Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
File:                     JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft (raw, json)
Hash identifier:          0R9ZbJODPgF0bD696/0n+iJgjmmYRfJtQsuILv+bnCo=
Subject key identifier:   04:52:AD:90:EF:B0:26:50:97:90:9B:51:8B:9D:F1:87:FB:CD:EA:F7
Authority key identifier: 27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A
Certificate issuer:       /CN=2705a4ed17a681842102cc8f6ef03a569e15612a
Certificate serial:       01962ECF6E28BD97501BE81CA5A47710930C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 1_mSe_O3_jP0WmX_FuPYQaOIA_4.roa (hash: 1RWFPDfJ1G/rxL8RWFN0T7fyBapWijKmVx76gf4PMDo=)
                          2: JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl (hash: Joi1+aA0GpBNlFqeJAouWYJhwJXYlncYjFCvEyvtoKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:28:bd:97:50:1b:e8:1c:a5:a4:77:10:93:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2705a4ed17a681842102cc8f6ef03a569e15612a
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=0452ad90efb0265097909b518b9df187fbcdeaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:60:99:7f:80:67:fd:3c:ae:5b:f2:87:a2:
                    53:65:22:80:08:41:43:6c:8f:f2:4d:be:86:ae:30:
                    96:d6:26:64:48:c3:f0:dd:98:0e:aa:67:0a:98:7e:
                    08:04:cc:33:2c:58:dc:c5:6c:ec:36:e7:43:8d:e9:
                    c0:04:8b:7c:5c:72:6d:b4:42:b5:ad:1c:e2:20:8b:
                    16:9c:77:6a:4d:23:00:51:6e:2f:6e:d9:a3:b7:e1:
                    dc:a3:cc:06:24:4e:2b:18:18:df:78:7f:a5:8b:df:
                    24:36:b6:f7:6a:ea:6b:45:82:ef:1f:ce:e5:88:94:
                    f5:5e:fe:95:59:cb:50:5f:dc:73:1d:5b:6b:2c:98:
                    20:2a:03:d5:26:27:08:60:40:27:9e:80:b8:fc:02:
                    ba:a4:49:14:9d:63:55:08:35:cf:0c:05:6d:24:79:
                    20:06:e2:c3:6a:bc:7c:eb:9c:6f:1c:ae:92:dc:9a:
                    c2:c3:e2:5b:7f:fd:a9:2a:dd:47:70:11:a5:07:0f:
                    f0:4a:7c:79:2b:8d:6b:3d:67:17:a8:6f:30:d3:22:
                    f3:a2:a9:e7:2c:d6:b7:ec:a6:17:fd:1b:46:0b:f6:
                    61:c7:6d:52:5a:5c:bc:c8:31:54:fd:f4:43:26:1b:
                    6a:42:e8:3e:64:a9:60:b4:fb:f3:43:2d:94:d7:be:
                    d8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:52:AD:90:EF:B0:26:50:97:90:9B:51:8B:9D:F1:87:FB:CD:EA:F7
            X509v3 Authority Key Identifier:
                keyid:27:05:A4:ED:17:A6:81:84:21:02:CC:8F:6E:F0:3A:56:9E:15:61:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwWk7RemgYQhAsyPbvA6Vp4VYSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c875d-9e65-4e06-8865-65368f408da3/1/JwWk7RemgYQhAsyPbvA6Vp4VYSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:cc:bb:49:73:d8:a5:e2:6b:d5:87:e1:74:64:a6:5a:b4:
         d4:09:af:12:f7:0b:31:6e:9b:78:3c:99:9c:3d:52:c6:58:a9:
         ee:eb:b3:87:0e:0a:57:63:44:cd:10:f6:e4:c1:6a:2b:98:f6:
         52:0b:69:7a:77:a6:14:7e:39:8d:42:45:35:f2:4f:dc:f5:8c:
         ba:b1:7d:7c:1e:d4:7e:8d:bc:69:84:d1:a8:b3:83:e6:f5:d9:
         e2:7c:94:ad:03:62:14:47:37:e8:bb:bf:ec:77:5f:5c:f1:24:
         38:7f:aa:99:c3:5a:51:67:82:f5:75:11:c7:38:e8:04:fd:99:
         a3:af:51:0a:4d:16:f9:d9:94:91:fe:67:e6:45:6a:e4:5a:fa:
         5e:6e:b9:22:67:49:32:26:7e:b4:76:f8:f0:d3:a3:db:90:98:
         0e:72:ea:fe:67:5d:32:89:61:c2:bc:ac:2e:4f:24:08:57:86:
         bb:09:a4:db:6d:31:d1:c8:c9:83:91:2c:5e:1b:00:08:3f:9a:
         07:28:9f:e4:d8:95:c9:f0:7d:30:b4:cb:91:be:a9:69:67:fb:
         bc:9e:3d:20:d7:a3:88:c6:05:1c:03:35:24:a2:64:ea:a8:9f:
         68:7c:62:dc:69:53:56:89:87:5c:f5:a3:d0:65:81:16:b0:0d:
         69:fd:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----