Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
File:                     jwrbomBJNHOMfJaSoLOrezCoK7I.mft (raw, json)
Hash identifier:          8QDZhJUtTZCNiYW2XLunAV2cchm8ZDKr0n1cfzXq4WI=
Subject key identifier:   30:72:C8:79:8F:FF:D6:8D:5F:B4:8D:5C:C4:AC:6D:36:07:2D:EC:B8
Authority key identifier: 8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2
Certificate issuer:       /CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
Certificate serial:       01962F3DA36E4A84485FEBE8428DAB677816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft
Manifest number:          055D
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: jwrbomBJNHOMfJaSoLOrezCoK7I.crl (hash: VJgS009uiVT1raDDMHbvWaEJvkpZYXslxw0cbRRG8QA=)
                          2: lHGrQ5ab4Wwh-Q0oJszTsf0BUdA.roa (hash: BJEIpPOdoxYjpK82/CR/sXoES/6zdTI5hZVWKdTDxHk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a3:6e:4a:84:48:5f:eb:e8:42:8d:ab:67:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0adba2604934738c7c9692a0b3ab7b30a82bb2
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=3072c8798fffd68d5fb48d5cc4ac6d36072decb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:70:7b:78:16:bd:39:e9:8b:33:83:6e:ff:
                    9b:1b:94:4d:ad:bf:c2:e0:17:88:08:c1:59:36:22:
                    21:51:df:f2:7f:cb:3d:d6:a9:ba:e0:7d:90:2e:9d:
                    f5:ac:32:13:d6:23:cd:e0:53:5d:c8:5a:a3:be:e0:
                    f3:7b:12:ce:5c:09:13:99:19:34:45:42:fd:57:e0:
                    9f:b0:46:22:aa:db:29:73:03:75:d0:a2:a1:e5:08:
                    43:90:2d:e9:5c:d0:2a:a7:79:e4:c5:1e:da:e1:fd:
                    cd:2a:db:db:25:5c:a9:f0:f1:71:20:70:fb:7b:5b:
                    e1:19:8d:f5:99:15:3d:a6:af:32:de:21:cf:62:df:
                    a1:29:87:7f:30:5c:27:a2:57:b9:74:9b:72:8f:4c:
                    b6:f2:0e:5d:10:bd:2b:cb:3a:58:a6:9c:65:3f:12:
                    18:1f:2a:59:c1:61:1e:04:d2:5c:3c:4e:0d:73:25:
                    98:ae:7d:47:fe:14:72:0a:2e:18:f5:41:4d:cf:f1:
                    aa:42:05:ab:bf:e1:36:6f:92:e7:b0:03:e8:5a:bb:
                    b9:80:9d:31:7e:dd:a6:c1:71:a8:08:44:67:fa:d3:
                    ac:9c:a2:e2:4a:ab:1c:57:f6:cc:e9:1f:69:50:74:
                    9e:dc:65:db:a5:6d:9b:14:31:76:0d:77:5f:3d:49:
                    e1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:72:C8:79:8F:FF:D6:8D:5F:B4:8D:5C:C4:AC:6D:36:07:2D:EC:B8
            X509v3 Authority Key Identifier:
                keyid:8F:0A:DB:A2:60:49:34:73:8C:7C:96:92:A0:B3:AB:7B:30:A8:2B:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwrbomBJNHOMfJaSoLOrezCoK7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7a85c9-c58a-4f8e-83b1-7bafde4c4b24/1/jwrbomBJNHOMfJaSoLOrezCoK7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:76:81:0f:1e:2c:ad:39:b1:47:9f:6a:cc:e4:f9:00:f7:5d:
         22:28:f0:48:5d:08:2d:8a:84:b3:9f:ea:57:65:5e:70:ed:4c:
         8f:ed:28:f9:76:a7:b2:f7:ac:af:ad:07:b9:29:7c:e2:2d:49:
         b0:4d:c7:e9:4d:e4:e6:93:03:75:97:95:1d:19:77:ef:f4:61:
         d6:16:49:71:39:af:56:81:a3:65:de:8b:42:5c:32:4e:57:f7:
         4a:30:33:a3:65:c2:a5:90:81:15:6f:9c:51:08:2b:c1:71:6e:
         1c:ad:73:af:82:30:f1:97:a2:30:3b:5b:d5:36:35:27:72:eb:
         80:0b:f8:33:07:42:0f:5e:6a:ea:44:d1:43:eb:da:42:42:44:
         24:5e:75:07:73:c7:05:a8:bd:d6:23:65:8d:60:80:9e:70:55:
         97:a3:4e:78:48:fe:cc:91:25:b2:22:eb:cb:18:92:8b:54:f5:
         ce:c2:f3:11:85:53:aa:12:4b:8a:2f:1f:0e:6a:1c:00:8c:89:
         8c:b0:c6:bd:93:a3:f2:0d:c0:6e:35:a9:f4:7f:43:63:ed:63:
         ad:7c:5f:3d:be:52:2e:1b:2b:03:bc:88:87:ff:4a:55:69:95:
         ee:ac:3e:b7:2d:bd:01:9c:f5:bf:99:b4:74:3d:f0:fc:2d:00:
         16:75:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----