Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
File:                     JsmI8h_x7X30KmJjcjImaG08GNY.mft (raw, json)
Hash identifier:          HOhi7mSbxPnkwtepLntyDYhfb9DHBSkIYSqZtoWnbVU=
Subject key identifier:   D9:05:DD:17:43:46:F9:1E:4C:63:07:D2:43:B1:E4:81:6A:AC:E4:0F
Authority key identifier: 26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6
Certificate issuer:       /CN=26c988f21ff1ed7df42a6263723226686d3c18d6
Certificate serial:       01962F7439781A2475A5591961C5135907CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft
Manifest number:          05DE
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 1-807yUmPHz4IsK5x-j_MUOfei3Y.roa (hash: ld615U7g1fyntUuZJsJkyBsfvHeO3Vnx7/PuZx0Y6J0=)
                          2: JsmI8h_x7X30KmJjcjImaG08GNY.crl (hash: /0K0pxhuaQl0HPfsszZpmhgz1dE2Wzd3eSDeLG7yENw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:78:1a:24:75:a5:59:19:61:c5:13:59:07:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26c988f21ff1ed7df42a6263723226686d3c18d6
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=d905dd174346f91e4c6307d243b1e4816aace40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:79:da:2d:80:0e:21:02:bd:a0:7d:fe:94:
                    cf:b7:4f:c4:03:65:dd:e6:2a:34:59:00:8a:fb:66:
                    81:15:88:e1:15:4a:c4:d9:c7:3f:14:ed:bc:54:d9:
                    ca:66:53:ad:0c:d1:9a:c6:82:8c:e5:13:85:91:e4:
                    eb:94:fb:b6:00:29:64:a5:38:86:26:c2:02:5f:55:
                    d9:ab:f0:78:23:61:37:4b:81:88:59:38:ef:72:4a:
                    5b:f0:52:cc:64:cc:a4:8d:56:27:11:33:0e:51:df:
                    a2:59:74:3d:9d:5f:9a:be:87:46:26:68:72:b4:a7:
                    2e:fd:15:1f:85:51:27:70:b6:40:65:fe:14:07:59:
                    ad:e0:fe:0a:71:a3:16:3e:8a:01:c1:56:73:b1:5a:
                    ca:db:bf:93:98:32:9a:de:66:06:56:99:a8:b7:0e:
                    87:22:03:82:02:3b:9a:72:e6:d2:db:a1:02:dd:e8:
                    26:f5:88:17:1e:b8:39:e7:1b:46:a9:c6:43:92:e0:
                    17:9b:82:4b:af:37:f7:d2:1f:81:04:47:cd:6c:38:
                    2f:67:ce:15:3d:88:ab:c3:df:fd:26:c8:9c:81:51:
                    08:6c:97:8b:24:7a:b1:84:3a:a6:d4:93:26:96:b8:
                    56:a6:c5:0a:e2:01:21:59:49:14:06:18:df:15:d7:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:05:DD:17:43:46:F9:1E:4C:63:07:D2:43:B1:E4:81:6A:AC:E4:0F
            X509v3 Authority Key Identifier:
                keyid:26:C9:88:F2:1F:F1:ED:7D:F4:2A:62:63:72:32:26:68:6D:3C:18:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsmI8h_x7X30KmJjcjImaG08GNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2d0a48-9f86-48e0-a01e-5b3285c3abaa/1/JsmI8h_x7X30KmJjcjImaG08GNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c1:2d:85:89:7b:01:81:a3:0a:97:e1:c5:73:fe:19:8f:fb:
         83:78:18:5f:a6:84:32:ee:75:df:24:f7:61:f3:96:44:f6:9a:
         1f:2f:f0:c2:86:10:2e:ba:81:13:fd:5a:71:24:b0:59:85:a9:
         5b:2f:c2:91:81:20:c8:1a:4f:fc:dd:cf:e5:0a:47:26:6b:06:
         2b:94:53:a9:39:d3:a3:1f:42:00:cd:bb:67:ea:b2:b5:df:ec:
         8f:b3:3d:6d:e9:3d:28:f6:72:5c:e3:31:11:4a:d9:1e:d7:1b:
         e2:29:ad:7b:46:c7:fd:15:26:fa:e1:98:7d:5c:36:13:2d:fb:
         f1:a0:30:56:6c:dc:00:8b:8e:74:22:2b:35:ec:24:32:fe:7e:
         29:2f:88:5a:1e:43:ed:5b:be:61:5b:43:ed:43:d0:58:2e:c1:
         c9:f5:53:8b:48:80:0c:7c:ce:a6:06:e3:2a:59:18:5c:77:22:
         9f:6e:25:0a:2e:c1:f9:fc:05:bb:a7:16:bb:69:8c:32:2a:d7:
         20:d3:f2:e9:a1:6d:0c:ac:9f:88:4d:ee:3c:53:4c:1a:48:09:
         d5:de:0a:cd:eb:44:df:67:2a:97:36:be:b5:da:42:ae:ca:79:
         e3:97:6f:50:ff:3d:cd:ba:6e:4e:db:43:db:9a:34:c3:22:c4:
         1d:8a:e6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----