Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File:                     JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier:          2I6KKxMPiC+1AMGS6PDKqR7IJcqaImXHLTIjivBAtEo=
Subject key identifier:   A8:29:8E:18:52:DF:70:32:57:5F:24:77:45:19:80:5B:46:21:AC:6F
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer:       /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial:       01962F3D647A0130E98D91153C9B39B64AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: x8n0zsnOLPQfyXkz76awJbuUhon/MHTL9Gm2fsRXrhQ=)
                          2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:64:7a:01:30:e9:8d:91:15:3c:9b:39:b6:4a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=a8298e1852df7032575f24774519805b4621ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b5:dc:2a:bf:fc:bf:61:50:81:4a:74:9a:6b:
                    5d:4f:f3:6c:ac:b6:3e:56:05:41:2b:d7:5c:ee:43:
                    20:b8:fd:a8:6a:a3:a2:60:d6:f8:14:55:b7:67:58:
                    31:f4:d4:7c:5f:4e:0e:d7:64:d3:e0:d1:12:00:ee:
                    dd:65:4d:6a:33:71:0e:9d:b6:cd:64:65:e0:b6:08:
                    f1:d8:ef:4b:dd:77:29:e6:fe:c0:59:5d:13:1b:93:
                    8e:6a:68:d2:5d:05:0b:6f:22:bb:35:e7:e9:8f:f5:
                    5f:2d:58:a9:bb:0f:3a:f1:60:60:34:3a:d4:53:2e:
                    7e:89:78:de:04:f3:41:76:df:e2:76:1d:5c:af:aa:
                    88:d6:0e:a3:76:3f:d5:8d:54:5f:43:12:31:16:69:
                    d2:d2:fd:46:17:e9:0b:7c:44:e5:52:b5:8c:00:d8:
                    25:7f:cc:af:33:5e:3c:4f:de:9b:26:49:81:21:98:
                    b3:20:7f:df:e4:b3:9f:30:d3:a6:fa:f6:64:59:53:
                    40:80:d1:06:62:40:df:9b:ea:69:fb:fc:09:ff:fb:
                    1d:30:2f:15:f8:d7:6b:97:de:0c:3f:bd:7f:80:8d:
                    18:bd:fb:01:f8:09:89:4b:6f:c9:3c:2d:f9:8e:54:
                    41:5c:14:3b:79:9e:d5:ac:7f:14:5c:48:a8:bb:09:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:29:8E:18:52:DF:70:32:57:5F:24:77:45:19:80:5B:46:21:AC:6F
            X509v3 Authority Key Identifier:
                keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a7:eb:74:cf:90:d1:5c:f5:dd:55:a7:b1:fb:9d:59:7d:68:
         85:ef:37:01:e4:2d:71:15:30:2d:b6:2b:f7:62:21:c2:16:c8:
         9f:ad:83:a8:9a:61:18:84:35:14:33:ad:73:55:94:95:c8:65:
         72:3b:b3:33:ba:cc:3e:d1:79:45:8b:49:75:06:8c:d5:1c:9f:
         f5:53:4c:40:1f:e7:20:90:f6:b8:e3:86:35:dc:c7:c0:ac:11:
         91:3e:c9:b5:07:ae:49:06:0b:8c:4e:aa:09:a6:29:40:b6:ea:
         34:90:9b:4c:3c:ed:3e:16:a7:6e:b5:78:38:a7:4d:ea:57:d2:
         41:91:5e:ae:db:8e:1b:82:a7:8b:2d:94:88:b2:ae:a5:09:0f:
         67:52:a0:a1:92:f5:66:0f:1b:25:ca:16:96:8a:ab:7e:a4:13:
         00:ba:56:2b:cb:4a:cd:6c:e6:4e:72:36:7f:fd:c0:58:2c:63:
         3c:07:7e:d2:3d:45:2f:ab:1b:24:ef:7b:0f:e3:63:56:c4:d8:
         cd:17:b0:8e:81:eb:fe:7a:e9:00:a3:c6:d6:e9:70:69:70:ef:
         5f:36:a0:13:37:10:19:1d:92:9c:56:cc:df:bd:10:95:da:ce:
         be:78:c1:3f:b8:24:c2:9e:33:ce:46:ff:c4:e6:74:01:13:49:
         c6:d0:83:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----