Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          2StC4QKGoG9PDu3iYaszJXRUbBxAAwLPgxYG8BFDZ70=
Subject key identifier:   99:66:01:B6:AB:39:4A:DB:D4:4E:F1:3A:96:0A:9B:B7:57:76:30:68
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       01962F0669B753CED1CC18A3AFCA4AD5836B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          10EF
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: WUGU3GSVFFI5yDEXadhPW0i+7jd/3Z8jQVw0yjvQNOI=)
                          2: JSfSNBZp2sArMnNqgy7JPjlV3w0.roa (hash: AAxuDoIwBhXDcehYAfqhoDL4a0JHM/VmkCzff4ZSoTk=)
                          3: aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa (hash: EkeJb1vk/DYNvMk3tNYmPq0HrdN72YN06ty6+3e7rPU=)
                          4: hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa (hash: bxwt1u/r3VzOjW3gEkeatdflQyeXrR7mqzyeYNfcLHY=)
                          5: tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa (hash: O3S/RX4GnOSFqdUE+99ZJDVtp7vahAb9JLGw0JZrYQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:69:b7:53:ce:d1:cc:18:a3:af:ca:4a:d5:83:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=996601b6ab394adbd44ef13a960a9bb757763068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:81:bd:44:52:cd:71:9e:3b:d5:9d:d5:5a:
                    8f:fc:6b:e3:0a:fd:a7:fb:79:ae:10:b5:07:0b:19:
                    a8:44:2c:29:f9:cb:73:da:b5:eb:d9:c3:da:1a:8c:
                    40:c2:81:f1:ad:57:c7:8d:1b:6e:c2:e8:43:52:22:
                    19:41:1f:ea:2e:fc:cd:21:61:81:91:bf:d2:db:68:
                    ed:92:04:13:cf:b1:a2:8d:93:4f:05:e5:47:e9:a2:
                    df:99:b8:74:6e:dc:cc:4c:43:b0:33:11:dd:ef:16:
                    ee:1c:36:4a:c2:5e:c9:73:4b:4e:6c:f0:88:22:3f:
                    42:08:74:6a:8e:73:4e:9b:0c:fc:1c:73:87:1a:46:
                    63:b4:e1:b0:6b:19:48:d0:a0:26:f9:89:26:6a:c8:
                    83:27:3b:6e:dd:c3:36:eb:9a:8c:1a:ed:3b:e4:63:
                    87:dd:82:4d:00:c4:b4:44:fa:5f:14:a8:ec:a9:60:
                    f9:d5:73:08:63:75:16:8f:eb:6d:2e:a7:ad:70:84:
                    6e:3d:94:f8:d9:7a:b6:82:b8:f6:bc:4b:18:9f:9e:
                    95:35:af:89:46:db:d0:36:fb:94:c6:fb:64:a8:99:
                    72:31:1f:f7:5f:c0:91:cb:ed:05:af:da:80:0e:f7:
                    8d:9d:db:0d:82:72:46:53:cc:6d:6d:8b:fa:16:00:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:66:01:B6:AB:39:4A:DB:D4:4E:F1:3A:96:0A:9B:B7:57:76:30:68
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:79:dd:4e:f6:78:d5:5f:18:12:72:42:36:67:58:64:bc:c0:
         cc:11:ed:68:33:16:f2:03:43:8b:18:ea:30:92:70:5f:fe:eb:
         f0:0f:66:d7:7f:cc:f6:4a:21:31:a1:df:eb:83:46:24:2b:f1:
         86:03:a0:eb:67:d7:9e:a5:8a:73:59:47:46:b2:d2:bf:06:07:
         9c:49:24:ee:79:9a:59:f3:43:92:8e:15:c6:82:44:c1:dc:5c:
         5f:06:89:3e:12:e1:92:d9:80:42:89:97:5a:de:d6:6d:f9:4b:
         ba:61:ed:6f:eb:92:6a:a2:5a:5d:bc:75:87:91:c8:b6:ce:25:
         ed:ec:0a:44:b8:e4:46:e8:99:a9:c1:f7:c6:77:87:43:67:7e:
         18:d2:5b:32:fb:f9:89:a6:4b:21:95:8c:77:9d:80:d6:ba:a6:
         12:5d:e4:f0:b6:34:2a:7e:de:ce:32:d1:b6:83:56:d7:94:59:
         4f:3f:39:4e:28:a7:ea:0c:23:66:3d:a0:69:28:c5:29:d9:60:
         da:6e:5b:b0:81:f9:1d:91:97:97:69:00:72:01:26:a1:8a:11:
         08:98:17:3e:8e:fe:93:57:e7:48:de:07:9d:04:07:fd:df:1c:
         4c:e9:63:e1:da:bc:16:3e:07:04:11:40:3d:b1:ba:cf:fe:7d:
         14:c4:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----