Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File:                     JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier:          HXi7DCier1qJI5Aok0TCCkdmnMiE9AsBLrkkGhr9Di8=
Subject key identifier:   10:6A:DA:90:8A:21:FD:53:BB:DB:5E:F0:8B:79:67:8E:F5:31:7E:66
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer:       /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial:       01962E2B37CF558090A44A4F1A6D73870FB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number:          02C2
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: B4c/siL4MX75d0NqkFOY6RasJJSXje2LCUKE2JgRnqI=)
                          2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:37:cf:55:80:90:a4:4a:4f:1a:6d:73:87:0f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=106ada908a21fd53bbdb5ef08b79678ef5317e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:82:2e:dc:17:e7:78:b2:66:dd:2a:90:b7:18:
                    b5:96:0c:e8:2b:24:51:ad:b2:74:b3:47:7b:ee:3d:
                    1e:20:75:30:83:a0:f9:04:33:18:0d:ca:dd:1b:76:
                    0f:d6:e7:e2:f2:bc:40:cf:f2:83:34:61:fa:94:b8:
                    cb:c4:ef:ac:c7:c1:73:6a:d0:6d:02:1a:22:6c:a7:
                    c4:52:51:f6:cd:96:7a:d7:ad:52:33:25:e5:6d:8a:
                    d4:23:d5:d7:24:91:43:8f:58:28:0a:fd:39:55:0f:
                    2d:38:32:5d:39:7a:53:ca:a1:4b:a4:dc:b3:27:8f:
                    9f:a1:f7:3b:c9:d7:5a:a5:87:d6:30:3e:08:8a:79:
                    6a:29:d7:97:8e:6a:1a:6b:d7:28:8a:d8:c7:6f:ac:
                    38:66:13:a5:74:f5:57:29:25:ac:6e:f2:25:84:cd:
                    1b:ff:97:40:27:12:6d:91:38:ed:e8:26:69:3b:2c:
                    9b:b1:bf:c1:50:44:4f:57:fe:bd:7c:16:52:0f:90:
                    39:d3:02:90:b4:c2:e3:66:a4:c8:19:7d:b3:f3:5f:
                    d6:8c:92:58:f4:dd:28:82:6c:16:ff:41:b0:27:13:
                    3f:24:c3:de:4e:a9:ae:9a:73:65:7d:8c:38:fa:51:
                    95:48:ed:bf:f2:ed:0e:37:9d:b9:f4:1e:0c:20:c4:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:DA:90:8A:21:FD:53:BB:DB:5E:F0:8B:79:67:8E:F5:31:7E:66
            X509v3 Authority Key Identifier:
                keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:67:56:da:29:cc:84:48:ce:ba:30:5d:6d:c3:4a:dc:1f:7c:
         31:fc:5a:db:ab:c1:f6:bd:1f:e4:d4:70:04:b5:a1:d4:f3:5e:
         ac:61:8e:a4:fe:e2:32:af:3c:6b:d6:d4:9b:85:e3:48:21:31:
         15:7c:85:de:54:f2:59:97:e2:7f:c6:34:64:a8:a5:04:6b:f7:
         e6:0e:7f:7a:e4:09:a9:ed:6a:88:78:02:24:b6:2c:e6:9a:31:
         27:30:15:73:2c:45:3c:50:e0:b4:94:e0:a6:d4:42:04:71:90:
         b9:fa:0c:71:12:1f:14:f9:b8:53:de:df:44:41:cc:03:45:c6:
         92:9a:7a:bc:14:05:3b:4e:5a:da:9a:1d:cd:12:eb:3f:b8:14:
         46:ea:5c:02:a4:e5:f6:04:4c:73:4f:92:b2:94:85:1e:a2:5d:
         52:e8:50:6f:73:4b:da:84:13:0e:8f:ae:83:93:3c:43:1c:a6:
         38:58:25:ca:57:92:c4:88:f3:a4:a5:2a:de:d4:6b:80:9a:0c:
         7b:42:9a:53:62:2a:5d:b4:63:57:74:12:f4:1a:8b:8a:13:ff:
         78:6c:e5:a6:3c:8b:38:b9:91:b9:b5:15:4f:e0:18:b5:68:fd:
         68:d6:56:7c:23:26:a2:7d:e7:29:87:1e:7a:57:3c:1e:60:8f:
         98:80:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----