Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File:                     Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier:          DDHcvoIlbvQAL5WGqub3qCOrPrxyofESTjrZ9nWo9GM=
Subject key identifier:   EA:8F:54:0C:F1:92:10:E1:69:22:F0:32:7F:8A:00:F8:CA:B9:1E:0F
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer:       /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial:       01962F74CE41A0CE3375B5B656968613801F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number:          071B
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: 2RyNOSg3bN3UUwsGUBkiCbu2pViht715zPsP2QXFIrM=)
                          2: ajGVT2wMT_DA-qwpbPbVP8c_jy0.roa (hash: GrnSfoc+sA7GUobf1ORT86tQoZJGPO6xDsTsTxwitnQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ce:41:a0:ce:33:75:b5:b6:56:96:86:13:80:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=ea8f540cf19210e16922f0327f8a00f8cab91e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:28:cd:cb:92:2b:ed:1e:8f:b4:c4:fa:e8:
                    4d:0d:d5:e1:54:fe:d9:d0:f0:14:7a:7f:d2:72:c3:
                    0c:4c:cb:72:2b:1b:eb:ea:86:bc:f7:8b:40:95:0d:
                    a7:93:19:32:d9:0f:b0:d2:15:6f:65:aa:9f:b3:54:
                    4b:72:73:6c:9a:b8:08:46:89:d5:b5:aa:79:8c:66:
                    93:ad:38:68:3c:a0:27:62:4f:2e:b2:6e:16:d5:94:
                    47:d8:62:f4:b0:fc:6c:8d:78:35:0c:3b:9d:34:de:
                    71:8b:bb:03:be:3c:cd:75:52:73:e7:ba:45:69:60:
                    fc:69:f7:b3:29:60:28:c5:5d:b5:59:cc:ff:ac:36:
                    e5:14:ac:e5:d4:db:72:1e:f9:d9:e4:54:d7:a5:81:
                    41:72:99:04:6c:99:31:88:37:a0:c0:0d:0b:4b:66:
                    72:aa:dd:0a:00:ec:f9:b6:e2:cf:69:57:75:8e:40:
                    f7:d0:60:32:a9:e0:b0:ee:ac:ae:49:68:92:66:28:
                    ba:b8:57:c8:a3:de:46:6d:73:42:ea:61:4f:5d:4a:
                    9c:0d:d7:0f:36:11:34:d2:dd:c2:48:36:ee:a6:22:
                    dd:7f:1d:00:b1:19:81:ab:5d:e0:28:20:ad:52:a1:
                    36:16:09:eb:b0:b6:cb:5b:7b:2d:59:95:6a:92:38:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8F:54:0C:F1:92:10:E1:69:22:F0:32:7F:8A:00:F8:CA:B9:1E:0F
            X509v3 Authority Key Identifier:
                keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:18:51:ba:fe:63:88:c5:2a:e8:16:ed:42:91:ee:0d:73:b1:
         70:9c:62:67:1e:11:d2:17:9b:88:72:1b:fa:9c:6d:cc:0f:3c:
         48:28:4b:85:bf:b2:c3:ff:6e:24:32:7b:06:be:d5:0b:fb:72:
         08:f5:a4:0b:49:ba:d6:13:cd:4c:7b:a0:1b:8d:8b:72:33:a0:
         02:0a:c0:7e:a8:c1:f7:d8:37:a0:c6:06:0c:76:58:09:ae:61:
         04:5c:ff:26:a2:49:e7:81:6f:9a:bd:e2:98:fb:72:b1:cc:42:
         3b:99:6a:8d:b4:f4:e5:28:07:17:3d:7e:ab:aa:fe:64:5f:d4:
         62:c8:01:e0:da:49:0d:b5:38:dc:dc:af:ce:f6:a2:3f:be:61:
         e6:42:fe:b4:26:03:e6:24:15:3b:65:b3:af:2f:31:43:ed:d5:
         e3:c2:ba:9a:80:da:30:75:13:07:8e:3c:c9:03:ec:5b:22:05:
         4c:7c:5a:1c:f7:b6:33:0a:d5:26:bd:27:cb:ef:59:ce:aa:02:
         10:52:f0:71:24:8a:ca:e2:5d:96:7c:eb:85:83:74:f7:b3:ac:
         41:01:d5:8b:0f:65:f6:71:93:30:ea:8d:60:23:91:7c:eb:32:
         16:fe:3e:5e:c4:8b:de:cd:fb:80:5a:c9:9b:f9:5a:8b:ba:d7:
         0e:cd:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----