Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File:                     jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier:          8NspbTwvWSPnjXMtkCRHJckklAl+gIOEE3BO/d6zBEU=
Subject key identifier:   C0:1C:4D:01:AE:E4:F7:B2:F5:5D:C5:4E:D9:B2:55:F4:E0:6D:73:FF
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer:       /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial:       01962FAB755EA2B1F354CEA2EF33CB45EA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=)
                          2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: 7hHFX5n5WLLJA6yuQbkd6iibCtCGQBwKlFL/hRrEJ7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:75:5e:a2:b1:f3:54:ce:a2:ef:33:cb:45:ea:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=c01c4d01aee4f7b2f55dc54ed9b255f4e06d73ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:84:b3:70:b8:31:80:79:25:99:f0:66:88:
                    eb:43:21:86:a4:d7:d7:52:b5:37:d7:db:cc:0a:06:
                    0a:cd:34:85:56:1f:73:7c:96:17:fe:d1:f9:e8:f9:
                    d4:cd:e1:7a:7f:ec:18:65:90:03:2c:4d:e8:40:b5:
                    3b:f0:79:9e:56:9d:ad:92:b6:80:7e:27:de:69:46:
                    f7:a0:ee:f4:60:3b:8b:e5:18:c8:7f:46:a2:69:b8:
                    1e:37:a1:07:62:e2:95:f6:91:1e:61:43:e0:17:1f:
                    79:56:42:99:7b:f0:e4:18:fd:b5:a5:4c:10:50:a0:
                    42:73:d9:36:7a:99:be:98:04:90:56:2c:5e:4f:43:
                    ec:dc:1f:22:22:59:79:b1:db:5d:5d:71:cc:00:b5:
                    c0:f9:9c:39:4f:43:e5:4d:da:ba:da:6a:81:72:88:
                    3e:b8:3f:b6:b9:04:f3:4a:4c:02:60:06:90:4c:8b:
                    8b:d6:2b:a7:79:14:ad:61:52:81:5a:a4:62:bb:be:
                    9a:f4:49:73:06:1c:f6:b4:27:1f:8d:c0:71:2e:74:
                    14:97:25:a2:5d:31:5c:64:f6:ed:b3:12:64:6c:8d:
                    31:8b:d0:32:67:46:37:bc:ef:3f:c7:cd:fc:cc:9c:
                    97:aa:88:af:e1:cf:93:c4:42:f3:ce:d9:be:44:4a:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1C:4D:01:AE:E4:F7:B2:F5:5D:C5:4E:D9:B2:55:F4:E0:6D:73:FF
            X509v3 Authority Key Identifier:
                keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:86:d0:32:f7:00:e9:5e:e1:9d:21:47:1c:08:9f:92:c5:b5:
         33:55:1a:fd:df:a8:f4:91:c9:00:57:44:d9:fc:8d:5a:d9:96:
         9c:70:7b:56:3a:37:79:cf:c5:5a:5d:44:3c:01:d2:01:0d:04:
         b9:d7:32:02:21:aa:72:8e:f3:82:2c:56:11:65:26:79:0e:43:
         6d:04:17:90:84:e7:21:e6:07:85:af:be:0b:cb:f5:68:a8:af:
         28:51:39:e5:4b:5d:00:b9:1c:42:27:36:9e:92:c4:4b:32:32:
         fb:e1:78:4f:7f:13:eb:9c:c6:d7:b1:99:3e:de:54:d4:f5:78:
         b5:ee:44:00:43:b5:68:e4:bb:62:4c:0f:85:b2:35:08:0a:05:
         a7:87:c0:32:fa:fd:26:87:3e:61:66:ab:ca:ee:3b:c7:7d:f6:
         47:d1:9c:9f:93:7a:7d:f3:b0:63:5e:a2:b0:bd:7e:2f:28:79:
         29:15:d9:3b:6b:98:34:cc:9c:16:0d:36:42:4c:cd:06:84:65:
         72:a4:ae:fb:27:78:ff:66:3c:9e:5b:d5:57:cd:3f:04:ee:a5:
         89:3f:87:93:9e:b1:13:19:dc:de:fe:b9:97:0f:2c:c6:10:31:
         b4:ba:b1:e4:40:64:c6:85:e1:34:6b:d4:37:46:b5:ba:ff:30:
         bf:9e:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----