Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
File:                     jh_rawRLv2ERd1vKA41l5tIjDxQ.mft (raw, json)
Hash identifier:          GFhI8Xke4zQ9oQTE9EDR++8JvLG0VZvGz/+JLHZAqLo=
Subject key identifier:   5A:6A:32:EC:5E:C2:B8:C0:9B:23:5D:B5:3B:BA:08:76:98:FF:EE:10
Authority key identifier: 8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14
Certificate issuer:       /CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
Certificate serial:       01962F74619EFD1E1BC0BEB85BC4BABE54B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft
Manifest number:          0BFA
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: GXn4ppunsJgcgy-UOrFrKoqoiSI.roa (hash: W8qTLACZpN2+EybB8zHXMWE+Y43RFaP41c0nB7EvPAY=)
                          2: IYzUtQ8hFOs-8VOGgxs_H-lj6EQ.roa (hash: KeusAo7L8fplwbm6NqFFjZfIEQ3ioDWGVykS8TkpQn4=)
                          3: jh_rawRLv2ERd1vKA41l5tIjDxQ.crl (hash: dr5BHanQva46Nrptk5G9vuS6M+ZGfwoHAl8g1SY1gKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:61:9e:fd:1e:1b:c0:be:b8:5b:c4:ba:be:54:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1feb6b044bbf6111775bca038d65e6d2230f14
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=5a6a32ec5ec2b8c09b235db53bba087698ffee10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:40:4d:16:b6:83:8e:8e:d4:13:87:b9:91:43:
                    42:6e:4c:03:ca:d2:b9:a2:07:b9:fd:c1:39:77:fd:
                    c3:f1:fe:70:a3:d6:7b:55:9a:34:32:00:03:51:3d:
                    cc:5a:42:20:5e:1d:c0:9c:cf:21:b8:f9:64:78:64:
                    52:be:d3:59:0c:05:98:33:cb:22:44:24:1f:e4:d4:
                    0b:39:37:d2:3a:59:9b:77:e0:b7:d8:4b:e4:5e:69:
                    be:74:4a:cf:ce:b9:0c:94:c4:b2:e9:36:5d:1a:72:
                    e6:89:3c:1d:d5:b7:6c:1a:06:23:97:ca:70:0b:58:
                    55:89:85:1c:5b:f3:f3:ac:fc:6a:fa:e9:00:33:55:
                    2f:3f:59:de:99:9a:a1:75:25:8c:cd:13:d6:c4:4b:
                    b4:d0:d4:41:7d:13:28:88:13:a2:c9:5f:38:ef:0e:
                    55:af:95:1b:a5:5a:81:c5:f1:7a:82:fa:68:a9:ce:
                    29:7e:6d:1b:9b:a4:4b:03:dc:bf:9a:eb:5f:90:25:
                    8b:f9:a4:aa:d2:e6:45:38:8f:a2:26:31:95:7f:d8:
                    66:85:a3:94:dc:af:ac:a4:56:56:97:0e:61:2d:f1:
                    d3:ff:c6:a2:0c:f2:af:c9:41:b4:ab:cb:91:3d:2e:
                    b1:d7:40:7a:34:e5:db:5e:c5:94:46:f3:f4:2c:5a:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:32:EC:5E:C2:B8:C0:9B:23:5D:B5:3B:BA:08:76:98:FF:EE:10
            X509v3 Authority Key Identifier:
                keyid:8E:1F:EB:6B:04:4B:BF:61:11:77:5B:CA:03:8D:65:E6:D2:23:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jh_rawRLv2ERd1vKA41l5tIjDxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7f1f29-1242-41f4-a090-0d8fce3ebfbb/1/jh_rawRLv2ERd1vKA41l5tIjDxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:54:64:b2:bc:96:0c:10:97:1d:38:d5:2f:6d:d2:cd:59:29:
         8d:1f:48:c7:f3:8d:6d:25:9b:96:e2:85:9a:dc:a6:85:7e:3f:
         cb:43:3f:bc:93:6b:39:f6:d8:ef:44:ad:04:8b:85:31:2d:1c:
         01:20:1e:e4:d3:b4:b9:8f:a0:bd:d9:69:1b:c3:6f:2d:38:d4:
         92:26:87:3f:d2:a7:7a:c8:74:85:ae:33:5b:24:e6:f6:3b:33:
         0a:11:55:11:48:59:96:e8:a3:ae:92:e8:c9:a6:4e:2b:1f:7b:
         04:da:c0:4b:98:b2:d0:76:63:8b:86:8b:0f:8c:03:56:13:ce:
         45:ea:ca:c3:e7:82:2b:2e:60:26:57:de:4c:27:7f:84:9d:40:
         ab:19:a7:4b:40:48:67:c0:24:9d:1f:01:a4:c4:f6:55:d8:d4:
         1d:59:5f:82:bf:0b:2b:4f:19:34:98:05:da:e7:a5:aa:95:ff:
         53:74:eb:4d:aa:1c:4e:b3:1e:63:a4:7e:78:75:b0:be:ee:df:
         35:bc:cf:43:aa:c5:de:4c:b2:be:71:43:33:11:82:b8:62:3d:
         a2:49:3f:c1:86:67:a9:31:4c:aa:4e:ea:c5:94:a4:65:d6:ba:
         dc:b4:63:58:c7:06:dc:18:7a:7b:7e:3f:d7:3e:d6:d7:3a:13:
         91:66:8e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----