Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File:                     JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier:          BNJ8WbCYIAVlfQdH4Fg72gh3v4g6nJhvHOWe8GYji9Y=
Subject key identifier:   15:7E:3A:A3:07:60:DE:30:41:8C:18:78:C8:6D:08:04:85:B3:02:F6
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer:       /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial:       01962F06F505F78DE7419F734EE1E44DA2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number:          0D1B
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
                          2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
                          3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: gLAOsTsKNz1QWyiVxVrZ13pFy2ELF8KAiwcnUl2DdKM=)
                          4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
                          5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
                          6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
                          7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
                          8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
                          9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f5:05:f7:8d:e7:41:9f:73:4e:e1:e4:4d:a2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=157e3aa30760de30418c1878c86d080485b302f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:d6:9d:b1:6d:80:89:31:ff:d1:d6:5e:d4:
                    ee:98:67:71:f8:4f:5c:81:14:8a:b0:79:f6:a3:e1:
                    9d:17:27:8c:9a:55:eb:02:9a:b9:82:fd:1b:c5:85:
                    1c:7f:a1:62:9d:ec:99:71:a3:1a:86:72:f5:3b:2e:
                    f7:e1:85:a8:dc:ff:17:96:cd:fa:39:7d:9f:41:cd:
                    1a:0f:34:01:d0:6b:2c:18:80:86:01:79:a2:23:f2:
                    c5:a6:ba:bf:b9:86:31:b7:87:d2:60:61:cc:3c:6f:
                    74:ac:bd:03:df:8f:fc:6d:13:4d:b8:51:be:54:45:
                    47:ef:f3:70:2f:28:30:d3:21:09:b0:62:6f:de:16:
                    e3:cb:38:d7:84:8e:e8:1a:f2:9f:b4:56:df:7e:ed:
                    da:7f:b1:42:47:c1:0a:f7:a2:4d:86:ea:90:e6:1d:
                    84:d1:2a:e6:69:f6:6a:dc:81:59:3d:2f:09:a7:2e:
                    bd:7a:6d:fb:64:f8:fe:88:72:08:5d:c8:04:bb:25:
                    a7:f3:8c:5c:3f:e0:7f:2a:2c:bf:fa:ca:4f:db:74:
                    d9:66:ac:f3:28:6b:46:67:56:e4:29:e1:be:ee:8a:
                    f4:4e:94:b6:46:2b:6e:e8:a2:9f:54:f2:18:95:88:
                    f7:2d:29:ec:ac:43:f2:4c:6c:a5:95:15:f4:e0:0a:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7E:3A:A3:07:60:DE:30:41:8C:18:78:C8:6D:08:04:85:B3:02:F6
            X509v3 Authority Key Identifier:
                keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:49:02:c9:c5:f1:cc:ca:55:50:a9:69:40:8c:bd:4d:3e:b2:
         4c:1b:19:4c:fb:8c:da:62:4d:b1:d9:16:22:4f:ea:84:00:40:
         af:63:cb:07:94:fe:e5:c0:36:33:8f:1e:54:65:57:65:9f:f1:
         51:9f:e8:ea:29:f4:4b:41:99:6b:85:fc:33:5e:25:a3:42:fa:
         c4:89:3d:63:fb:c1:83:1f:1c:8c:0c:6f:f3:9e:2a:04:ab:12:
         f5:ad:0a:7d:a9:ea:44:bf:47:13:81:a9:60:23:8c:27:ed:d1:
         8a:2b:76:f4:7d:a6:24:06:be:43:f8:5d:dd:f8:f3:6a:6e:f3:
         78:18:23:0d:c3:8e:ac:51:be:03:6c:34:40:00:38:95:23:89:
         ec:5d:f3:56:1c:70:fb:f8:1f:e4:b3:81:7b:49:ee:fe:3a:48:
         86:62:5f:a4:ee:b4:96:ea:a2:e2:6f:9e:b3:88:30:8c:e7:4c:
         e5:6c:04:ad:a3:6e:ca:c8:5a:91:21:93:3a:63:38:06:f5:e2:
         d6:20:8f:13:b8:19:f9:2a:25:3b:8a:66:eb:68:bd:c5:b7:47:
         7c:16:fe:ef:8e:c6:99:1b:83:e6:a0:94:53:66:7e:2c:09:5b:
         4c:e6:d4:88:a3:3e:e8:71:c0:42:89:45:7b:1c:f5:50:bc:59:
         65:1a:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----