Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File:                     JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier:          BI2y/nPqCr1nz15dIk85kEXmB/Oztl83joUAiwKGuXQ=
Subject key identifier:   85:D2:36:B2:BA:E4:DA:C8:85:24:6C:BF:40:38:85:7E:D4:52:EA:F6
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer:       /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial:       01962E2ADAC74D216513036E08319AE64A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number:          1097
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
                          2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
                          3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: kCOUXkrNTMwGx0/IDYt1iXHwF0PfJ4LsWJy1Kk1WHn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:da:c7:4d:21:65:13:03:6e:08:31:9a:e6:4a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=85d236b2bae4dac885246cbf4038857ed452eaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:c1:55:fc:3b:b1:dc:47:84:23:b3:44:c4:
                    bc:d1:8a:d7:42:e0:46:01:2d:f6:45:fe:bd:a8:62:
                    bd:fc:f6:7f:ea:81:19:92:9b:94:ba:5b:21:33:60:
                    4f:62:c0:e9:8b:2f:e8:dc:e5:c8:63:91:ef:31:eb:
                    3e:c4:b8:8b:fd:f3:14:67:5a:71:06:21:13:38:7e:
                    57:96:65:03:75:55:e0:fb:41:16:34:15:8b:33:bd:
                    f1:37:6e:a9:b7:ea:e1:56:15:fa:99:27:bc:d8:42:
                    89:ce:71:4f:f9:d8:13:5f:82:a4:08:89:12:cf:32:
                    e5:0e:eb:c5:52:9a:b2:d5:4b:41:ba:c5:a6:fb:ac:
                    b0:ca:7e:af:07:49:f2:87:45:85:e1:da:eb:e9:84:
                    a7:c8:84:8d:ac:b6:0d:55:0f:f2:f4:5a:d6:7e:be:
                    54:74:bf:06:a1:1e:3e:0a:76:73:56:9c:9d:9c:18:
                    d6:fa:10:77:4f:32:8c:7b:40:17:80:88:74:26:95:
                    6c:8f:7f:72:04:d7:26:ea:6b:42:95:3d:c0:a0:aa:
                    08:6e:c4:cc:45:d1:14:39:3c:e0:02:cd:90:fe:ad:
                    2f:9c:e8:5d:3f:8f:46:6b:32:42:59:a4:c8:85:dd:
                    f3:48:87:25:dd:3b:e2:c9:a7:92:2e:dd:01:4c:77:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D2:36:B2:BA:E4:DA:C8:85:24:6C:BF:40:38:85:7E:D4:52:EA:F6
            X509v3 Authority Key Identifier:
                keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9e:e0:4f:4d:1d:e8:4f:90:ad:5e:75:63:a9:fe:18:bf:2c:
         fa:23:c1:ad:20:b4:91:65:2b:a6:ca:e2:7b:1f:c5:e2:6e:dc:
         74:89:c1:5c:c6:0b:ef:6b:d0:28:cb:0e:fd:43:f4:9e:33:5f:
         a7:9f:e4:35:2f:4c:d2:78:a0:ce:4c:36:4c:62:fc:e5:b4:72:
         27:73:93:da:55:cb:bd:8f:37:1e:74:42:17:04:24:9d:9a:61:
         27:f6:85:b9:96:47:12:ec:30:12:ed:48:1d:a5:9d:fe:30:e2:
         41:78:0e:b7:37:bc:78:19:8e:a1:cc:79:c0:75:4a:76:09:d6:
         b3:c4:bf:9c:8b:45:cd:a4:cf:24:c9:35:18:bc:2a:de:c0:a1:
         2e:4b:ea:6d:2c:f1:24:9d:c9:23:01:b5:25:24:36:34:61:db:
         6f:e6:b6:1f:92:49:cb:c0:20:c0:c0:7e:d7:f2:1a:20:7e:47:
         38:c9:29:e6:90:47:0b:af:82:f5:23:5e:a8:b0:4c:46:da:6d:
         1e:64:22:ef:57:a0:f8:89:68:47:e1:68:ee:d5:72:8a:a6:3f:
         99:06:ef:12:a0:5f:8d:a4:28:85:8a:4d:ee:d5:4f:fd:fb:3c:
         30:aa:22:81:b2:6c:80:54:f2:3a:76:e6:db:f8:32:e7:b6:7a:
         9e:4a:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----