Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File:                     JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier:          CcihId6buY5FgjzTkWPxWUOwFynLoACrH8RlxCNGLrU=
Subject key identifier:   E8:C7:7A:F2:5C:7E:E5:1D:C2:EF:32:2D:BF:57:47:D3:B1:82:2E:27
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer:       /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial:       01962F068FD45C019BE88CEA81E834C2CB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number:          0219
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: w7E9YPZcDDCGgSSPtZSEZf7BgzRXsUZFnTzBK6JXj2I=)
                          2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8f:d4:5c:01:9b:e8:8c:ea:81:e8:34:c2:cb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=e8c77af25c7ee51dc2ef322dbf5747d3b1822e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:95:33:82:a4:6e:bd:cf:44:5a:87:f0:37:
                    16:11:59:6e:23:fe:27:dc:fe:82:0f:9f:61:0c:2b:
                    e5:81:2d:92:d2:8b:8d:4e:8e:35:81:fc:ff:91:2d:
                    35:7e:46:4c:32:d0:8c:0f:55:72:9c:0e:e8:3c:73:
                    d3:cc:55:80:d8:fc:30:a0:40:4d:c0:4e:fb:ce:53:
                    99:59:7e:56:a0:10:0f:f3:35:11:0a:80:95:2e:a7:
                    e6:22:aa:d8:cf:19:70:16:20:f1:12:66:07:1e:8b:
                    6c:09:3c:26:29:40:40:e3:6d:9a:4b:78:47:83:9e:
                    50:88:4d:03:20:94:7c:d8:00:6a:82:14:8e:50:0d:
                    a1:ef:4d:39:99:c0:be:9d:ed:0b:79:a8:ce:ed:cc:
                    db:28:a0:88:ef:7f:d8:f6:50:11:60:91:a8:d5:14:
                    a2:cd:d4:9a:bd:2b:e7:27:a8:65:3a:9c:84:f0:60:
                    4e:e9:1d:ee:bf:fe:64:58:4d:1f:c9:be:aa:d6:60:
                    4b:fd:ef:e0:56:27:d6:4f:38:7c:0f:e6:40:7b:1d:
                    6c:72:56:b4:86:8b:9c:11:40:46:35:f5:69:c4:26:
                    8e:8d:62:29:94:20:30:5a:a1:5d:bf:79:48:4a:7f:
                    75:79:47:25:74:6e:a6:71:77:d1:27:8e:81:6b:2a:
                    a7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C7:7A:F2:5C:7E:E5:1D:C2:EF:32:2D:BF:57:47:D3:B1:82:2E:27
            X509v3 Authority Key Identifier:
                keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:81:17:c6:30:11:2d:f3:0b:f6:e9:f6:83:58:db:ea:ab:9e:
         78:60:0b:e7:ec:d0:d1:85:ba:42:a5:e5:f8:11:a9:ca:13:6b:
         c5:d3:49:c8:13:65:ca:06:82:db:b5:1b:35:46:cf:41:3b:73:
         e3:4a:df:1c:c1:3d:1a:b8:32:0a:81:2b:c6:d1:c0:98:ac:30:
         39:b3:d2:3e:1d:94:43:77:59:54:be:b8:59:a1:0e:bf:b0:f5:
         de:b0:b9:74:3c:7c:95:6e:cb:28:8c:c4:78:56:14:56:cf:36:
         e7:a3:8d:72:8a:62:12:78:f1:80:b3:ba:0f:2a:4e:98:1c:b6:
         d1:31:17:c3:fc:fd:30:cc:24:8d:af:bc:6e:03:4e:ef:60:84:
         5f:cc:45:5c:50:4c:2c:b4:29:f1:11:71:ff:b9:94:55:49:27:
         fb:77:df:c8:dc:e9:6e:16:c8:a7:74:63:d4:02:a5:72:e3:4b:
         8b:b5:b9:e2:c8:2a:58:50:d1:f6:8b:64:5f:a8:94:40:b9:d2:
         02:ac:70:bc:5f:86:8d:bd:c7:96:42:89:07:96:46:da:4b:ba:
         67:e6:59:23:f1:42:09:82:a0:3f:dc:24:fd:2f:f1:52:0c:7d:
         a9:c7:18:28:e1:09:3b:d5:e2:f0:76:35:9c:d6:68:a6:66:ae:
         44:53:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----