Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File:                     sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier:          K6o3wdwo6MLDvO0Ek8/cN5bAKP12S5ow+I0i/wtPXS0=
Subject key identifier:   64:AD:A7:EE:29:C0:8F:B2:73:4E:B5:19:FC:8F:6B:AE:3F:1B:9B:65
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer:       /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial:       01962FAB379E62AD0EA357B9039F87C8840C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number:          0E23
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
                          2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
                          3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: +zbnc4HVq8Ilz5TeehH0tfcFlsFYgviOhP+Yffx1Gik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:9e:62:ad:0e:a3:57:b9:03:9f:87:c8:84:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=64ada7ee29c08fb2734eb519fc8f6bae3f1b9b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:3b:64:97:a0:55:13:30:49:a0:db:72:ab:
                    d4:06:37:96:ef:d5:d4:b1:27:b1:55:2c:28:de:91:
                    6f:db:72:3f:71:8a:d5:89:bc:55:de:4c:c5:93:7d:
                    50:41:ec:2b:13:e9:7a:b8:5a:b9:ba:7a:42:45:8d:
                    9f:3f:aa:a7:8a:42:29:e5:d5:82:f8:1d:e5:c7:2a:
                    00:df:f5:80:5f:6e:b4:0b:15:52:3d:df:fe:16:57:
                    69:67:47:f0:54:42:e6:02:40:1f:70:94:22:2e:b6:
                    d0:b5:b9:c8:3e:8a:10:0c:b1:a1:d3:e2:89:13:33:
                    50:d3:74:90:a7:3b:17:68:c1:6d:53:5a:f4:01:0e:
                    88:2f:87:9d:1c:c8:1d:b0:1e:d3:48:29:36:4c:67:
                    c4:1b:cd:51:2b:36:47:2b:e0:76:07:84:e7:9b:3b:
                    1d:2c:43:cf:e8:40:50:c7:8c:f6:30:94:77:1d:08:
                    af:2f:57:e4:ab:63:5d:1c:14:a0:b4:50:58:5e:57:
                    2c:7b:60:b5:33:e4:2a:76:32:d3:25:05:61:0a:d2:
                    4b:b5:02:eb:91:f2:03:ec:1e:ed:2a:22:49:eb:da:
                    f5:33:bc:1f:f0:97:03:fc:04:e6:f3:a5:35:ea:ed:
                    a6:b9:cc:5d:19:72:ee:79:dd:8e:6a:7d:3c:4d:35:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AD:A7:EE:29:C0:8F:B2:73:4E:B5:19:FC:8F:6B:AE:3F:1B:9B:65
            X509v3 Authority Key Identifier:
                keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:c3:ef:91:0b:b0:7b:2a:b2:cb:d5:f0:dc:f5:8a:71:22:
         fc:98:97:b3:f5:ab:6e:93:38:25:a5:69:03:f0:f6:80:34:f2:
         db:3a:96:6f:09:47:0b:1b:28:5d:fa:d7:38:3a:e1:d1:14:7c:
         3c:20:c6:cf:24:3d:50:42:87:1c:c6:77:a8:5b:92:7f:23:f5:
         be:39:2c:ca:7c:9c:d1:d3:f4:4f:d0:72:ea:aa:a3:85:db:49:
         63:fb:cf:d7:d7:03:5a:56:7a:6a:0f:17:fd:18:67:73:4e:a8:
         9c:6d:63:4a:89:56:99:46:c2:72:84:d4:dc:4e:3c:d4:ce:e1:
         40:43:5d:fd:b5:bc:68:0f:f1:db:f1:c9:c0:d8:50:1d:2e:8a:
         32:96:f4:b8:7e:8a:cb:6b:65:ea:a7:6c:b1:70:77:6d:bf:87:
         cf:74:22:62:a1:9b:f7:ce:ad:6b:83:ad:79:fa:1b:c8:ac:88:
         20:e9:99:8e:68:6f:41:17:a3:f6:3e:2e:70:db:d7:40:7b:0e:
         e6:09:d3:45:fc:8a:ba:d7:d9:19:1d:53:ee:65:a7:3d:6e:ea:
         64:f6:bc:a8:91:ba:6b:b5:45:16:20:5a:56:bb:43:a7:5e:f3:
         b0:c5:83:fd:95:f5:6e:fd:01:c0:84:a5:f4:5c:69:ba:ad:10:
         84:be:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----