Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File:                     jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier:          E8AT6UQ2+XGLS6qV+gNIoX56T5+I11jFNwCV+zobTHE=
Subject key identifier:   B0:F4:B1:C4:1D:6B:85:40:94:9A:77:49:11:AD:48:D2:0B:BB:2F:D2
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer:       /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial:       01962DF3E2EA65F76C2097DA5AC4C326FA48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number:          14CE
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: UNUa4oFxwFdm00m5r-G61s8Ikh4.roa (hash: k9276a/1X0ewFXRF6cwjGjRo8BKQKSRBiWAxipeCeXc=)
                          2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: tKplWkjwFAoD7I7htOu+XEx9zDies40GVBrrgeoyvCQ=)
                          3: nFwSDt7zXXCk1k3rMZvJ-zj3Fu0.roa (hash: g/i/k3s/MVqnbweAQkw4FIePeqK2H7kiTAvv/06+PxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:ea:65:f7:6c:20:97:da:5a:c4:c3:26:fa:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=b0f4b1c41d6b8540949a774911ad48d20bbb2fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9c:91:8b:53:22:d7:0c:99:6c:80:67:ee:3b:
                    80:15:07:97:7f:77:63:1d:2a:8b:94:46:09:7c:ff:
                    e8:3e:36:f9:7e:55:22:80:f6:26:0e:6e:ed:42:60:
                    94:d8:c6:27:69:12:98:4d:ef:f2:db:da:07:71:1e:
                    4c:89:3b:f6:8f:f4:8d:29:63:e3:8e:a2:6d:d4:cd:
                    65:20:d3:be:cc:0d:5d:13:ea:dd:bc:82:d8:67:19:
                    57:4c:a1:a3:70:69:d8:a1:af:5b:d0:af:29:86:4a:
                    61:f7:42:02:52:ff:ed:1e:2d:c7:d9:6c:b0:1a:ed:
                    06:dc:06:26:f2:c4:e3:10:ca:a4:3a:3d:76:10:81:
                    a5:68:89:12:35:58:8d:a5:30:d8:0a:72:f2:0a:94:
                    10:5b:9c:ad:1d:ac:51:14:13:8f:fa:18:f0:29:ff:
                    a6:73:24:18:e0:70:72:8d:c5:34:77:0b:30:b8:c2:
                    a1:a0:b9:e5:86:4e:20:ca:b3:a7:f4:31:71:fd:b9:
                    ff:5d:b3:f4:91:56:7d:66:d9:66:f9:f0:81:e6:26:
                    0e:ff:eb:5f:4d:b3:ad:fd:d6:3c:e3:fe:46:f6:00:
                    48:2f:d3:64:95:3d:d7:f5:70:4f:00:a9:c2:90:58:
                    b5:54:23:b0:11:b1:ae:35:d5:c1:4e:16:9f:b0:b6:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F4:B1:C4:1D:6B:85:40:94:9A:77:49:11:AD:48:D2:0B:BB:2F:D2
            X509v3 Authority Key Identifier:
                keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:48:46:a5:d9:70:38:87:a2:7d:16:2f:52:23:cb:68:a6:
         98:86:86:c8:8b:b5:32:de:47:ea:12:fb:a0:80:32:93:11:56:
         33:20:9e:0e:68:dc:26:51:b0:09:eb:64:cb:d9:e3:3e:cc:b9:
         e8:aa:6b:28:c6:8f:b6:40:9a:f7:49:eb:42:b0:b6:d4:42:3e:
         50:17:81:11:ee:7c:98:c6:9f:30:8b:19:14:68:8a:e4:f7:2b:
         fd:4d:8c:fe:d5:f7:9c:0b:f5:13:aa:d3:c8:5c:fd:63:87:d0:
         ab:21:a8:9a:e7:a0:33:53:de:81:c7:87:9b:44:da:89:fd:6b:
         d6:03:b2:3c:83:f9:f6:56:ae:34:19:d6:19:b6:a3:5c:8a:d1:
         ce:19:5e:ff:80:b9:86:db:0f:07:25:9c:8f:f9:08:81:33:f3:
         b4:00:26:d2:19:9c:e9:4e:78:42:c0:55:55:18:a0:0c:b0:ce:
         a3:8a:68:46:2d:ae:b8:1c:dd:68:c0:a7:a0:33:31:15:8d:91:
         ad:34:0f:f7:77:06:fc:32:99:6d:48:bc:62:63:9a:fb:83:80:
         1b:70:60:c8:6b:11:bf:9d:0b:3c:2e:4f:77:5e:95:8f:b1:b0:
         75:26:77:f0:6e:fc:4e:c9:98:74:48:15:5c:69:0d:04:56:df:
         b8:7d:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----