Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
File:                     Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft (raw, json)
Hash identifier:          XF55h5Tl/Xv5/IQVWDbhejIHSNIUcOt1F1v+S7Hm1t4=
Subject key identifier:   2F:68:02:C8:EB:28:82:50:22:C0:A9:E3:A0:37:CA:89:5E:4A:6C:9B
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Certificate issuer:       /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial:       01962E61AB7D024754AC360C486133D07310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft
Manifest number:          13EA
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 9fqGagQCaL9MHwqiYLgCAlKltnI.roa (hash: BoPMzB3MdLpYYYjTBd+oogzMIYiLuFwZJGpH1bZ5Vr0=)
                          2: GCtomsNTvimtD6w0xyjU2ZUFcjE.roa (hash: XJ7hu4TR2M0+QkNeH26j5olN/g4SK2uhya5ykeMaklA=)
                          3: Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl (hash: 5xN196h8Rm/qMYMA7NkCFShpsonxyyw8sQ8QAMhYAbs=)
                          4: LHSJXrq4fzboLah7C-gF4O-Krh4.roa (hash: dXC1M1f4xcsgjz8JdVvS5mt/3DkRXhiljl0W1UwisK8=)
                          5: Qi8od9-5X1sf48lKzwcNnNg6mHM.roa (hash: /syJMd1k0a2wLIgM5pfF31EnkGqqCBO2Z4W2CDpPvuA=)
                          6: Ufr2afGXnfRf4I0gb-jEiflvE4U.roa (hash: M+HA2yRnaGNn/L+MV9quoWf8gGEo+L0udQeBQZgiv0o=)
                          7: VUq4mZ3R9CSBiwvJ8N7nmT1gHx0.roa (hash: UBuFnXhpXMmhVnBct5Az+Ev2H/iUBQnvBw+Z0vvL/Iw=)
                          8: a-UPHbc06elr_blSu9vS7q86SLw.roa (hash: 5vOUevzZOr+5szST6vxZMIM+U+1SeNXKPgwq9P6XW/E=)
                          9: hBmcTp2jwBhKQHd1_V4COpjCGZE.roa (hash: oguyi/J7KFBmkF5VOhH/4yPV3Css0NdJPTdKuw4u7YA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:7d:02:47:54:ac:36:0c:48:61:33:d0:73:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=2f6802c8eb28825022c0a9e3a037ca895e4a6c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:7b:24:54:fe:ca:6c:ae:06:2e:c3:67:61:
                    5e:a1:a5:47:23:68:b9:92:83:83:e9:0e:0b:0f:24:
                    09:bb:82:e6:cb:b9:4a:a6:d3:d9:4c:e4:70:7d:d9:
                    fc:0a:0a:0c:02:fc:30:82:e6:21:a1:48:55:ec:fe:
                    8e:c8:1d:33:aa:32:1a:23:c9:fa:49:88:8a:f0:94:
                    42:bd:4b:96:ed:f1:7b:7a:96:75:63:89:ef:69:c0:
                    52:06:aa:07:bc:4b:39:33:ed:65:b7:2d:c9:c4:9c:
                    50:fa:79:18:28:7c:0c:71:9e:ed:e3:5a:8c:45:59:
                    c3:61:d1:ab:4e:7e:43:57:68:49:62:c1:d8:73:ba:
                    18:03:a9:5a:48:d1:7f:1a:18:75:bf:2a:cd:62:b2:
                    ee:40:4c:26:01:f6:62:64:8d:23:6b:48:cd:8b:56:
                    35:c2:3c:cc:1c:9f:55:f2:96:79:94:81:89:c4:40:
                    25:04:3f:02:6e:2b:33:39:e7:89:80:10:7e:5a:f1:
                    ed:a2:2a:49:81:73:20:54:20:63:e0:bd:7e:45:6a:
                    f0:b8:1f:da:3a:48:95:73:3c:53:21:05:92:13:59:
                    bf:03:60:e5:92:de:19:eb:18:11:da:40:26:5a:80:
                    4e:3e:82:e2:05:89:e1:86:05:e1:ef:59:39:cf:03:
                    58:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:68:02:C8:EB:28:82:50:22:C0:A9:E3:A0:37:CA:89:5E:4A:6C:9B
            X509v3 Authority Key Identifier:
                keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2a:35:b9:ef:5d:6f:08:f7:1f:4a:9d:63:58:d2:94:fe:3e:
         7b:96:fc:cb:4e:39:86:cc:55:55:6d:d2:9c:04:25:91:74:46:
         e3:dd:15:a0:07:e4:02:f6:3c:c9:6c:b2:7c:25:5e:f6:9f:21:
         2b:1c:78:df:85:9f:d4:99:5c:77:ff:33:ff:41:2f:7e:5c:a1:
         6a:a5:3d:d0:0a:3d:ea:4f:8d:27:77:ba:cd:14:8b:44:98:e7:
         36:fd:48:40:42:3b:fa:d8:ff:97:49:f3:b0:9a:7f:83:3a:87:
         c1:06:4a:c7:b1:42:2d:5d:ab:d8:aa:c9:c8:82:36:35:6e:0d:
         8d:be:b0:1a:40:aa:20:91:03:29:ac:cc:f0:a0:f6:f5:9d:43:
         c3:ca:4a:4e:4e:8b:5d:aa:38:58:ca:53:50:24:ff:07:9f:a5:
         32:f8:21:fd:2c:66:83:a2:98:52:96:6f:af:32:f5:a0:47:d8:
         5f:c8:92:a9:1f:c7:03:87:f7:ba:28:72:2c:31:fe:da:c4:e3:
         3d:4c:f4:97:6b:d7:2d:ec:d0:5d:43:6e:9a:77:8e:a9:00:3d:
         a3:e3:32:3b:c4:10:cd:f4:35:43:08:0c:2f:90:64:8b:6b:ec:
         ce:93:a1:aa:7b:c6:fc:73:85:b3:5c:25:80:af:66:b9:75:ca:
         41:32:07:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----