Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File:                     JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier:          /xrYjZiCm+uo26pDAmuhlSVtQC3e+OWiZ6PzfHyKm3U=
Subject key identifier:   7C:16:97:46:27:2B:BC:2D:A9:81:AE:AA:E9:9B:C8:9F:57:A7:F9:7B
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer:       /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial:       01962F7486578E5FA64B2E017F54E512E59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
                          2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
                          3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: doJzOzqhWR0KoIAdit7XwqZ7zbmnN88bNENqMj9MPDY=)
                          4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
                          5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
                          6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
                          7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
                          8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:86:57:8e:5f:a6:4b:2e:01:7f:54:e5:12:e5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=7c169746272bbc2da981aeaae99bc89f57a7f97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:4c:70:ce:06:5f:db:06:25:db:09:07:c4:
                    a5:6c:23:06:a5:ef:79:90:f5:59:de:39:32:93:ea:
                    e8:d6:50:c4:90:63:ef:df:1e:05:cd:54:bf:43:91:
                    1c:89:8b:19:1b:11:a7:0e:96:a0:c9:69:c9:a0:de:
                    3e:74:ae:6c:76:85:9c:7d:31:1c:32:c7:b4:33:36:
                    09:3f:6e:87:2b:63:36:7e:36:45:3b:07:f4:49:9f:
                    c2:5d:ef:d1:6b:ee:cf:4d:23:e2:af:e6:f4:8b:0d:
                    bf:49:fe:39:7c:3c:80:9b:2b:c5:15:28:05:a4:df:
                    11:0b:41:b9:0e:4b:dd:5c:7d:61:17:e4:cb:35:69:
                    3a:e3:33:23:bc:fd:03:3c:2f:df:87:e3:df:39:54:
                    b3:71:e0:31:b0:12:3d:5d:e4:98:d9:a8:a5:89:80:
                    06:43:63:d9:b9:11:b2:75:8a:f3:df:b2:69:1b:b0:
                    3b:99:91:20:51:10:f4:d9:d8:d7:d7:a9:70:0b:5a:
                    f8:75:d2:b6:43:e4:64:f4:bc:31:98:32:3f:62:3b:
                    a0:94:73:89:4b:84:f9:b6:a7:94:75:5a:68:8d:a9:
                    5f:06:89:b2:6e:46:9e:49:93:8e:0b:a7:c7:75:5c:
                    97:6d:f6:de:30:53:35:b9:1a:43:89:c7:4e:09:37:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:97:46:27:2B:BC:2D:A9:81:AE:AA:E9:9B:C8:9F:57:A7:F9:7B
            X509v3 Authority Key Identifier:
                keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:7e:85:45:5c:a0:01:68:72:2a:13:26:72:87:a2:4b:26:
         49:62:e6:15:f3:b7:eb:65:9a:57:b2:fe:6a:1a:89:0f:20:0e:
         6a:75:dd:f1:7a:d6:f9:d4:4a:bf:77:b4:2f:de:85:bf:5b:f3:
         8c:30:1b:3c:68:42:76:dc:5b:fc:3a:64:5d:b9:e7:f3:91:8e:
         b1:13:e3:c0:c0:87:7f:83:21:92:d8:b1:6f:ff:97:95:de:53:
         3b:6d:dd:35:31:95:d8:27:11:28:94:dc:33:37:32:57:40:3b:
         00:d5:04:2a:43:d2:86:ce:b0:a9:aa:d4:c8:c1:29:f7:80:8d:
         56:bc:e6:87:95:d4:1c:d4:6c:ee:b5:12:a3:c7:a6:72:78:d4:
         30:93:4a:82:1a:16:80:ec:ea:46:71:45:db:85:5f:31:b2:76:
         13:07:b2:ba:d3:84:a1:78:7e:8b:e6:56:7c:b0:83:51:6a:c3:
         d6:0e:f4:c4:0e:45:dd:fb:a4:08:3b:21:49:d5:02:3b:4d:d9:
         00:7c:f9:53:e6:1d:94:d8:be:ed:54:b1:81:3e:d8:69:d3:82:
         4d:97:4d:85:dc:8d:85:2d:c5:e0:6d:51:c1:52:37:b1:7e:fd:
         a2:f2:ce:06:69:5b:5b:2f:ad:f1:1a:f2:7e:d6:bc:c5:f1:1b:
         58:f3:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----