Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File:                     JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier:          xtAxnc0yU0egZIWZIW6K/DGHIomO+4sIim0v86ahZQo=
Subject key identifier:   9C:E0:0E:6F:15:A0:BE:7A:CC:44:85:42:F2:65:8D:CC:9B:89:81:FD
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer:       /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial:       01962E9880CF4B8BBF72BEBA31ED981AFB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number:          11A0
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
                          2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: QYF7KsXWJoTv7NDp/Rw9OQ9LqkcWDq04YUjnfzsQzdE=)
                          3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
                          4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:80:cf:4b:8b:bf:72:be:ba:31:ed:98:1a:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=9ce00e6f15a0be7acc448542f2658dcc9b8981fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:49:f1:6b:17:d8:66:b0:08:b1:73:2e:90:e7:
                    4f:ce:92:7c:f2:24:d8:82:50:52:d0:3a:19:81:9e:
                    c5:84:3d:a0:9c:e4:ae:9e:62:67:b3:19:33:fe:b6:
                    ef:2b:8c:e9:69:cc:fd:71:5c:3b:0e:3a:c3:57:2f:
                    35:ed:a0:a7:cc:4b:5b:16:cd:54:3a:99:c6:e1:5e:
                    cd:08:62:ae:4c:bd:67:c2:6a:1f:06:04:62:c1:1f:
                    3e:a9:35:17:72:4f:c8:7f:f3:86:e0:af:b2:b9:4b:
                    dd:62:63:eb:38:c8:bf:05:43:2a:09:98:be:56:92:
                    7c:06:8f:47:d7:1c:ad:47:45:10:ba:4b:1a:ba:59:
                    b8:93:8e:5a:ad:90:35:2e:6e:ed:a8:2c:04:8a:04:
                    16:90:a2:06:97:d0:2b:3b:9e:64:f3:cf:3d:a3:19:
                    b6:16:00:8e:45:9b:43:ad:f0:49:58:56:c2:74:0a:
                    35:9e:db:c7:da:0f:80:fa:43:67:aa:e1:43:1f:c6:
                    cb:7b:7f:0b:75:6c:95:90:9e:7d:89:4e:cc:0e:6f:
                    84:ba:8f:27:b7:5d:0f:b5:84:21:96:90:98:48:43:
                    2e:97:76:82:0a:34:98:74:6c:c0:60:1b:02:28:93:
                    c3:51:10:c2:bc:74:b8:c9:25:f5:8c:97:2b:73:0b:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E0:0E:6F:15:A0:BE:7A:CC:44:85:42:F2:65:8D:CC:9B:89:81:FD
            X509v3 Authority Key Identifier:
                keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:4f:5a:ad:d9:8a:3b:f9:f4:15:62:08:72:7a:d9:ae:58:
         22:ca:5b:82:1d:91:47:eb:b5:2f:7d:48:eb:db:70:86:d4:24:
         73:71:a9:69:79:81:9d:86:b0:8f:d7:d6:6d:7d:62:a4:49:e0:
         d0:31:67:95:88:ab:ab:d2:8f:f4:09:b6:2f:c5:36:a9:87:55:
         18:b7:97:42:61:0c:c2:1d:73:4c:53:5b:33:3f:35:9c:17:19:
         3e:e6:a1:7e:24:99:b1:3c:57:39:4d:31:41:07:90:81:2e:62:
         81:11:37:69:28:d6:fc:05:ed:8a:59:b4:7f:54:db:77:55:e3:
         4d:6a:08:d6:4e:6b:72:59:fe:11:da:4a:b0:dc:9f:2f:a1:bb:
         3c:b9:ce:4c:68:e3:f7:0d:9d:64:ca:60:53:a2:52:10:9d:c8:
         df:3c:bc:71:e2:f9:52:f5:7a:18:a4:93:b7:97:fe:b1:ea:a5:
         86:6d:db:4b:f9:3a:a4:67:55:56:61:eb:21:a3:23:b3:37:c5:
         72:ce:74:f8:61:97:41:05:d6:3c:be:d9:b8:ee:ee:cd:fa:1f:
         d3:88:99:61:de:60:2e:3f:3c:5b:d5:04:eb:49:b3:a2:60:59:
         ab:62:36:8f:b9:66:a6:dc:d7:42:9e:69:af:03:0c:73:a3:d9:
         73:75:1d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----