Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File:                     JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier:          wH9W/65aEwGt6uC4Zg1RSt+CW46e4ltIdjJ2GWux+Ek=
Subject key identifier:   35:B7:B7:B5:25:D8:9C:27:54:3F:95:70:4D:C2:CE:73:7E:5B:68:5F
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer:       /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial:       01962FAB59544312866B2F461B0DD820B1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: dUEuWdOOPHitKNUi2UItwKPYakL9xpd6rdxwO5QGtpo=)
                          2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:59:54:43:12:86:6b:2f:46:1b:0d:d8:20:b1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=35b7b7b525d89c27543f95704dc2ce737e5b685f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:04:8a:80:ad:42:ae:2e:cf:30:2f:16:61:
                    8d:08:a6:96:1d:0c:3e:3b:b8:67:bc:f8:e9:ac:14:
                    60:ed:89:d4:fc:3d:4f:21:15:43:87:e1:79:87:66:
                    a4:43:e1:57:0d:4e:a5:5e:86:ed:9e:7b:a1:48:21:
                    37:6a:0a:69:fc:24:23:a5:eb:64:35:bb:a6:36:c8:
                    53:c4:8b:c9:56:7d:c4:aa:af:e9:c2:fd:39:e7:66:
                    ba:38:19:4a:bd:f4:ec:c0:1c:9d:9f:25:e5:5f:90:
                    b2:6d:0c:db:6d:b5:c2:6e:44:af:70:12:bf:90:7f:
                    4d:ed:63:be:18:42:34:3e:da:e4:c6:6c:67:0f:b5:
                    44:06:d7:c9:d7:af:a4:7b:23:77:3c:32:38:c4:31:
                    43:5b:ec:6b:b2:7b:fd:70:a8:b2:fc:f4:06:34:98:
                    73:d6:61:da:8c:f6:c0:fe:7c:48:b6:23:6a:46:5c:
                    d1:16:35:fa:2c:a1:3b:17:67:18:be:ff:92:c0:37:
                    25:e5:8a:f6:8c:35:19:d2:8d:e7:d7:42:7d:e5:59:
                    2c:9c:4e:c7:4e:e7:e5:dd:e9:b0:aa:4f:19:a7:7d:
                    9b:a2:5e:e9:3f:ab:d2:e9:2b:24:2f:6b:fc:f0:06:
                    af:e3:ad:5a:cd:d6:5e:e2:8d:48:61:64:f6:9b:69:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:B7:B5:25:D8:9C:27:54:3F:95:70:4D:C2:CE:73:7E:5B:68:5F
            X509v3 Authority Key Identifier:
                keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:83:c6:46:28:91:8a:a8:48:02:ae:64:ab:f0:d5:b2:75:
         61:7e:c1:7d:4e:33:fe:c9:59:9a:2e:db:9e:43:58:5b:53:ec:
         68:d7:28:18:e7:2b:eb:79:d7:a5:95:79:71:0e:4e:ef:de:2f:
         c9:2f:7a:96:9d:17:c4:53:8a:7d:10:62:26:ca:b7:4c:82:14:
         40:93:17:35:e1:49:aa:7c:8b:33:70:94:91:04:7c:57:cf:8a:
         00:ff:d9:3e:03:b2:8c:e3:60:0e:0b:07:8f:91:3b:2f:23:f5:
         61:0f:94:2a:d3:3f:9d:da:96:87:53:d3:3c:37:72:48:3c:15:
         0e:8d:86:f3:0b:21:bb:94:96:24:20:03:ed:e9:c3:16:a6:30:
         ef:a3:27:b6:11:9a:b2:dd:7d:97:3d:5f:d3:a1:9f:7b:a5:a6:
         73:12:75:b1:31:11:ad:75:e9:17:c8:50:bb:9a:ee:d2:3f:ea:
         00:65:b4:aa:c4:3f:67:e9:18:43:33:f3:31:e6:f1:81:4f:8a:
         8b:13:e5:b3:a6:6b:ef:f2:a4:f7:e4:39:e1:80:05:e9:55:f0:
         fa:d6:91:a6:8a:00:94:d6:58:f4:77:b7:35:21:29:03:a0:76:
         9d:45:15:52:68:8c:6a:5d:64:48:13:6d:7b:4c:de:d2:cf:89:
         11:62:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----