Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File:                     JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier:          yw3xqJ6zu+IRKiQutW/hVUm3N3nz9bmG00jxE0qSjyQ=
Subject key identifier:   5F:E9:4B:AE:0D:77:3B:3E:C5:F7:1B:09:DB:7C:43:85:6C:05:10:CE
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer:       /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial:       01962F3D5396F43B3F12236A8BFCA6985A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number:          133F
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
                          2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: xdnaURPzecezxV97mC2wA04XAFwlku1gfxhbQJafND8=)
                          3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:53:96:f4:3b:3f:12:23:6a:8b:fc:a6:98:5a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=5fe94bae0d773b3ec5f71b09db7c43856c0510ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fe:20:77:af:88:08:e4:0c:41:a2:df:9d:77:
                    fa:95:3c:73:27:40:87:7b:e8:95:18:53:0b:52:0a:
                    df:47:78:ac:6b:8f:3d:bd:51:b1:79:31:14:e0:42:
                    06:45:86:82:34:91:8a:e2:89:c4:ac:39:2d:9c:40:
                    f0:3b:4b:37:83:b8:ac:1c:63:1a:40:1a:37:bb:9e:
                    d1:a6:ac:83:d0:5e:0e:94:03:e2:fe:5b:ec:05:19:
                    6f:79:3f:20:5e:b4:37:c3:a9:d5:23:6b:ba:0e:bb:
                    a8:ed:7e:94:b7:ff:b8:6c:1a:49:c6:71:02:7b:24:
                    54:48:e1:cc:2b:24:79:cc:97:ad:b1:70:03:73:5e:
                    01:0c:2c:54:0a:4f:d0:e8:4f:90:1e:ce:71:a4:4e:
                    b9:3a:06:55:54:4b:c3:b1:ee:5e:7c:ab:30:b6:96:
                    4f:5f:08:1b:f3:a8:bd:83:32:55:4e:96:d8:2d:8b:
                    26:18:01:ad:2a:db:84:b3:16:0b:b2:31:23:96:f8:
                    d5:5a:3d:2f:bf:07:d0:a7:88:2e:84:e4:63:0b:72:
                    bc:43:28:9d:84:2a:7a:61:c3:46:ad:4b:8d:86:11:
                    bf:5f:71:3a:7a:42:5b:43:bf:b0:25:7c:42:08:9a:
                    61:78:3c:16:d9:86:31:60:96:b2:03:1a:6a:c2:3a:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:4B:AE:0D:77:3B:3E:C5:F7:1B:09:DB:7C:43:85:6C:05:10:CE
            X509v3 Authority Key Identifier:
                keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:90:bb:91:f8:b2:02:f5:91:23:8d:d8:72:19:e1:33:7a:a5:
         b3:97:59:e8:46:81:d9:5c:d0:e6:38:a0:a7:76:ab:00:d1:de:
         8c:ee:cd:4e:2c:b9:c4:10:7c:c8:4e:cd:07:5c:c1:81:86:10:
         66:2a:43:50:d0:c2:44:87:74:d4:eb:67:95:df:c3:bc:14:82:
         61:e2:5f:b7:2b:4e:c1:df:08:42:64:b7:53:32:7e:cd:6c:30:
         45:42:42:f9:d2:9a:b2:09:51:69:5d:fe:e7:67:a8:9d:75:90:
         0c:8f:f6:37:b8:60:e3:a1:4a:cb:48:64:ce:c4:fe:59:93:38:
         ef:a8:69:f7:1f:be:e0:e7:7e:b6:a7:02:23:cf:fc:10:72:27:
         a4:d2:9c:f6:af:1f:d4:c5:2f:3c:ea:2c:2d:77:04:88:25:84:
         ac:d6:8f:96:4e:6f:be:71:9d:d7:45:4d:b0:40:0e:da:4c:67:
         82:39:8d:21:ab:44:cc:fb:ba:d7:c2:c8:1f:8e:40:b4:b3:aa:
         57:28:a6:fc:72:b2:03:f9:5d:02:a8:9b:89:58:34:93:6d:99:
         6b:5f:5f:35:91:e2:78:fb:8a:6c:96:33:72:2a:8a:1c:22:73:
         4f:e0:e9:be:b9:19:f0:a9:41:34:b7:16:5e:2d:ec:c0:93:f0:
         f9:3e:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----