Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File:                     JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier:          sUO7r6GxIFGDh/mEUQzDeHrPU/Kvxa9vC62zKqBo8m0=
Subject key identifier:   9D:25:F7:B5:9E:91:D7:8B:3C:EB:D3:22:36:4D:4C:8F:D7:5C:61:54
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer:       /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial:       01962F3D5575CE3267CA5BBE1F1453A1879A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number:          1034
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: Vlmg5sIoXol9DZSH6agnBx7HbFzqA7q7yzitynRq7v4=)
                          2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:55:75:ce:32:67:ca:5b:be:1f:14:53:a1:87:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=9d25f7b59e91d78b3cebd322364d4c8fd75c6154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d2:0a:f7:d2:dd:1c:60:0d:6c:ab:7a:77:54:
                    90:fb:22:60:86:ee:2a:2b:70:6a:dc:18:80:eb:58:
                    28:49:39:cd:44:c5:48:8f:40:0b:0b:be:59:0e:35:
                    e0:27:4c:bc:00:21:4f:df:19:32:a5:62:c4:d1:fe:
                    65:c1:fc:d7:b3:e8:ea:54:63:09:e7:bb:f8:1c:f1:
                    89:26:da:4e:6f:fc:06:6c:c1:c4:8e:0c:80:d7:86:
                    20:94:b1:e2:96:6e:02:62:82:a4:ca:31:ee:4c:82:
                    a6:74:bd:01:d1:ee:5b:85:c6:dc:ea:24:c9:55:d5:
                    24:0c:7f:b0:57:19:fb:67:20:21:5e:8e:c8:39:ad:
                    65:42:f1:8e:e7:fb:ee:e0:b2:b3:62:ba:a9:c8:eb:
                    eb:fa:fa:e6:a8:96:f8:24:e8:c2:e4:a9:34:98:67:
                    72:30:70:16:b7:56:20:b8:27:90:5e:ae:10:31:0e:
                    c0:ad:d5:b7:2d:16:e3:73:52:6f:7f:6a:8a:a2:6a:
                    93:7a:df:69:22:cd:72:7c:0a:ed:73:e5:27:a2:19:
                    63:96:40:c6:59:96:4f:83:f6:8b:4e:e3:62:29:85:
                    af:65:67:87:0a:2d:f2:78:75:7d:77:48:a5:17:ef:
                    a1:56:ae:27:0a:46:93:25:b1:10:ff:95:10:4b:65:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:F7:B5:9E:91:D7:8B:3C:EB:D3:22:36:4D:4C:8F:D7:5C:61:54
            X509v3 Authority Key Identifier:
                keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:28:18:13:2f:bd:d4:e0:fd:3b:da:91:9f:56:8c:46:54:
         c8:f7:cb:4f:a0:3e:7e:34:b6:5a:d2:f8:f2:f6:73:66:7a:68:
         64:8b:af:34:ca:25:94:ca:bd:8b:0f:37:3a:53:c6:f0:eb:7c:
         e2:75:fc:6b:e6:55:77:89:e5:7f:1a:dd:64:8a:63:92:97:5f:
         26:bc:eb:21:70:c6:d8:9b:80:c5:b5:49:8a:cc:27:b2:be:73:
         78:b9:ec:f5:ae:64:91:76:b5:eb:bf:ff:9f:ae:46:2b:3f:04:
         3a:26:6d:f6:5e:cc:94:a5:a8:63:e5:7d:63:08:dc:d3:d6:48:
         bb:42:c0:e8:aa:0b:9d:67:e0:2a:cb:fc:43:04:15:22:f2:ec:
         46:a5:20:75:a6:62:74:d9:57:3c:0a:a0:04:55:0f:c5:c7:48:
         03:0c:c3:32:df:8a:bd:b9:62:ce:32:5e:8f:2d:67:3c:95:76:
         f6:34:8e:5e:74:97:da:8e:3e:83:5d:5c:54:8c:68:c8:54:2d:
         7a:13:d1:09:6b:2c:f1:e0:3b:b3:8f:37:e9:6b:4c:f6:0e:6c:
         f2:e5:b2:77:ca:2c:dd:c2:55:2b:c8:34:3a:b4:dc:2b:77:ed:
         1d:48:64:6d:14:21:1d:9b:3a:02:9f:8d:00:07:ab:98:a1:4f:
         43:97:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----