Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
File:                     JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft (raw, json)
Hash identifier:          iZ19lyEF2q4x4Eky6kD+o3S1sViF8Nf4AtxGjjdQWNc=
Subject key identifier:   16:BE:DB:2B:33:AE:68:77:EF:44:31:9E:7F:2C:A1:75:C6:B4:92:71
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Certificate issuer:       /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial:       01962ECF4F9BF93209171D415283DC93A912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
Manifest number:          119B
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: Cuo_4OmB5hqfWI_WnYCCpNWLrgY.roa (hash: 3ZR1eIgUuJPainUs4mhe9MePZiakCaM69xOhHdIrRiI=)
                          2: IzLkhR_yv-v1GWTNh9mHUxrH6l4.roa (hash: Gz5yahpviiaRhf/uooYdv+kvLqcJz9y4V27m2bP2qhQ=)
                          3: JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl (hash: 7RHZhY0hKZWS6Dkg6ftbEVdGQLi1aCEg+h6rT3kzqso=)
                          4: LM4Pk0L89FT4bKCAnT5Pam60X3A.roa (hash: 15JH8Jc4TtNGcpNeD66bPIeSCBDAVTNv6bCkpCrYf1k=)
                          5: LzqzV901FJ7L-pE2io0JnQT7BO4.roa (hash: GQqWNE02zR7Pp1sxpXbJtIEQadxv84uYnIivoQsK42g=)
                          6: PSAVpGqbLcX36nvl195Ht9uZru0.roa (hash: zB4ZQEbAnrwd223bn2HnWhFXbaVVIUWcshlHHT8Vv9g=)
                          7: ZPRKsrk_LO1Kz1FxSXf4yoBYhVE.roa (hash: MuaQpB8L7R2Qx8jUBzVEMelRet/5/uaTnFy0z9JGEOY=)
                          8: exSqcqToVirE26kLGdF-HPjamps.roa (hash: HQsC+Mewyu8X71olEoQS/oWx63H6y6cZFOsC8HgKsMc=)
                          9: juhHhfMZKtMv7VJHZvSyHbChAaI.roa (hash: TVL933SmsCckOHxjM78yEFmonP+viUg+iondjs0ZENY=)
                          10: wwkTxtvy8y_gre1LyntK82_wg2o.roa (hash: 06SNxlJKLopu/TY42bvthXJuhwNZOlr+SWZ0JQeMj5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:9b:f9:32:09:17:1d:41:52:83:dc:93:a9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=16bedb2b33ae6877ef44319e7f2ca175c6b49271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:85:35:8f:25:dc:39:c2:b5:bc:bc:fb:f2:
                    fe:04:0d:c5:b2:d2:4b:28:5a:97:e5:ae:b1:c8:6d:
                    53:92:9a:31:49:e9:3e:df:af:3c:d7:8f:c2:45:94:
                    2f:b4:07:22:dc:2f:b5:95:ee:a4:3f:48:bb:cd:73:
                    c6:ce:ef:e4:c0:0d:14:c4:13:a2:1f:c1:69:67:4f:
                    4f:b4:2d:c0:0d:aa:7a:34:bb:d1:9d:d2:fc:4c:28:
                    6e:c3:61:9e:e0:9e:8b:de:31:09:82:3a:ac:c9:7b:
                    1c:c8:a9:fb:16:bc:83:91:bc:82:d3:73:9c:e5:77:
                    ee:84:92:d6:83:91:fb:f5:19:fe:df:aa:82:60:0c:
                    d0:46:47:71:af:e5:30:cd:4b:e5:0b:63:29:56:0c:
                    e2:4f:a2:56:2b:d2:3c:29:24:c1:82:2e:59:03:80:
                    88:67:ca:59:6f:7d:96:d2:44:1c:1a:89:3c:9e:af:
                    eb:24:f1:17:46:72:49:13:bf:5f:6a:7f:36:1d:46:
                    e3:57:bb:1a:d6:3c:63:3a:2b:64:38:96:56:f8:d6:
                    5f:e3:fa:27:9c:44:de:1e:ee:61:eb:92:19:9a:e5:
                    aa:b6:98:b2:d5:ac:05:c1:a9:9b:7c:1f:6c:25:1d:
                    e2:38:4f:f2:2d:30:e7:05:55:97:ab:dd:0c:01:8a:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:DB:2B:33:AE:68:77:EF:44:31:9E:7F:2C:A1:75:C6:B4:92:71
            X509v3 Authority Key Identifier:
                keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:5b:cc:3f:f7:ba:d7:64:aa:6b:86:d1:fa:45:db:49:50:
         18:50:d2:c8:a9:7c:bf:02:d8:64:b9:e6:ca:8b:65:35:32:f8:
         98:be:b6:c9:5c:89:de:8d:70:9d:1f:42:4e:98:7b:9e:10:dc:
         f5:5e:cd:d6:f6:1a:2a:33:90:05:4c:1c:72:c9:1b:b5:e4:b5:
         65:4f:07:5a:1d:36:7a:d4:8e:68:27:f1:8e:c0:a8:15:1c:ac:
         ba:cf:21:be:ca:34:c0:23:02:d8:48:2e:c0:a0:ba:51:89:ea:
         be:ad:12:c4:51:b5:8a:3e:56:c2:0b:24:fd:e2:0e:94:32:54:
         2a:0c:4b:2e:92:d5:b9:0e:22:d9:7b:4b:f0:ed:69:33:0e:07:
         39:54:24:8d:76:45:e0:64:6e:29:04:0a:d2:67:4c:f4:27:51:
         f1:2e:79:e4:66:af:2e:92:fb:43:14:74:57:1e:74:ba:54:e1:
         75:c6:c1:d0:c7:df:57:82:73:61:2c:1e:3d:9e:41:ea:8d:56:
         37:6b:8f:f1:22:16:d0:32:5f:be:fc:e6:b5:38:52:97:62:31:
         14:cb:ae:11:c9:36:cc:b4:b2:fe:6b:d9:7f:8f:d3:ea:ef:d2:
         fc:53:58:0f:63:4a:a1:e1:9b:8b:10:9f:a5:cb:c0:42:1e:ef:
         3c:22:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----