Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File:                     jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier:          2slKApE7VgFAzd8P/A/Rtq6ksOWSQdtrFCO0Rg/4pKw=
Subject key identifier:   FD:F3:A1:66:83:6D:B5:41:1E:1E:74:D7:9E:A1:84:FC:7E:F9:7A:2A
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer:       /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial:       01962F06F7E986409FE24F4AE690C4D75FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: +FId3KAsGzrxwfDGj9K1uWk0e0s0/6F+Mv2i/9K3vdo=)
                          2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:e9:86:40:9f:e2:4f:4a:e6:90:c4:d7:5f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=fdf3a166836db5411e1e74d79ea184fc7ef97a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:0c:e5:0d:ac:ea:51:7e:8f:e0:95:e6:af:
                    a4:0a:04:c9:38:cf:9e:4e:51:9e:a0:fa:e4:7d:91:
                    5e:36:99:b3:ea:98:dd:6a:73:14:3e:3d:5b:7a:6b:
                    df:c9:23:9c:4d:a5:b1:3a:ce:d2:7b:b9:3b:b7:8a:
                    62:7c:1c:a2:fe:96:ac:ed:d5:07:6b:db:a2:36:4d:
                    e7:c5:bf:b4:0c:15:04:f7:f6:a5:e9:7e:43:b0:77:
                    f1:52:de:b6:24:ff:07:3c:47:9a:99:ed:dc:d4:06:
                    35:bb:05:29:cc:36:90:45:48:41:ee:d7:6f:d9:83:
                    03:22:9d:12:5c:36:e1:9e:6d:77:42:30:02:38:9a:
                    58:99:29:f3:07:a5:c2:0d:0e:66:d8:35:e1:3a:47:
                    55:61:cd:53:12:9d:97:78:ef:cc:f6:ec:78:cf:fb:
                    1d:28:74:26:d1:5d:58:6b:9e:3b:16:75:53:85:68:
                    ca:e3:ef:be:7e:a9:a5:e9:1c:93:bd:5f:2b:57:6a:
                    35:63:fb:56:f9:3b:37:e0:d5:64:01:07:12:be:85:
                    82:50:40:e6:c6:35:4c:83:ff:5b:71:2d:78:91:6c:
                    98:b9:df:1e:5a:97:49:18:70:9d:ff:30:ed:9c:70:
                    9e:2d:e8:17:55:df:ab:47:d5:ac:f2:49:04:e7:95:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F3:A1:66:83:6D:B5:41:1E:1E:74:D7:9E:A1:84:FC:7E:F9:7A:2A
            X509v3 Authority Key Identifier:
                keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:67:6b:27:4a:b7:b9:15:bb:90:21:00:c6:07:23:4f:68:76:
         87:85:38:fb:44:9d:1c:39:b2:4a:9b:da:86:4c:dd:8d:b4:e1:
         2c:d3:52:c4:97:5b:16:1b:df:fc:a9:5e:a7:04:1e:e3:66:dd:
         e4:f0:44:e0:80:af:c4:42:5a:b8:48:ae:60:56:94:26:21:1b:
         95:e9:81:c6:ad:0b:52:57:c6:ba:7c:8a:be:93:04:2c:55:c8:
         c2:c1:75:0f:73:fb:c4:68:3e:8d:08:2f:5a:51:69:d0:c5:23:
         5e:a4:39:06:27:42:6d:d0:e3:1a:aa:59:a4:05:04:8a:69:51:
         72:ae:96:59:5b:99:cf:07:de:4f:47:08:9a:a6:c9:7d:f2:ec:
         d3:6d:43:fc:6c:4c:c2:4b:42:40:2f:27:e1:17:ea:65:a2:ad:
         df:7a:e5:4c:9a:91:65:98:14:fb:29:2e:65:7e:c8:19:2f:fd:
         14:dc:59:f1:19:a7:c5:bd:5c:cd:2b:79:73:de:6c:ad:ce:f6:
         33:2c:f8:ff:3d:ec:b5:79:71:cc:82:78:6d:e7:47:fe:0a:bf:
         c6:2b:99:da:16:63:3c:1d:69:3a:cf:96:d2:ac:9c:34:6c:df:
         b0:e8:21:03:84:d6:4f:cb:e9:34:78:09:d5:d5:f2:67:33:a0:
         00:56:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----