Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File:                     JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier:          5VwtcV0BdyvmSQpchTr9K22dhZYXd2e3AhEyRIvxqwQ=
Subject key identifier:   7B:5A:39:86:AA:C5:4E:57:7C:29:86:71:8C:E1:67:AA:8B:EE:6D:50
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer:       /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial:       01962FAB85B836F742E62E6EB075100DE539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number:          0FCB
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
                          2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: XX8jPejFD73ZkZgVc86s4aYy3FEGmVS8xNA+CA6JI0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:85:b8:36:f7:42:e6:2e:6e:b0:75:10:0d:e5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241ed58e426975e299875897caff9552640d9c09
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=7b5a3986aac54e577c2986718ce167aa8bee6d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:99:23:f0:83:32:b4:e1:30:8e:49:21:e8:
                    0b:b4:b0:97:b1:05:19:50:71:91:81:cb:d9:d1:3c:
                    02:f6:22:c1:5d:49:c6:27:ba:3e:ae:26:09:7e:89:
                    41:d8:78:85:83:63:90:66:ce:9e:60:af:d0:47:16:
                    5e:ed:d1:41:77:36:65:f6:53:9b:b4:41:13:10:7b:
                    00:03:5f:d3:b3:a7:90:83:1a:ed:20:78:5e:d3:5f:
                    a9:02:3a:89:48:af:55:6f:4f:f9:f6:27:fe:ab:7d:
                    da:6c:d0:32:87:96:b9:2e:b1:4f:d7:da:61:9b:ba:
                    e1:31:ec:33:13:08:c1:f0:a2:0d:2b:7d:06:e4:0d:
                    55:f4:1f:7e:d7:53:14:68:3e:96:99:d1:3f:cc:d7:
                    15:b6:be:4b:14:1a:ae:ad:ef:b9:f9:f3:01:91:08:
                    b5:22:5d:d3:9a:ba:c8:61:b5:a0:fa:1b:51:bc:5b:
                    f5:20:5c:71:e7:13:fc:aa:32:c0:10:ba:5a:77:be:
                    96:56:25:4b:1f:4d:f1:76:19:8e:c6:bc:6c:c6:23:
                    1b:44:ac:8f:88:2c:c9:73:59:05:2f:90:16:4a:be:
                    83:5d:20:6a:a3:78:a6:cf:c3:ae:18:ca:cc:6b:fa:
                    b5:48:a2:af:57:fa:f8:b2:8c:44:32:d5:b8:47:78:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5A:39:86:AA:C5:4E:57:7C:29:86:71:8C:E1:67:AA:8B:EE:6D:50
            X509v3 Authority Key Identifier:
                keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8b:1c:a3:76:10:60:77:d4:de:52:42:23:e0:2f:6c:93:f4:
         80:4a:8c:b7:9c:95:ad:8d:30:61:9c:3a:61:27:4b:a8:9d:af:
         55:9a:6a:4a:c9:6c:32:83:2c:e4:36:f9:43:d0:58:24:5f:84:
         00:a5:68:4e:99:ce:cb:82:9a:db:5b:89:b8:9c:0a:49:b9:e1:
         da:e1:a7:22:ff:e2:52:60:dc:c7:e1:83:7a:46:fe:29:92:a0:
         a8:e9:45:70:a9:ed:81:57:58:7e:98:33:f2:d0:98:dd:44:1e:
         64:e3:50:2d:18:33:78:24:19:2f:41:56:78:6e:5d:25:51:ea:
         58:06:3f:78:bc:11:5c:c7:93:db:b6:8c:fc:2b:61:a6:41:dd:
         3a:76:d8:79:02:5a:c7:18:8f:16:69:45:71:21:28:34:27:ea:
         3d:8a:c6:31:f9:9d:a8:cb:05:19:d9:be:3c:b8:81:ea:8d:da:
         cf:d2:b3:76:10:13:b9:b1:e9:e9:91:d2:ed:c7:0d:aa:19:5e:
         7f:4f:6a:83:9b:51:6f:13:84:00:be:74:5c:d6:18:93:40:3b:
         2c:b3:16:5b:22:f9:76:3f:5c:1b:53:df:33:b6:b2:39:8d:b5:
         45:fa:87:96:8e:74:27:2a:0a:75:40:a2:45:a5:9b:e3:e2:6e:
         e6:43:68:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----