Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File:                     caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier:          KfeubDgA71FCIqMnjCLPp6PxIeLT97AkBQIt9NxtbH0=
Subject key identifier:   AC:75:1A:9A:3A:EE:E9:75:2E:6F:F1:07:80:35:5E:A8:52:A9:1A:33
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer:       /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial:       01962F0739C9CF7888DFA478CBCB358556E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number:          0242
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=)
                          2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=)
                          3: R5EoUABcKiwLg06w_OxlkJfMqUk.roa (hash: irt2J6S0P6bVoeLD1I6fHpK1oay2SiSe0bMOlV1dUxk=)
                          4: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: KnseQSlF+KiB6JEaYovETgl+TEoZl9Bnu+flDmzZZ5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:39:c9:cf:78:88:df:a4:78:cb:cb:35:85:56:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=ac751a9a3aeee9752e6ff10780355ea852a91a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:20:bb:4a:7f:c1:24:73:c7:c3:a2:8f:9f:
                    fc:e8:6c:07:6e:5e:6f:9e:1a:e2:92:c0:dc:30:9f:
                    cb:d4:df:61:06:79:97:15:a1:df:e9:ad:44:0a:d7:
                    1a:d8:35:d7:f1:be:24:bc:60:38:9d:bf:13:2f:2c:
                    90:7c:90:ed:1e:87:ab:5b:92:dd:d2:e5:1a:61:b6:
                    5c:c8:8d:72:c3:f2:a8:71:21:28:4a:c1:fb:5a:21:
                    90:9e:57:4d:9a:3d:c7:e8:02:5f:f4:b0:63:f7:a7:
                    b6:31:25:c7:78:56:8d:e0:e8:aa:63:0f:ed:e6:bd:
                    86:d4:32:33:ee:ab:31:cd:5f:0d:0b:34:53:0a:c3:
                    71:69:28:03:7b:b8:7a:1b:da:28:1b:d9:63:be:8b:
                    dc:f4:b1:ee:e5:e4:df:03:5d:8a:c9:f4:32:2f:d2:
                    f2:e3:fc:df:d2:d0:f6:53:25:e7:ca:97:e1:c7:f2:
                    a0:4e:33:91:22:48:f0:d6:9e:96:71:e4:3f:75:13:
                    46:9f:a5:86:94:a2:70:5a:45:83:1c:03:ec:48:da:
                    5a:dc:5e:95:82:9d:ad:31:a7:39:b8:ce:ac:ef:ad:
                    c2:15:5e:77:63:58:e8:9d:fa:14:64:34:54:0c:eb:
                    66:8c:52:b1:01:dc:86:c5:a2:6e:ef:1c:e9:61:9f:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:1A:9A:3A:EE:E9:75:2E:6F:F1:07:80:35:5E:A8:52:A9:1A:33
            X509v3 Authority Key Identifier:
                keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:84:83:be:6b:05:10:0d:2e:af:9f:2e:25:81:ee:b8:33:db:
         56:34:54:9a:91:2f:fb:c7:9e:f2:85:e8:06:54:36:a5:ea:3a:
         08:14:48:e5:ec:7f:7c:bd:6e:a0:aa:0a:1b:0a:a4:fa:fc:36:
         45:c1:44:42:74:c0:d0:e6:67:c4:b3:e3:2b:08:91:11:71:49:
         75:de:72:be:51:0b:35:4a:ea:1c:ae:0b:76:26:99:da:e4:4b:
         00:f3:fc:a6:b4:72:dc:90:26:c6:28:83:be:e8:80:82:94:b0:
         c5:b8:4f:f5:73:42:53:ff:3f:95:34:08:8b:e4:35:17:6b:42:
         09:de:f1:94:07:7a:b2:1e:ad:b1:ca:96:3c:45:2b:f8:a5:f1:
         08:e7:0b:4d:16:e0:79:e1:24:da:2d:07:6f:96:bb:6e:c8:6a:
         a3:67:af:4f:73:dc:2b:79:a9:00:20:5a:af:98:06:51:e0:40:
         4f:c3:c6:6a:bc:ae:bd:c8:78:10:22:83:7c:43:27:c7:7a:05:
         72:09:0b:df:1d:51:d3:a8:57:7b:c7:87:da:5d:54:53:5d:d8:
         01:c5:12:f1:51:67:46:39:5a:fb:8b:c3:e0:f0:20:33:f5:63:
         01:79:f9:e7:db:4d:1f:f3:97:0e:3c:ee:78:c0:c7:5b:60:02:
         b2:6e:91:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----