Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
File:                     Jnzx804vAQuQLcFCRVtrtzJs8I0.mft (raw, json)
Hash identifier:          d6uk0z5LSEKLJhSAKaerh1YJpg25lyS03h4i51Rk1ZM=
Subject key identifier:   AE:32:9A:E2:CE:65:FE:AA:C8:02:0D:E7:8A:E4:7D:F9:84:E2:E1:8E
Authority key identifier: 26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D
Certificate issuer:       /CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
Certificate serial:       01962DF3CCBFF92082E044BBDEE537803668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: Jnzx804vAQuQLcFCRVtrtzJs8I0.crl (hash: fkeZN0wJEqG9nDpyK6SBXzbfc4Na9QCUI1jd4NkKycM=)
                          2: aHRmXP7rOhW5b0_ChkibljQ32q4.roa (hash: T5y3LNiPd6ixiV1aW5ySaidO4jWDcaXEXf35DBj0+Xo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:bf:f9:20:82:e0:44:bb:de:e5:37:80:36:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267cf1f34e2f010b902dc142455b6bb7326cf08d
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=ae329ae2ce65feaac8020de78ae47df984e2e18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:d4:ef:9b:0f:34:c0:e4:ff:16:f3:b2:46:
                    cb:37:55:76:03:f8:ce:c3:73:ac:b9:ca:35:6b:ca:
                    c7:2b:3a:59:a9:bb:fa:a1:ec:81:1a:f0:dc:36:aa:
                    a4:8c:49:fe:5d:8f:17:4d:58:cc:44:a0:28:5a:02:
                    9b:42:6b:bc:42:1a:43:b0:9d:03:0f:da:3f:a1:fb:
                    b9:83:21:14:e9:00:48:41:4c:e4:d9:ff:fc:39:43:
                    e1:c7:3a:ab:67:55:c5:65:7f:73:ef:40:7a:ed:b9:
                    f0:8f:e1:02:18:41:2d:a9:87:b0:cb:fc:aa:bc:5e:
                    12:ff:bc:70:5d:71:27:c6:40:22:c0:14:64:d4:6d:
                    cd:5d:07:86:e9:0b:ac:ac:b6:75:25:98:1b:43:f9:
                    3e:35:e6:c1:24:77:99:32:19:71:02:0a:cc:5b:3e:
                    b4:e4:a4:2a:ee:79:ad:af:d2:60:00:4f:ec:af:0b:
                    4a:af:7e:0d:ea:da:7d:a7:de:a4:f4:04:f3:a7:a4:
                    06:76:91:e3:04:a6:84:b7:76:e4:66:e4:cb:e6:aa:
                    3e:37:43:99:34:92:a4:8f:ac:42:f4:da:3a:74:2f:
                    81:b5:2c:bc:cf:94:f6:86:2e:4f:af:6e:dd:0d:1c:
                    d2:75:1a:d4:02:de:a8:ec:16:ff:cb:ce:4e:04:e0:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:32:9A:E2:CE:65:FE:AA:C8:02:0D:E7:8A:E4:7D:F9:84:E2:E1:8E
            X509v3 Authority Key Identifier:
                keyid:26:7C:F1:F3:4E:2F:01:0B:90:2D:C1:42:45:5B:6B:B7:32:6C:F0:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jnzx804vAQuQLcFCRVtrtzJs8I0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/91bcd8-a1f7-4fb1-b288-011b451b45b4/1/Jnzx804vAQuQLcFCRVtrtzJs8I0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:27:84:72:c9:68:f1:b4:a4:6d:e8:01:8a:25:66:7e:a8:
         4b:29:a0:cb:ed:79:f1:ec:9f:7c:45:cd:01:54:76:ec:f7:20:
         0c:74:b0:4a:7a:e2:a2:7c:da:d1:35:ad:87:6d:00:b0:7f:0d:
         81:6f:3d:44:b7:fb:01:fc:85:e7:24:47:96:0d:11:1b:97:2c:
         86:09:56:26:b5:e3:65:74:f4:15:ea:9e:d3:18:69:1d:90:57:
         e4:63:bd:2d:1c:00:4c:ad:24:6b:e0:6f:2f:72:c1:18:2e:78:
         61:38:54:cc:61:bc:91:e3:a7:5f:db:eb:7b:96:27:7b:55:9b:
         a0:be:e4:44:63:5e:6b:91:e9:d5:be:ff:b5:48:43:79:8a:5c:
         a1:e9:1e:d1:d3:0a:09:ef:be:4a:1d:8c:40:b4:94:e3:49:fb:
         fc:d0:18:0c:2b:b5:0a:46:50:b5:c0:1a:32:6b:f1:d0:fe:9f:
         88:ad:47:46:95:f3:c9:37:07:f4:b1:da:ec:ad:92:27:ea:46:
         cd:d1:29:a9:4a:8e:97:cd:8d:41:42:7c:cc:cb:68:92:71:10:
         ee:4e:48:d6:eb:77:8d:d7:2d:5b:04:bb:8a:b5:4c:19:56:08:
         12:81:11:e2:52:0e:22:02:18:87:e5:85:e6:6c:e4:12:99:7c:
         af:32:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----