Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File:                     JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier:          o00820a0UUJS9LtM4lHqWGn+QnRF/ofBVJMKRLA/Mbg=
Subject key identifier:   A1:EC:A6:3A:9A:50:5B:21:F8:44:CF:16:06:5C:8C:FA:B2:90:78:81
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer:       /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial:       01962F067A516295B74600C7AB3FDA527526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
                          2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
                          3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: QQy73AdwI5UtrMnqbMG8WBb3XBh69sh3ivsDRc+QJus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:51:62:95:b7:46:00:c7:ab:3f:da:52:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=a1eca63a9a505b21f844cf16065c8cfab2907881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:bb:1f:c0:d6:05:90:4c:46:cd:62:97:62:
                    d3:26:34:8a:9c:8f:e1:2e:55:bf:85:76:76:8b:a9:
                    56:aa:c1:71:08:13:60:69:0a:80:a5:24:2f:88:4c:
                    39:89:61:37:57:31:bc:e4:20:7a:3c:b2:91:42:18:
                    2e:59:13:40:69:00:9c:47:c4:e8:90:ca:b1:45:bb:
                    28:be:96:51:9b:60:c9:54:65:f2:f9:25:79:10:33:
                    bc:52:08:b1:2c:c6:61:68:68:e7:0c:1b:e5:dc:32:
                    6e:ee:cb:91:ea:d5:15:e0:1a:6c:c2:e1:cd:b0:99:
                    a1:79:4e:ed:af:49:2e:c5:4e:62:0c:bd:d9:32:4a:
                    c1:d2:35:9b:a8:2b:bb:52:6a:f4:a5:4a:2d:4d:fa:
                    34:81:d1:3a:18:76:be:bf:0c:c0:c5:29:c1:ab:86:
                    1b:43:fa:b4:1f:31:76:20:0c:40:48:79:93:89:c8:
                    19:71:a8:60:5a:d5:3d:be:6a:4d:26:39:f8:ed:f4:
                    60:44:8f:cb:06:3a:42:fc:59:4a:89:ce:03:88:17:
                    4a:f9:c3:f9:ee:93:12:7b:12:ab:10:8f:1b:3a:68:
                    4c:c8:23:66:ce:a8:6d:f4:32:8b:78:5f:6c:af:a6:
                    67:72:53:9d:c5:ec:4a:94:6a:44:3b:58:c8:04:f3:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EC:A6:3A:9A:50:5B:21:F8:44:CF:16:06:5C:8C:FA:B2:90:78:81
            X509v3 Authority Key Identifier:
                keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:b1:01:61:91:8a:a4:c8:19:2e:1a:2f:0c:49:54:d5:5c:
         22:a9:bc:0a:7e:8c:75:3d:87:16:b1:4c:50:44:93:b9:59:30:
         b5:76:a2:38:72:d2:7a:e7:bf:6f:3e:c9:61:d5:31:0a:7a:a8:
         20:44:8e:06:68:b0:de:54:c1:c3:1f:a9:ba:e5:b3:50:8c:fa:
         41:93:ca:89:46:7b:9a:00:d6:fb:d1:07:21:7d:01:88:83:b7:
         ce:de:2f:44:ea:43:aa:2b:a9:8e:2a:0a:d5:f0:e5:2f:b1:45:
         ac:f7:db:29:ad:92:47:b4:ed:5e:45:a1:6f:4f:52:13:39:a3:
         3c:4a:6a:3e:b9:24:29:40:75:24:e5:1f:e9:1b:2f:2c:86:e5:
         00:66:a8:48:da:c5:d4:6d:39:bb:e6:2d:ba:04:bd:c8:15:6a:
         ce:1b:dd:1b:7d:21:65:f3:a6:80:77:ed:75:aa:ff:f5:7f:fd:
         40:d0:73:90:62:6d:5d:40:ac:dc:d4:ff:e5:23:14:70:c1:09:
         23:05:42:e8:a4:7f:dd:d1:be:b7:e1:d1:6a:a4:d9:3e:e6:72:
         77:6f:71:36:5d:39:d3:02:b2:9a:92:cc:44:e4:62:ca:5a:9f:
         c4:bb:2a:e8:48:01:ee:5d:68:7e:cf:35:40:f4:4d:83:57:f1:
         c1:3b:eb:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnpRYpW3RgDHqz/aUnUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTllOWJlMWZiZDFlNjkwOWEwYmU5YTkwYjM4MGY4MjRm
YWIxYTUwHhcNMjUwNDEzMTIwMTE1WhcNMjUwNDE0MTIwMTE1WjAzMTEwLwYDVQQD
EyhhMWVjYTYzYTlhNTA1YjIxZjg0NGNmMTYwNjVjOGNmYWIyOTA3ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R27H8DWBZBMRs1il2LTJjSKnI/h
LlW/hXZ2i6lWqsFxCBNgaQqApSQviEw5iWE3VzG85CB6PLKRQhguWRNAaQCcR8To
kMqxRbsovpZRm2DJVGXy+SV5EDO8UgixLMZhaGjnDBvl3DJu7suR6tUV4BpswuHN
sJmheU7tr0kuxU5iDL3ZMkrB0jWbqCu7Umr0pUotTfo0gdE6GHa+vwzAxSnBq4Yb
Q/q0HzF2IAxASHmTicgZcahgWtU9vmpNJjn47fRgRI/LBjpC/FlKic4DiBdK+cP5
7pMSexKrEI8bOmhMyCNmzqht9DKLeF9sr6ZnclOdxexKlGpEO1jIBPNW6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHspjqaUFsh+ETPFgZcjPqykHiBMB8GA1UdIwQY
MBaAFCVZ6b4fvR5pCaC+mpCzgPgk+rGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQt
NGFhYWRhNjVkNzFjLzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQtNGFhYWRhNjVkNzFj
LzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq6qxAWGR
iqTIGS4aLwxJVNVcIqm8Cn6MdT2HFrFMUESTuVkwtXaiOHLSeue/bz7JYdUxCnqo
IESOBmiw3lTBwx+puuWzUIz6QZPKiUZ7mgDW+9EHIX0BiIO3zt4vROpDqiupjioK
1fDlL7FFrPfbKa2SR7TtXkWhb09SEzmjPEpqPrkkKUB1JOUf6RsvLIblAGaoSNrF
1G05u+YtugS9yBVqzhvdG30hZfOmgHftdar/9X/9QNBzkGJtXUCs3NT/5SMUcMEJ
IwVC6KR/3dG+t+HRaqTZPuZyd29xNl050wKympLMRORiylqfxLsq6EgB7l1ofs81
QPRNg1fxwTvrhQ==
-----END CERTIFICATE-----