Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File:                     Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier:          f/nFizB4xH1j8cTPqGdVPto5ztLFnVc09+g1TAq2eig=
Subject key identifier:   85:75:E2:2F:5C:2F:AB:E0:A6:53:7C:3D:E9:E3:CA:C7:30:3E:47:D9
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer:       /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial:       01962F06A102E423475C836CAAD5CD138EF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
                          2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: 0nPo6MdDkFzES/ozZhgrArpIPsOM/+IqcFotzzHpU3o=)
                          3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a1:02:e4:23:47:5c:83:6c:aa:d5:cd:13:8e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=8575e22f5c2fabe0a6537c3de9e3cac7303e47d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:97:24:19:85:aa:ff:ab:7e:50:33:3a:d4:
                    5d:18:4b:31:26:db:a4:9e:fb:89:30:b7:a1:b3:6f:
                    a3:64:77:42:85:39:68:4b:75:5e:33:5f:a7:ca:19:
                    ad:94:25:d7:fa:bd:3e:63:78:9b:33:13:d2:33:8d:
                    51:77:1b:e7:f1:53:01:4e:34:06:26:54:99:e0:a0:
                    fe:74:02:44:99:c0:ab:c1:45:cd:bc:46:8b:6f:8b:
                    3c:92:28:47:97:24:cb:78:b3:11:09:ca:bc:18:c6:
                    8e:24:c1:c4:1e:e9:55:4a:ed:40:55:b6:c6:55:b2:
                    92:06:aa:5e:d6:36:9f:55:30:c6:f8:b4:46:29:47:
                    23:fa:de:7b:82:9a:eb:89:27:cd:39:0e:ef:bf:88:
                    ac:05:d3:0a:4e:04:f0:1e:17:4b:50:f4:57:56:9d:
                    a1:57:07:36:6b:53:f2:25:2b:3c:2c:a7:45:e4:ff:
                    5f:c2:45:00:1f:49:ef:9d:bd:14:ef:c4:f2:53:6e:
                    10:04:08:a8:69:f6:df:37:91:8a:83:84:3f:b3:eb:
                    0d:2e:43:a8:50:9b:3f:64:46:c9:91:1b:49:f7:1c:
                    99:6d:ee:ab:5a:0c:5f:cf:21:cc:23:0f:b2:60:11:
                    9c:bc:4a:63:b1:a0:32:dd:ea:bc:10:7f:17:66:91:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:75:E2:2F:5C:2F:AB:E0:A6:53:7C:3D:E9:E3:CA:C7:30:3E:47:D9
            X509v3 Authority Key Identifier:
                keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:c4:62:59:89:82:9c:77:be:4e:fe:49:1a:5f:04:20:25:
         c6:1e:07:4b:06:b7:ab:3a:6f:63:98:aa:4c:05:e8:01:13:91:
         03:04:71:bd:fa:bf:c4:5f:ac:ab:4a:9c:2d:21:4c:9e:aa:48:
         fc:a6:18:38:a4:9d:f5:3b:f7:45:ab:be:e7:c8:79:e0:bf:6a:
         d7:ab:fb:88:60:bb:4e:29:d4:11:4c:3a:45:3d:5a:83:88:f4:
         63:0e:66:7c:ee:1a:c8:c5:cc:c8:1b:06:20:d6:3b:f6:9b:3c:
         9c:57:b7:13:5b:2f:d6:16:92:89:23:b1:dd:10:94:2a:e0:75:
         85:d2:b9:b5:96:0b:cd:23:58:97:6b:50:ae:ef:14:e6:57:ac:
         e8:c8:34:47:39:41:3b:20:06:66:9c:9d:93:78:76:87:a8:43:
         8e:74:c9:4e:20:f6:4e:7c:0a:8a:d4:3c:82:10:60:cc:ef:49:
         22:6e:00:27:5a:3c:20:48:90:12:c9:b4:06:ec:1d:c7:dd:2b:
         83:c8:a8:64:88:4e:f7:f9:08:36:52:c6:d1:e9:18:cd:dc:fe:
         14:4e:8b:7a:ea:34:28:76:d3:e1:c5:99:cd:b6:40:19:6b:4f:
         d1:b3:1a:3f:bc:38:27:4f:4b:02:3e:08:49:f4:2e:bf:1d:c8:
         19:a5:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----