Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File:                     JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier:          RuMTHG9E40gJ/gYeJoNTrePyswnwcNaLd1/nkvNHaNE=
Subject key identifier:   0D:CE:1D:D1:B1:15:C7:BE:B1:92:41:3F:B7:9C:35:E0:2D:32:FF:E8
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer:       /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial:       01962ECF613003AE8007305F718E079009C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
                          2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: v5YjbULbs3mWpk2b5ccAXeVpqtse+eE0uq90qWzBzgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:30:03:ae:80:07:30:5f:71:8e:07:90:09:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=0dce1dd1b115c7beb192413fb79c35e02d32ffe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5d:23:f7:5b:e2:39:07:e6:41:90:37:8f:8f:
                    8b:ac:f6:5e:bc:02:e8:80:1b:bf:a2:0b:1d:5e:22:
                    7b:80:c2:f3:ef:88:2e:a7:44:83:f9:7e:af:d9:9a:
                    27:db:7b:a4:0b:a8:21:01:c1:8f:c8:37:9e:6c:67:
                    b3:1f:fe:b1:7c:23:9d:4c:8e:16:b6:30:df:aa:32:
                    1d:0f:3a:de:ca:45:d5:87:81:f6:b4:f3:d5:15:41:
                    03:a0:0f:91:49:79:a2:57:61:7f:23:a6:0d:29:74:
                    4f:4b:4a:5d:f6:f0:7c:1f:46:fa:ae:e2:fe:5a:4c:
                    3c:dc:6c:34:2d:48:20:2c:0e:23:64:14:25:8c:df:
                    22:0f:16:c9:10:51:9e:50:84:9d:17:ff:5f:8c:ea:
                    97:0b:88:8b:bb:77:be:65:1f:e3:67:cd:f7:80:37:
                    b2:4b:b1:d5:6c:37:ac:a8:cd:30:05:65:19:d8:d8:
                    44:5b:f5:88:0a:f9:1e:75:e9:63:f5:29:c7:9e:1c:
                    1e:37:fc:5b:53:ba:62:e2:e4:3e:53:f8:f3:74:ab:
                    c2:4c:17:91:cf:dd:db:0a:e2:52:bb:ae:8b:c8:49:
                    cb:a0:41:a8:9b:8e:4d:10:53:12:f3:cc:9b:00:80:
                    e4:55:2b:2d:0f:1a:a2:e8:a6:b5:2b:56:37:95:f6:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:1D:D1:B1:15:C7:BE:B1:92:41:3F:B7:9C:35:E0:2D:32:FF:E8
            X509v3 Authority Key Identifier:
                keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:24:46:90:b0:33:e4:d4:ae:53:61:58:58:ca:e4:d3:a6:d2:
         89:73:95:54:18:33:90:9a:fe:c7:97:bc:a4:f8:f7:47:49:85:
         7f:ae:e6:4e:86:c0:e0:f2:15:51:d6:0c:c5:dc:3c:ed:4c:c9:
         af:07:6b:80:84:8d:a8:68:44:74:91:fc:da:9d:37:79:2a:0d:
         da:ce:36:54:ed:f2:49:1e:99:2f:94:2e:5e:7a:2e:f7:e6:87:
         44:88:59:02:b8:81:e9:92:51:24:71:a6:f1:4e:00:e9:7a:f3:
         db:86:2d:3b:37:96:2f:68:6a:97:bd:4d:7e:d5:97:d2:ef:70:
         b9:c0:56:0c:5d:13:03:ec:cb:13:41:19:8e:ff:ea:02:3f:63:
         b3:56:fc:b4:8e:f8:5b:88:96:98:73:60:bb:30:dc:58:c8:d7:
         a7:03:97:3f:0d:f4:5b:2b:f1:a8:d7:a1:9d:62:06:1d:da:7f:
         9b:d7:bd:e2:be:3d:f4:82:c5:af:68:64:d5:f0:b6:92:0e:c3:
         71:ae:87:b8:c7:8a:1d:9a:ae:36:e7:f3:bf:0b:e2:b1:ca:dd:
         2f:18:96:6a:93:0a:8b:c8:6b:56:85:62:97:88:b7:5f:69:95:
         9d:b4:f7:3d:25:c1:a9:18:a2:d2:e8:33:e3:de:ba:ab:fc:89:
         34:70:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----