Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
File:                     JgsrxFR3yB13TaoMKKtEt3S6CSA.mft (raw, json)
Hash identifier:          tk47xzQxMX6aeVNlQjUZoFNxQq/SLMmHG/9ewpd9XcE=
Subject key identifier:   55:9C:D8:72:AB:58:F2:2E:E7:53:A5:DB:D1:8F:C3:9B:75:EB:EC:9C
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Certificate issuer:       /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial:       01962DF42C14B75E0EC829696A4FB8467B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft
Manifest number:          0C4F
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 1-vjUFL9eUKNOH3DNHSKdRzXwLrc.roa (hash: E1OFkXJ2w0WBHM/2jJG2VFE7A0dOsn0uyLBEvDN92CY=)
                          2: 9Qp1lz6gdlmei4XDqjlb77aIr4c.roa (hash: /GHn25dkvuTMHnSPHF1/eiqXw/UVrF8KRTTdkWjQJCk=)
                          3: ElmmUi2BA5xfl3RGwKTnaLyhbiU.roa (hash: 7/HLb9yrgfenir+DMxSIjZmUv+UwMCuizDLWvP+aaNw=)
                          4: JgsrxFR3yB13TaoMKKtEt3S6CSA.crl (hash: yT4aSKT3C4H3ciLfguLh8jc3YIwJHp9/0cf4y9V7UBk=)
                          5: OoWG_qUOKobANwv8GdWbdC9EzGI.roa (hash: ojlwgHlGVCo79U+2HtNET72d053A1HIA6lyxaxpjuI0=)
                          6: TiJ8h1qlcilwepecSwvXjw5DbUQ.roa (hash: i3FrVocCPmFO/RIdZF92/i/Jo2J9RsAjOqfHgmiRxmw=)
                          7: YHHGCGfkm3-ojbm89zUZpVdC4H8.roa (hash: UELjE4JA89B/hW6SiWgp/75eVMvYsE/BMGGrkk8YeKo=)
                          8: YLMZPsprpRxhmDT0WIbhqx6F--Y.roa (hash: tFoaXBl2VXqD6JFS6seQ88nt8uiv/guhHad/lARB2fE=)
                          9: csEf9syoFNTGaMlU5MhYUuOIBiQ.roa (hash: SLfRD5P3fO1tXNQj8q98v89NmGiqv9196LApLqBPnXA=)
                          10: en8nzWGtf10islE8QqdlR4YhdFI.roa (hash: U8OOoKnf7CTO1HtbX3OrrQUalNfVeLzf0c6wknYG0oc=)
                          11: pAFGuOmFiinmNtzDNIWAAHCBzL8.roa (hash: smnkSIWrC+aFHsjL39EpGOubWh1B5xY83hqBzhP60WM=)
                          12: sNX7m19Q4f93jZSLto3SXxcMlN0.roa (hash: 6kJ1u/k/CP7HU6lSzylQyIDCN0aXiAlRkfuNvpisAHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2c:14:b7:5e:0e:c8:29:69:6a:4f:b8:46:7b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=559cd872ab58f22ee753a5dbd18fc39b75ebec9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:32:41:d3:1c:df:36:5e:08:6d:06:c6:f8:
                    68:49:82:d4:20:81:0e:88:58:4e:23:d0:91:49:5e:
                    36:78:cd:ff:62:67:06:6c:48:65:66:e4:7f:91:94:
                    a9:7d:ff:ef:30:95:5f:c5:15:6a:68:3b:82:c0:83:
                    1f:8c:64:b0:44:d9:64:c8:09:b4:1a:ce:69:33:c7:
                    c7:c9:2f:e4:83:5b:bf:0f:6d:85:b2:eb:50:6b:10:
                    07:5e:a2:f1:31:8a:1a:e5:a3:14:cb:26:6d:ab:c2:
                    c5:0b:8c:59:41:87:6a:68:8c:3d:ff:10:4c:35:71:
                    76:66:7b:b7:72:17:b5:9c:ab:45:3a:ef:a8:6f:3e:
                    3d:23:74:45:d7:aa:99:70:41:4b:eb:6a:fc:1d:ce:
                    86:b5:87:14:d3:94:45:83:63:28:99:e0:c7:dc:71:
                    ae:96:fc:6a:08:cc:28:21:a1:ed:ca:55:d4:95:41:
                    72:82:a7:f1:f5:92:e0:36:46:ef:03:73:bb:cf:7f:
                    ac:78:04:f8:56:0a:0d:b0:6d:16:15:f4:79:04:ae:
                    70:1e:87:06:79:f0:90:ff:84:63:eb:b9:41:90:57:
                    b6:f0:7c:64:b0:ce:7c:f9:e3:77:2e:c3:30:22:25:
                    00:bc:49:6d:4b:c4:55:53:6a:78:30:82:fb:c4:b1:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9C:D8:72:AB:58:F2:2E:E7:53:A5:DB:D1:8F:C3:9B:75:EB:EC:9C
            X509v3 Authority Key Identifier:
                keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ae:89:a2:81:e1:4d:79:1e:de:85:24:f5:68:40:3c:9b:b0:
         af:21:44:3f:b2:f3:00:43:da:d1:8a:58:a9:ef:83:35:e3:ff:
         04:cc:c9:75:54:03:97:6e:95:41:37:a4:72:44:81:01:1b:5c:
         56:b9:48:92:4a:92:f4:e0:7d:57:93:f5:8d:49:ae:60:0b:44:
         f8:5a:35:63:ec:5d:c0:8e:24:82:36:9e:f7:30:ee:98:fe:d3:
         42:21:a8:c2:33:4e:e0:fa:5d:27:a2:42:c5:10:a6:e9:ed:6b:
         59:72:e2:ba:7c:44:de:52:65:51:1f:99:a7:66:26:a6:80:93:
         49:6e:a5:18:f7:d4:4d:f2:52:3e:1e:32:4c:6b:39:fc:42:cf:
         cb:d3:52:db:91:33:ca:88:57:2c:1a:63:36:e9:93:18:7e:c5:
         d2:51:a0:87:e3:fd:7f:3a:55:fd:d0:63:cf:5f:fb:ca:94:5c:
         d3:31:ad:95:f7:13:03:54:4b:b2:59:14:a8:7d:3f:5e:8b:0c:
         13:84:c2:f6:8b:dc:f5:c8:58:bc:69:89:0e:7c:6f:5d:0d:9c:
         3e:08:dc:fa:61:43:b4:9a:db:9a:f5:ba:4f:f1:03:6f:7f:6c:
         31:ed:d8:5f:72:51:ab:3f:df:a0:f1:94:a9:65:bd:59:3a:87:
         f5:ae:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----