Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File:                     jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier:          j9VoynyEx9nyyDwXDXDFAnqjdiC5sARJpZq1slWVPaU=
Subject key identifier:   C9:F0:98:87:2C:57:BE:37:B7:81:35:84:63:23:09:BA:0C:BA:19:3E
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer:       /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial:       01962F3D9E45C5883307F91F027B49F46AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: ZrbFO4P5QOzscNesljQEGuvENuIm9zt72fvBVamKTxA=)
                          2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9e:45:c5:88:33:07:f9:1f:02:7b:49:f4:6a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=c9f098872c57be37b7813584632309ba0cba193e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ed:2b:44:63:77:4c:1b:20:fc:c0:0f:71:88:
                    56:35:78:84:9b:b7:2a:7c:1d:9c:15:cb:de:f4:31:
                    74:1a:c5:81:e1:73:54:05:30:95:92:7c:d1:29:91:
                    80:5d:d8:42:c6:7c:45:34:de:d0:48:df:c3:41:1e:
                    8b:44:9f:8a:6f:50:18:3d:d6:d8:80:ca:20:26:3e:
                    62:bc:00:44:7e:71:06:d6:9c:e6:d1:d3:50:71:15:
                    0c:dc:d4:97:0d:ae:e7:92:ff:c5:6e:fe:84:87:b7:
                    ce:15:c5:fd:e3:fa:42:73:02:6a:43:16:e5:3a:9e:
                    73:0e:c1:e3:01:48:60:23:c0:86:04:05:cd:29:fa:
                    d8:75:eb:73:2f:74:1c:77:5e:3d:96:bd:e1:56:07:
                    89:6b:e7:0c:84:87:03:1f:a4:4a:19:14:68:cc:35:
                    61:d1:72:61:1d:2a:a4:66:61:86:5a:e4:62:b1:d8:
                    4b:73:92:71:bd:52:5c:74:7f:a6:53:56:75:47:e1:
                    6f:d1:b5:5d:5d:77:3d:56:7d:c6:94:c4:4f:89:54:
                    2e:65:29:2a:ef:76:fc:a7:6e:9d:38:0f:a5:60:18:
                    71:e5:66:a3:0b:72:74:2f:8d:01:63:2d:b8:5a:23:
                    8c:3b:8f:7a:1c:ac:80:d9:04:78:0e:8e:b3:28:df:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:98:87:2C:57:BE:37:B7:81:35:84:63:23:09:BA:0C:BA:19:3E
            X509v3 Authority Key Identifier:
                keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:84:c4:d2:67:ef:4d:a0:7c:32:3f:c2:4b:a8:11:29:4b:d7:
         a7:ca:09:36:1c:bf:00:36:88:04:47:6f:65:a8:48:67:42:69:
         d1:cc:f1:a6:72:f0:e9:74:08:00:22:b8:54:bb:03:b3:bb:fa:
         95:64:78:6a:f8:e1:0a:30:ca:6a:83:4f:1a:f9:d3:ed:c5:e9:
         73:56:ed:8b:9d:ca:91:4e:05:75:9e:88:ac:3f:bc:32:ba:53:
         f6:56:ef:6a:bb:b6:e1:19:c7:51:29:99:d7:03:fa:22:ac:2e:
         ec:43:68:98:6d:5a:17:d6:00:75:b9:18:cc:98:c5:72:58:f4:
         c3:55:7f:9e:72:e2:b6:dd:2b:77:00:69:d3:2a:16:65:04:28:
         45:a3:c8:b5:cc:a4:4a:c1:f5:8b:28:96:71:61:08:46:e2:58:
         82:3e:8c:db:0a:79:27:1b:af:b3:5b:6a:dc:4e:63:2b:f5:bf:
         df:7a:3e:15:98:e3:69:68:4d:53:4b:54:b6:fb:56:cf:8f:ac:
         83:b5:f7:4f:10:ef:dd:fa:19:de:bd:69:0e:de:08:19:0d:d5:
         70:26:2e:19:ce:32:55:7c:13:0b:cc:fa:d8:52:37:60:5f:ba:
         9b:d4:80:76:09:c0:72:30:12:6f:8e:56:02:91:eb:a4:c7:bf:
         24:f4:24:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----