Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File:                     JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier:          0suvddSgJP+KKrCHegWKo9CzHk+5H0CQFYsFTKeEIXE=
Subject key identifier:   EE:AB:A2:2D:8B:44:B3:2C:27:03:79:E2:6B:0A:49:E2:6D:59:52:E5
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer:       /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial:       01962F74CDF215A46C34A93938DFE2C18A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number:          0391
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: HlkkSG+5RMx15ef9ivI4XFGaeGmBzElblQEYeeW9RDE=)
                          2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
                          3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:f2:15:a4:6c:34:a9:39:38:df:e2:c1:8a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=eeaba22d8b44b32c270379e26b0a49e26d5952e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:c9:b9:4c:cf:bb:5d:91:90:99:64:8b:8c:
                    de:f4:de:dc:98:55:cc:11:9e:7c:f9:9d:a4:e1:38:
                    20:0e:ca:06:b5:ad:38:66:ac:07:d3:bd:fd:22:8f:
                    0b:47:a4:a5:b7:fc:57:40:b2:79:62:a4:bb:ca:f9:
                    30:0b:a9:01:4c:66:d8:3d:2c:a5:16:31:55:7a:27:
                    39:c7:81:73:0e:d3:d7:4f:98:3c:51:35:28:44:ab:
                    2a:46:ef:c2:f7:ba:7f:39:d9:d8:bc:fc:64:2f:9e:
                    91:38:f9:e0:dd:04:bc:d3:48:b8:b7:1d:38:bd:63:
                    f8:47:35:15:00:99:a0:c1:be:4c:7c:bd:3b:df:78:
                    f7:b1:99:7a:d6:e7:98:ad:8d:c0:77:38:03:89:e8:
                    d4:23:55:9a:1b:29:46:41:23:3e:dc:4e:af:ce:2f:
                    58:e7:77:38:8b:f9:a4:68:07:dd:14:b0:92:46:a1:
                    46:71:76:c0:d5:f1:24:22:c0:33:c1:ee:ce:9a:eb:
                    e2:e0:37:30:a6:b0:72:cc:e5:04:92:d3:29:3e:db:
                    32:87:a8:d2:81:73:82:ba:82:16:e1:db:44:27:09:
                    44:f7:f7:6e:f7:19:f3:c0:b4:25:e9:07:c9:42:82:
                    18:3b:5d:bd:16:57:0c:18:07:e9:cf:7b:40:dc:32:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AB:A2:2D:8B:44:B3:2C:27:03:79:E2:6B:0A:49:E2:6D:59:52:E5
            X509v3 Authority Key Identifier:
                keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:15:07:1d:30:79:75:47:ad:d7:db:8d:9c:1c:7b:7a:c7:b9:
         7e:83:f4:48:10:47:28:73:ad:7a:1a:f2:dc:d8:29:4f:bc:dd:
         81:95:d2:ce:9d:0e:e4:ee:03:72:6f:5e:c0:0a:77:3f:68:e9:
         73:5d:41:68:e1:b1:5b:3b:c7:d5:59:50:a7:df:7e:b8:28:5c:
         23:fd:4e:78:a8:3d:8a:72:d9:ab:25:ee:4a:f4:9b:2a:eb:d1:
         4a:9c:93:44:34:92:1f:27:b9:f7:c9:f4:74:ec:a2:0b:b4:3b:
         fa:3d:6d:d4:18:89:82:75:2c:da:44:05:3a:d4:87:ae:69:16:
         1d:e7:13:a7:ed:e6:a9:a5:ab:73:39:b3:dc:2f:18:f2:40:3b:
         eb:6e:00:08:47:0f:12:f9:55:61:d8:96:a9:cd:1b:3a:f8:77:
         68:b4:b7:c6:c3:e0:7e:8a:a2:25:7e:23:a7:82:bc:cd:eb:36:
         37:3b:69:98:08:29:0a:90:5a:c0:8f:33:5a:7b:67:70:55:66:
         e5:59:39:2b:d3:26:e1:ab:f8:8a:d7:7d:bb:a0:0b:10:20:44:
         c9:45:4c:b3:09:00:f1:bd:07:06:a6:9e:89:a8:28:f6:2c:93:
         9f:5c:fb:3b:b0:29:73:2a:f3:1f:3c:15:1a:8b:90:c2:a7:83:
         77:fd:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----