6:05:e3:35:
                    5b:96:31:8d:4e:e1:09:36:ab:61:c8:5c:6b:5b:05:
                    cd:9f:e5:bd:87:c0:bb:30:8d:4f:ac:4e:f5:d1:ce:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4D:4F:FD:0D:BA:8A:30:59:CE:68:82:79:02:C5:BF:8B:0C:7D:82
            X509v3 Authority Key Identifier:
                keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a1:d1:4a:19:27:37:cb:75:0d:3c:6a:05:06:d6:b5:b4:f1:
         e0:6d:48:3b:ff:86:87:44:f4:3c:9d:cf:70:e1:d3:30:4f:fc:
         8c:08:32:ae:84:b9:d5:b3:69:92:51:a4:58:9e:c5:1b:ac:2f:
         cd:9d:3c:a1:f1:8f:0f:e4:52:9a:f1:42:09:c8:1a:4d:44:70:
         42:96:27:6e:44:36:6b:db:b5:6f:2d:1b:f6:a1:93:c2:9f:26:
         43:1c:34:a8:5b:f3:f8:9b:32:a9:dc:8a:a0:52:32:89:e2:0f:
         d3:94:0c:db:0d:fa:f8:0b:54:28:66:b5:6e:96:c9:94:82:f9:
         2b:58:24:85:06:b8:3f:37:0e:18:a3:63:9b:f7:1e:d0:a4:af:
         e2:bf:a5:06:3b:9f:b5:e7:4d:ff:11:9e:ad:21:4b:c1:63:19:
         ef:3c:71:fe:48:13:f6:4d:b6:6f:a4:37:c9:85:e9:e9:1c:6b:
         66:5d:6c:9a:ad:a2:94:01:6d:21:f1:e4:d1:56:e0:d1:da:34:
         44:2f:52:41:8b:d2:55:9e:38:40:92:f1:4c:95:9e:e6:8d:f5:
         79:7b:c3:09:f1:52:0a:60:71:3c:57:b8:82:f6:56:f0:bb:3b:
         f1:3f:f8:24:14:55:89:6f:25:2f:7d:7c:90:82:52:5c:a3:5d:
         d1:7c:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----