Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File:                     JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier:          Xg1eq59kuTkiGpX1vpedwHqwMHlXPQWccTBnSQ3kXMw=
Subject key identifier:   9E:76:83:CA:14:7A:91:3B:A3:D8:EE:F4:CA:DE:40:AF:C3:42:5F:57
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer:       /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial:       01962ECF7FA485AF1B87A6DB931783A3BFBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number:          0CDF
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: WDiZ+xS2RNO9632UzXvAaO6MG5jJ3liY+bKKMAVsRm4=)
                          2: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (hash: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:a4:85:af:1b:87:a6:db:93:17:83:a3:bf:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=9e7683ca147a913ba3d8eef4cade40afc3425f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:64:50:76:ba:50:46:ea:30:d1:46:ae:53:4b:
                    2a:c7:cb:32:d8:c9:39:1d:c5:65:d7:85:38:d2:d5:
                    b3:8a:cd:5d:0b:94:e5:ab:cd:56:d0:23:11:3a:27:
                    6e:24:8b:8f:62:c2:5a:44:97:1e:98:37:4b:1d:83:
                    40:75:ef:30:5f:8c:b0:c4:57:78:35:ef:fc:c1:a2:
                    c6:f3:21:e7:eb:17:a7:7f:a0:82:75:f1:06:76:9d:
                    f7:a0:92:ca:08:f3:3a:ab:35:87:d9:8c:bf:8d:67:
                    b4:94:4e:a9:99:13:fb:a5:71:df:3d:7f:95:00:c6:
                    db:bc:dc:15:8f:f3:1c:37:8e:c1:15:37:f2:df:95:
                    5b:cf:9b:b3:85:bd:ae:b0:a4:19:15:c6:54:19:df:
                    e4:e0:1f:05:3b:4d:3b:9f:98:97:eb:cd:c3:90:97:
                    38:d2:57:57:ce:43:ec:6d:b7:de:bc:aa:d3:1a:a7:
                    dc:3c:03:6e:6f:29:48:ec:52:b4:d0:12:17:62:78:
                    c7:77:c8:8e:59:f7:a1:a7:f0:8c:a6:08:66:05:10:
                    65:0e:0c:8b:e0:68:89:1d:15:24:38:60:19:24:9a:
                    b1:55:51:a0:00:bc:d0:21:2c:35:d2:70:ff:d9:0a:
                    66:f0:13:3f:f3:e5:92:3b:ee:c8:90:09:dc:fe:d4:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:83:CA:14:7A:91:3B:A3:D8:EE:F4:CA:DE:40:AF:C3:42:5F:57
            X509v3 Authority Key Identifier:
                keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:da:b2:d9:9e:29:51:71:ae:89:ea:95:ae:e4:ef:9c:61:3f:
         c2:73:85:c2:53:20:31:91:19:35:7b:0c:53:96:63:ba:1a:7b:
         9c:5d:26:d2:e8:61:a0:10:6a:c1:55:4a:6e:0f:56:49:39:85:
         52:bb:c9:6c:a1:2c:ca:77:15:0f:88:91:78:92:bf:d4:76:2d:
         64:f6:8b:fe:f2:1f:40:ec:34:b8:a4:c8:d7:77:c6:64:a3:9b:
         e6:fc:96:60:af:24:ac:14:8b:7d:9f:d6:ec:63:b5:83:15:f7:
         f2:34:76:24:2c:44:50:9c:c9:e3:41:22:46:65:0b:4c:e7:7c:
         5d:21:86:70:fd:28:82:b9:7b:17:bb:1a:26:b1:ca:94:65:24:
         c6:c9:3d:4e:bb:27:38:22:6f:52:8c:f0:cb:8b:1e:3b:65:24:
         4a:56:8c:8c:42:c0:5e:e4:c8:15:d8:89:61:02:4a:78:02:8b:
         b1:8c:56:27:e6:f0:90:7e:f6:94:18:15:37:19:69:87:52:21:
         4c:94:19:6a:d7:ac:29:18:2a:db:e1:9b:68:32:53:f5:55:12:
         53:6a:12:44:21:c3:0a:c1:fb:85:78:04:f5:f6:41:d8:66:9b:
         05:61:12:28:2e:dc:68:65:87:30:5a:34:d0:88:e3:2e:ed:ff:
         cc:46:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----