Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File:                     JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier:          KJveq4hs9w+bG6dJ9mF5/FsOzJv/u3upVOWZLMxGa1I=
Subject key identifier:   3C:EB:E8:7B:C7:DC:B6:B2:D7:60:50:9F:96:67:1D:62:A8:FE:80:8C
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer:       /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial:       01962E98B0201686F0CC573A8F2293782B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
                          2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: DRmLJgiJaDqrYqJOL4iA8iGaNkA8tdn1P4E+KBZMSio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b0:20:16:86:f0:cc:57:3a:8f:22:93:78:2b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=3cebe87bc7dcb6b2d760509f96671d62a8fe808c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:ac:52:a9:21:10:59:ea:c6:7f:2a:e4:97:
                    8e:a8:59:a6:a7:13:56:7f:df:94:e0:f0:ef:9c:e0:
                    cb:08:52:84:5f:5d:be:8e:31:ad:fc:af:46:b3:6f:
                    1a:57:54:63:ea:b7:6c:cd:8e:c3:24:38:41:86:bb:
                    26:92:b3:fb:c7:8f:dd:f2:dd:9f:82:a3:43:2f:66:
                    81:27:9d:dc:2b:49:ab:4f:0e:6c:39:af:b3:17:ca:
                    d7:ed:70:21:fc:e8:0e:0b:25:90:54:0d:6a:1d:04:
                    e0:dd:cd:cc:ff:e7:a2:a8:99:b8:13:67:8a:41:63:
                    a6:31:35:79:73:e2:d2:99:d8:f2:49:5d:b0:74:17:
                    72:01:c1:f3:ab:0f:de:82:1e:19:37:7f:06:b3:2f:
                    10:f5:14:66:97:a6:21:e0:0d:31:fd:ad:9f:e0:54:
                    60:aa:98:df:85:16:1f:9a:0b:9b:5b:cb:c6:46:23:
                    2c:2b:71:71:7f:6c:5f:89:d6:63:40:50:a5:48:b6:
                    ad:58:4b:a9:62:99:19:b6:2f:d0:f9:56:33:44:9f:
                    aa:1d:96:f8:ce:08:9d:d6:60:f9:d8:57:7f:d9:7d:
                    e7:62:71:40:7d:8b:93:e3:25:92:f5:0c:66:82:ec:
                    ad:72:c8:a3:5f:79:62:27:4e:fb:f1:76:6c:ac:76:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EB:E8:7B:C7:DC:B6:B2:D7:60:50:9F:96:67:1D:62:A8:FE:80:8C
            X509v3 Authority Key Identifier:
                keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f0:bd:42:33:bd:1d:e6:84:98:d9:ad:2c:14:ba:75:d5:97:
         0a:ab:39:91:02:36:1a:58:0d:cf:5b:fe:7a:ab:b5:fe:ee:9a:
         bc:22:9b:5b:bb:6c:54:24:2f:e5:64:6b:a6:be:25:55:aa:85:
         f3:f3:d0:87:40:dd:7c:a6:24:30:4a:94:30:28:c7:e8:92:94:
         f1:79:eb:7e:16:3a:61:85:c3:2c:84:c8:c2:5f:14:24:b8:86:
         06:e0:d3:ea:52:b6:53:01:44:95:35:ee:ca:d9:0a:57:1d:52:
         4a:60:49:b9:82:bf:41:f7:da:65:ba:61:1a:e9:6c:c7:9a:18:
         f9:85:7e:a2:df:50:12:00:d8:e4:ca:7c:5f:df:ff:45:d4:ff:
         5a:5f:1e:a6:0f:fa:dd:a7:21:cb:79:88:1e:fd:f6:42:83:56:
         7b:7d:bf:03:23:58:d2:34:5a:92:7a:c5:b9:fa:3a:e9:ec:19:
         26:ad:67:29:9e:b5:34:8c:4e:8c:d3:53:c5:32:4b:93:e5:01:
         ee:e0:e9:b7:03:57:be:80:bc:15:fa:29:32:96:4c:0d:0f:d4:
         a0:e2:44:8d:99:25:d6:49:67:54:d1:89:0a:a9:cb:13:dd:bc:
         0a:65:08:5c:76:f6:f6:29:51:17:16:2a:c5:29:6e:85:81:f4:
         a7:e0:03:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----