Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
File:                     JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft (raw, json)
Hash identifier:          jU9N7j1rB/TL0eiVdktlyRNikSVwpfq9nZlr6YJpll8=
Subject key identifier:   80:11:26:07:17:7F:86:98:AD:88:11:A9:7C:BF:40:7E:F4:3D:6D:E6
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Certificate issuer:       /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial:       01962F06E1693A0371CD567164B397ECA418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft
Manifest number:          0C49
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl (hash: 63a7m0gr6EWs9Px+NbsyS4JVaXGIcLh8D86l8ylQL/w=)
                          2: MGwydjWSRkebMXZzXi4Q1wnQhQY.roa (hash: ppLwXZ59Our2Z5s5lQZSznHueKLv+6A7NwUPkwubwqY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e1:69:3a:03:71:cd:56:71:64:b3:97:ec:a4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=80112607177f8698ad8811a97cbf407ef43d6de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:05:2a:15:ea:32:78:30:3e:29:67:b7:83:
                    28:e5:f3:54:7f:a8:b1:dd:3b:e6:43:9f:f3:3b:ce:
                    06:ba:62:a1:65:3d:2f:d5:43:4e:71:ee:37:a2:63:
                    6e:6b:cc:3c:11:54:17:60:94:cf:a1:67:19:7e:72:
                    86:66:33:bd:58:80:bc:58:95:c9:3f:3f:6a:0d:08:
                    f2:fa:83:e6:62:6e:93:27:e1:ca:f6:41:c3:9a:21:
                    98:c0:38:87:4a:f9:8e:4c:89:dc:d2:f2:71:fc:48:
                    c0:6a:62:a8:48:33:fc:27:48:73:1f:34:0c:ac:b0:
                    a8:bf:ba:3e:9e:04:16:bb:5a:1f:8e:e9:a6:40:4e:
                    a7:c3:09:cb:54:17:92:e0:c6:21:28:0b:14:eb:7c:
                    ad:e9:2d:30:dd:d0:71:43:ab:5e:e7:80:38:83:03:
                    94:e9:e1:a5:2d:dc:fb:ab:33:c9:7e:39:75:eb:94:
                    2f:21:2d:69:68:94:22:b1:a4:d3:14:09:60:d0:f2:
                    fa:74:a8:fc:88:90:0b:5a:6c:75:b3:29:a1:44:52:
                    8d:e7:49:81:ad:93:ec:dd:55:db:3a:fb:e8:ad:e2:
                    bf:d3:40:fb:40:f3:ee:d3:73:f1:0e:ec:c3:be:f7:
                    6d:1c:6f:72:fd:18:85:6b:ff:f6:52:23:12:7a:28:
                    33:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:11:26:07:17:7F:86:98:AD:88:11:A9:7C:BF:40:7E:F4:3D:6D:E6
            X509v3 Authority Key Identifier:
                keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:df:c3:39:77:50:6a:88:0d:d5:11:44:66:42:54:1b:36:
         bb:11:34:d5:7a:34:a2:39:a5:5b:9a:66:a6:0b:72:dd:fb:08:
         2b:00:4c:39:a7:a7:75:4a:6d:29:64:73:7f:7e:ef:90:32:c6:
         cf:77:af:2e:6e:a8:16:f2:00:d2:7f:f0:de:a6:da:a2:c2:dc:
         cb:10:8e:4c:a8:95:34:25:7c:bd:31:77:d3:9c:8c:8d:36:0e:
         8a:53:cf:f1:48:e9:7b:33:b0:6b:cf:e7:e6:44:5c:e2:02:68:
         3b:1f:8d:07:6b:75:03:5b:09:b9:ea:63:23:3e:ec:fc:14:57:
         3f:5c:bc:d2:69:10:ac:e7:47:d8:2a:76:cb:59:d7:46:71:67:
         5f:76:94:36:1d:9c:b5:f9:60:ea:5c:3c:0b:7e:c5:45:87:ac:
         a8:98:a5:e5:30:43:46:10:c2:08:bc:d6:e3:7e:1a:e8:e2:33:
         79:ad:72:f8:34:2e:e2:ff:18:6f:37:f6:88:1a:41:aa:c6:2a:
         83:6b:db:9f:ca:34:fd:97:40:c6:23:a7:c2:e6:45:f4:b4:e1:
         37:ed:ad:0e:dd:e0:78:94:65:6a:e2:2b:a4:6f:d4:f6:59:28:
         ca:ee:2d:4a:69:77:39:3d:91:91:9c:21:a2:e5:7f:af:b2:7c:
         e0:b1:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----