Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File:                     JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier:          LRL6/PVcpJpk/ZeoCfrPCggrM2yzQmukijEBDC0PUvI=
Subject key identifier:   9A:76:96:AE:BA:8E:98:8E:C2:45:80:98:53:7B:48:82:AB:8B:BD:7C
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer:       /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial:       01962DF411030C1A87D7E5BDEEBF3290176D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number:          3B
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: z85zv+EPtqBl41CZyIpbuf/3Xo09pQqlduBnnJ9FXsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:03:0c:1a:87:d7:e5:bd:ee:bf:32:90:17:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=9a7696aeba8e988ec2458098537b4882ab8bbd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:11:90:bc:06:95:a1:fd:22:83:93:06:89:
                    ff:0a:32:29:65:fc:f4:bd:63:5f:b9:34:3a:94:28:
                    42:6c:94:a7:ad:f1:58:f2:f8:1a:64:d5:c9:3c:11:
                    f1:24:e7:95:c5:2f:7d:73:06:0b:c4:13:cb:70:bc:
                    0c:2e:76:6c:54:9c:67:e7:5b:9a:16:c5:4e:75:35:
                    17:51:7b:30:f3:fe:d0:aa:13:3e:e7:ab:99:06:da:
                    d5:3e:68:ae:d3:9d:ce:87:ca:c3:05:72:f7:e7:8b:
                    b7:9e:bf:f3:48:87:ca:27:7b:7a:8b:ea:52:ed:40:
                    e5:d9:79:e7:92:86:31:d1:1d:e0:11:7f:79:32:45:
                    ae:32:60:fa:73:d2:5f:46:aa:0e:8e:ed:f9:ce:17:
                    c7:f3:00:38:6a:f1:2b:b9:2f:bd:c4:a8:d0:7a:ec:
                    e8:e3:c5:91:28:f9:5a:15:9f:f5:5f:ed:5e:5b:9b:
                    a4:8b:e1:76:81:cb:bf:f6:ca:c8:4d:b7:d3:7c:2a:
                    a3:dc:be:21:43:04:ee:b3:3f:c5:88:68:bd:cf:78:
                    83:18:bf:3e:55:18:ac:c8:2f:e5:ce:2e:3c:2d:d2:
                    5b:f0:c8:d0:b8:60:f1:ad:ad:d3:91:c4:f0:21:69:
                    dc:d0:ed:9c:cb:d9:ee:84:d8:fc:4a:0d:28:e2:82:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:76:96:AE:BA:8E:98:8E:C2:45:80:98:53:7B:48:82:AB:8B:BD:7C
            X509v3 Authority Key Identifier:
                keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d0:71:eb:b1:58:87:63:78:fb:ff:d4:8a:2a:85:6d:4f:70:
         59:9e:e6:48:46:aa:f4:41:ae:22:eb:9b:bd:d5:d0:8e:91:03:
         be:3c:b9:81:41:f2:61:e3:67:6c:80:62:c3:a1:81:93:86:61:
         21:95:06:0f:79:d4:bc:2c:79:0b:a7:d5:73:0f:be:30:5b:95:
         d0:98:a2:9d:d4:aa:a5:ca:8c:9c:fa:23:ab:24:95:df:02:89:
         6f:35:d7:a2:90:9d:75:eb:54:68:3b:43:92:89:e4:7c:db:15:
         80:fe:1b:3b:53:84:3d:70:ef:2f:59:8d:15:53:eb:83:13:2b:
         2f:48:39:be:06:69:ef:a3:80:c4:d1:6b:3e:b1:5d:de:20:0c:
         6b:c3:70:2c:27:3d:a6:f8:10:80:ba:df:e5:cf:ad:18:31:e1:
         4e:8a:44:d5:ee:0d:e0:20:e8:30:72:9b:4e:90:db:ff:e3:b7:
         1c:27:7c:e1:11:d2:13:ab:e0:37:2e:79:26:54:e2:19:bf:32:
         3d:1a:48:96:62:5a:02:c7:33:67:33:62:35:69:54:e6:19:37:
         74:7f:ee:01:d0:ef:30:27:80:91:ca:d4:8f:c7:67:c1:fd:00:
         73:11:88:f2:6b:d0:1a:3e:9e:15:6a:59:db:32:bc:59:a4:8b:
         bc:c0:b5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----