Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
File:                     JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft (raw, json)
Hash identifier:          OGpOIKzozUtROpltgJnrX2YMFo0o9PYgIsoPPK0iXC4=
Subject key identifier:   6E:C9:51:93:5D:49:47:14:2A:D1:23:E6:97:25:C9:08:9F:10:19:37
Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
Certificate issuer:       /CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Certificate serial:       01962F0722CDC293CE1733111F98CB0017F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 72Lp3gMgXLCMsbrlXXDr5SM4zrw.roa (hash: adAz3jIZPGF9iKKNN5t8HD+ygmv2PMwG3grTyntjKTs=)
                          2: JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl (hash: 7Tdk1GTyqTZ0h0jxNCPiyCT94dviYFBRvD4nVP1/BJE=)
                          3: zqHV1s3_ke5VR1xw5hKua-2OaIY.roa (hash: 0keVGUwlHiXeuS1CJF1dPMcb+8zsBp943xc7umCmbts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:22:cd:c2:93:ce:17:33:11:1f:98:cb:00:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=6ec951935d4947142ad123e69725c9089f101937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:b4:bd:4e:61:b4:5c:50:4f:23:12:fc:94:
                    ab:b4:74:58:b5:4e:1f:f6:86:47:10:e6:b5:0a:8d:
                    35:b4:55:ec:f9:73:35:3d:4f:d8:33:fa:03:43:08:
                    38:f8:b0:32:95:b0:85:ce:4a:e9:8c:94:83:13:a4:
                    70:0a:40:1d:18:0c:64:9e:a9:dc:92:15:47:0f:1b:
                    04:a3:fd:69:65:25:58:fd:ae:f5:35:3a:35:39:f3:
                    0e:91:c4:21:ac:30:ce:1d:96:97:c8:43:a0:96:8b:
                    14:0c:8d:47:89:50:54:b2:e3:7a:9f:88:b0:28:23:
                    7f:65:e6:90:5a:ce:85:f5:2f:b4:d7:ac:d0:cf:93:
                    54:8d:46:df:38:92:86:15:b3:5e:f2:14:6d:13:a3:
                    c1:a5:f5:61:82:00:3e:c9:b1:3d:98:f3:55:b1:c5:
                    c3:63:a4:f3:fa:09:ed:ce:a4:d5:37:a1:8c:74:8d:
                    ed:af:e4:26:c6:51:f2:2d:ac:16:42:76:de:58:c5:
                    1b:d2:9c:ff:46:d1:9f:a9:68:40:69:1f:a7:3c:e7:
                    d0:6a:4c:d8:ba:72:09:21:21:de:5c:fb:c8:77:c4:
                    8c:bd:3e:07:b8:57:16:6e:38:bf:cc:3e:d7:85:f1:
                    ca:ee:13:37:5e:c0:73:3c:25:ef:c1:44:f2:5f:9a:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:51:93:5D:49:47:14:2A:D1:23:E6:97:25:C9:08:9F:10:19:37
            X509v3 Authority Key Identifier:
                keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:d1:19:aa:09:b9:ff:03:d8:9a:6b:2a:60:c6:ab:24:dc:
         8f:df:a1:0c:42:b4:73:72:37:32:88:b1:34:93:73:d7:a0:92:
         99:2a:51:59:95:fc:ec:b4:1e:2f:63:a1:4f:2f:3e:94:ee:db:
         73:5d:d8:48:85:e4:9e:74:35:9f:e4:b0:1f:a9:f3:d6:0f:ed:
         53:91:10:67:0c:cc:1e:d6:09:62:c9:69:17:78:d4:1b:c5:88:
         53:f1:a9:fd:d1:c7:ea:71:9b:c8:d2:8f:16:7c:2f:8c:3d:2a:
         bc:d5:26:bd:45:8c:d7:52:07:e4:84:59:d6:2c:77:31:5f:67:
         6b:8b:0e:66:70:72:7f:eb:d1:74:f6:c3:70:b7:f6:d9:fd:74:
         69:92:d1:2f:d6:cb:2f:78:bb:6a:bf:c3:79:1b:82:a8:49:17:
         88:f1:58:08:c8:e1:a0:ed:40:46:b5:42:4d:d0:59:59:72:32:
         09:15:f9:ea:18:7e:3a:30:b6:e9:45:b6:7f:93:0f:02:f8:35:
         59:12:95:80:a1:b3:ed:10:d9:68:c5:97:60:ae:5a:85:78:e7:
         67:95:b2:9c:da:f5:7e:95:8b:aa:8f:56:db:f6:1c:c1:0d:96:
         1f:ac:cb:6d:b8:10:31:18:81:e9:63:05:6e:27:58:f2:e5:30:
         e4:b0:3d:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByLNwpPOFzMRH5jLABf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ1NWY4NTJjNmFkNGEwNDEyZTVlYTMwOGFhNjYxNzJk
MWQxNDcwHhcNMjUwNDEzMTIwMTU4WhcNMjUwNDE0MTIwMTU4WjAzMTEwLwYDVQQD
Eyg2ZWM5NTE5MzVkNDk0NzE0MmFkMTIzZTY5NzI1YzkwODlmMTAxOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng60vU5htFxQTyMS/JSrtHRYtU4f
9oZHEOa1Co01tFXs+XM1PU/YM/oDQwg4+LAylbCFzkrpjJSDE6RwCkAdGAxknqnc
khVHDxsEo/1pZSVY/a71NTo1OfMOkcQhrDDOHZaXyEOglosUDI1HiVBUsuN6n4iw
KCN/ZeaQWs6F9S+016zQz5NUjUbfOJKGFbNe8hRtE6PBpfVhggA+ybE9mPNVscXD
Y6Tz+gntzqTVN6GMdI3tr+QmxlHyLawWQnbeWMUb0pz/RtGfqWhAaR+nPOfQakzY
unIJISHeXPvId8SMvT4HuFcWbji/zD7XhfHK7hM3XsBzPCXvwUTyX5pmxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7JUZNdSUcUKtEj5pclyQifEBk3MB8GA1UdIwQY
MBaAFCQUVfhSxq1KBBLl6jCKpmFy0dFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85MGFkZDgtZjNiZS00OGE4LTllOTIt
M2IzMmMxOWY2Mzg1LzEvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85MGFkZDgtZjNiZS00OGE4LTllOTItM2IzMmMxOWY2Mzg1
LzEvSkJSVi1GTEdyVW9FRXVYcU1JcW1ZWExSMFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+/RGaoJ
uf8D2JprKmDGqyTcj9+hDEK0c3I3MoixNJNz16CSmSpRWZX87LQeL2OhTy8+lO7b
c13YSIXknnQ1n+SwH6nz1g/tU5EQZwzMHtYJYslpF3jUG8WIU/Gp/dHH6nGbyNKP
FnwvjD0qvNUmvUWM11IH5IRZ1ix3MV9na4sOZnByf+vRdPbDcLf22f10aZLRL9bL
L3i7ar/DeRuCqEkXiPFYCMjhoO1ARrVCTdBZWXIyCRX56hh+OjC26UW2f5MPAvg1
WRKVgKGz7RDZaMWXYK5ahXjnZ5WynNr1fpWLqo9W2/YcwQ2WH6zLbbgQMRiB6WMF
bidY8uUw5LA9bQ==
-----END CERTIFICATE-----