Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File:                     JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier:          s68Y/X+DVAzkWHcusbm8Hw0eX+u6iowm8EzLJjT7MoE=
Subject key identifier:   95:26:DB:28:7C:EB:B8:1A:E9:D5:06:9E:78:6A:22:7E:53:97:AA:8E
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer:       /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial:       01962DF4512DEE75155CC580C98EB8D18DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number:          0FA0
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
                          2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: Gf/uFd+yW0r3ZZDL9YaKb9pCCP88JDtvmD8mx+uJID4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:51:2d:ee:75:15:5c:c5:80:c9:8e:b8:d1:8d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=9526db287cebb81ae9d5069e786a227e5397aa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:16:0f:3e:47:a5:73:39:28:6e:46:d7:ca:1a:
                    af:8e:da:d4:dd:76:c0:61:a4:64:25:0b:fa:d4:d9:
                    50:15:f4:88:1a:fc:a5:36:ae:c9:0b:27:18:c4:0b:
                    0e:20:78:a0:00:ed:95:a4:da:fe:e6:d0:63:a3:24:
                    c0:90:3b:8d:1f:c7:d6:83:d8:ad:e8:4d:b8:fc:fa:
                    8b:31:f4:89:ec:43:df:d5:35:4e:69:e6:97:5f:4f:
                    94:92:64:30:e0:06:b4:4b:03:2d:00:16:1c:1c:72:
                    ec:b3:d6:0a:0b:d1:a1:a2:d1:98:ee:20:da:3d:89:
                    ed:46:59:26:e8:e4:86:1b:63:38:6e:01:a7:eb:23:
                    dd:17:d4:33:36:97:ba:2a:31:9f:a3:5b:c3:d6:1a:
                    ba:39:5d:05:ce:8b:14:95:7a:7b:57:aa:83:c3:6a:
                    0e:5e:ca:4e:de:3e:27:52:b6:05:5b:e1:e6:84:d2:
                    12:cf:5e:eb:34:d0:e4:eb:f5:e3:cf:92:18:94:86:
                    81:a8:53:80:8b:80:31:33:22:c5:f3:c1:c7:01:ff:
                    42:fd:39:25:fb:f6:b6:16:99:5d:39:e4:fc:e7:6a:
                    70:52:48:1a:9b:d8:4d:2e:9e:14:ae:1f:58:90:d9:
                    98:89:91:5c:5d:3b:43:f5:26:32:14:e3:2e:d7:7c:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:DB:28:7C:EB:B8:1A:E9:D5:06:9E:78:6A:22:7E:53:97:AA:8E
            X509v3 Authority Key Identifier:
                keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:bc:b9:7f:25:ec:bc:48:37:a0:80:f1:a2:f3:8e:eb:87:
         37:76:ff:59:b7:29:b9:47:92:62:35:fe:e2:d5:b6:bb:61:9a:
         60:5e:a6:0e:28:5f:16:f2:41:5d:1c:c4:d3:34:84:bd:a0:9c:
         f7:6a:e3:27:e1:19:26:33:69:47:42:93:af:83:ab:7c:c4:64:
         ab:ea:c8:aa:ac:cf:7e:c6:70:61:3f:2b:9d:96:87:ad:68:3d:
         6d:ca:a4:26:29:59:a1:40:1c:18:a6:a4:fc:e2:e8:8b:8a:51:
         2a:2d:28:29:50:08:9b:4a:88:37:1b:8f:b5:14:b4:8e:96:cb:
         05:84:ed:80:3c:4d:9a:62:3f:e6:e7:33:bf:7c:be:65:52:d5:
         d4:ad:b2:b1:df:79:b6:1d:c0:fa:82:4f:7c:07:83:73:7d:e9:
         ce:b5:c4:6b:78:f7:dd:8c:9c:50:3d:23:35:65:2c:d6:74:36:
         58:d7:4b:00:80:68:78:9e:34:13:b1:ab:cc:e8:cb:c4:eb:11:
         1a:16:e6:fc:50:fc:5f:e5:3f:ba:2d:4e:03:dd:68:7a:62:e7:
         e4:54:3a:b2:04:27:cc:5a:ae:fe:79:13:e0:9f:d0:7d:a5:20:
         37:30:b3:ea:42:1a:7f:d6:95:6b:09:58:c7:d6:3c:fd:b2:e6:
         44:d9:85:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9FEt7nUVXMWAyY640Y3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk
Y2Y0MTQwHhcNMjUwNDEzMDcwMTQ4WhcNMjUwNDE0MDcwMTQ4WjAzMTEwLwYDVQQD
Eyg5NTI2ZGIyODdjZWJiODFhZTlkNTA2OWU3ODZhMjI3ZTUzOTdhYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhYPPkelczkobkbXyhqvjtrU3XbA
YaRkJQv61NlQFfSIGvylNq7JCycYxAsOIHigAO2VpNr+5tBjoyTAkDuNH8fWg9it
6E24/PqLMfSJ7EPf1TVOaeaXX0+UkmQw4Aa0SwMtABYcHHLss9YKC9GhotGY7iDa
PYntRlkm6OSGG2M4bgGn6yPdF9QzNpe6KjGfo1vD1hq6OV0FzosUlXp7V6qDw2oO
XspO3j4nUrYFW+HmhNISz17rNNDk6/Xjz5IYlIaBqFOAi4AxMyLF88HHAf9C/Tkl
+/a2FpldOeT852pwUkgam9hNLp4Urh9YkNmYiZFcXTtD9SYyFOMu13zF3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUm2yh867ga6dUGnnhqIn5Tl6qOMB8GA1UdIwQY
MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt
YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl
LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOj28uX8l
7LxIN6CA8aLzjuuHN3b/WbcpuUeSYjX+4tW2u2GaYF6mDihfFvJBXRzE0zSEvaCc
92rjJ+EZJjNpR0KTr4OrfMRkq+rIqqzPfsZwYT8rnZaHrWg9bcqkJilZoUAcGKak
/OLoi4pRKi0oKVAIm0qINxuPtRS0jpbLBYTtgDxNmmI/5uczv3y+ZVLV1K2ysd95
th3A+oJPfAeDc33pzrXEa3j33YycUD0jNWUs1nQ2WNdLAIBoeJ40E7GrzOjLxOsR
Ghbm/FD8X+U/ui1OA91oemLn5FQ6sgQnzFqu/nkT4J/QfaUgNzCz6kIaf9aVawlY
x9Y8/bLmRNmFUw==
-----END CERTIFICATE-----