Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          Q0cLFQuj97Sk8M1bzWZpOg48rx+0sQVwSu9V+kiFZ7g=
Subject key identifier:   22:24:1C:CB:68:B5:6E:E0:87:C6:95:96:D0:DA:18:C0:53:EA:03:91
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       01962E9985B485DCBE30E7BFB5579D157526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: 4FXB0W838e2KDL7-L_x6UPsRNAQ.roa (hash: LK8SbOkeipWhuTJTuor/1UupMV/BQue0Yrv+JoGi1Bc=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: r+6pCvzm4JL0w8gxAMHXDFAJeu2nlqxRYFVBGPIwdcM=)
                          3: VWEs-xVV5ND0GJkPhbytzQmCX2s.roa (hash: Lvidk3VL8SGZhZHfYCyzYvXPKQ2gZ6B2D2mdtv2GK9E=)
                          4: l5YxBP66J268QPpOfOKh6pf_dA0.roa (hash: VfFGld2mgne36x9HBpf5GPD2Bw0k6fbkaTy5yNO7fDc=)
                          5: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (hash: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=)
                          6: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (hash: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:85:b4:85:dc:be:30:e7:bf:b5:57:9d:15:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=22241ccb68b56ee087c69596d0da18c053ea0391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:30:74:2c:7f:2b:18:22:22:36:29:76:1a:
                    c5:5f:82:c6:b3:9c:ef:c0:40:16:36:29:40:b9:c9:
                    94:58:67:ef:66:3d:ed:24:54:44:ec:bc:83:9b:d9:
                    d3:f6:08:5e:d4:e1:ab:85:29:ad:92:63:6b:66:5a:
                    94:cc:67:8c:0c:4b:16:fa:2e:5b:81:0c:18:a2:b7:
                    58:bc:d2:58:84:d5:a4:3f:f1:55:36:3c:8f:5c:de:
                    e1:fe:e0:fc:44:c2:bc:8b:52:aa:f8:cb:82:23:07:
                    42:f3:f5:96:9c:21:a5:07:02:21:08:ca:4b:e5:f1:
                    6a:1f:fa:74:76:6f:f7:b8:39:65:79:47:aa:cc:1b:
                    be:df:4f:2f:0a:db:2c:a1:48:ee:10:3c:6e:84:7a:
                    37:de:a5:01:f6:c0:81:89:e2:8a:57:2a:1e:2d:14:
                    6b:f2:4a:19:e4:fd:88:67:bf:0a:0f:96:6e:d2:6b:
                    cc:66:33:17:5c:a9:fd:7c:71:3a:0a:6c:b8:b6:24:
                    ad:22:5e:c3:b8:ee:99:5a:8f:8e:bb:8c:d1:73:6f:
                    2f:c1:6d:7b:d4:cc:c2:50:58:6a:9b:8b:bb:40:bb:
                    52:47:e6:ae:0f:de:5e:7a:f0:fe:67:0d:59:5f:e3:
                    77:23:dc:20:40:6b:75:fa:68:4c:7e:1c:ba:28:25:
                    77:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:24:1C:CB:68:B5:6E:E0:87:C6:95:96:D0:DA:18:C0:53:EA:03:91
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:b9:e1:08:a6:b7:67:32:2e:82:b9:5a:06:ab:89:ae:d8:
         94:ae:a5:14:24:22:26:a6:81:31:2b:3f:58:22:95:96:75:5c:
         15:fe:02:ca:4e:53:06:88:a1:51:ba:e7:73:76:8f:bc:6e:07:
         23:27:3d:55:01:ed:45:78:ef:91:26:84:e5:d5:d7:48:57:d4:
         cb:f9:bd:a8:10:05:7f:19:8c:a4:58:54:00:7f:7b:25:5e:04:
         c2:e6:c5:47:ea:68:d6:81:74:76:e0:75:62:b9:85:b7:34:0d:
         8f:27:02:93:61:c8:c5:9c:b6:3d:b0:92:c7:c4:a4:b8:8a:e1:
         5a:d1:43:29:59:69:9f:61:49:36:b2:9f:d8:6e:67:27:f2:18:
         92:17:52:1c:a0:9f:68:2b:86:ac:2b:05:41:9b:5f:58:f0:c5:
         e6:a1:65:57:c4:a7:0c:6b:7d:49:89:18:5f:20:26:29:28:fa:
         76:ae:0f:69:74:29:6c:85:c5:f5:ab:e8:83:14:f2:5d:2b:4b:
         4e:0f:c7:61:4a:fa:a6:3d:1c:b2:94:eb:4c:2c:4c:13:bc:ce:
         40:73:bd:ff:38:1d:7e:b5:91:b4:0a:7d:64:c6:e1:ae:7d:67:
         ae:94:dd:3d:f8:a2:21:98:89:95:9a:0f:ca:19:38:8e:0c:b1:
         94:f1:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----