Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File:                     Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier:          EolX/tlDojSNgkdzqvMr+DN4eeaOIo8A1fzFjGEjEHI=
Subject key identifier:   0A:54:54:04:11:53:62:84:F8:64:A0:C1:20:AB:42:B7:08:75:C5:91
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer:       /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial:       01962FAB83C5061DF6C938C20E349F98EC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: MtWoQGNBPYW58tOmiGmw30rmF/nI2QRqCDrUTTz5JGo=)
                          2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:83:c5:06:1d:f6:c9:38:c2:0e:34:9f:98:ec:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=0a54540411536284f864a0c120ab42b70875c591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6b:94:5c:d2:18:0c:85:ff:3b:5e:52:20:77:
                    77:e7:5f:c5:be:43:c7:c7:3a:c6:be:8e:f4:9c:b9:
                    8c:62:54:a9:06:f8:9e:91:ab:d3:a2:0d:6a:1b:53:
                    6d:e4:31:c6:71:7c:8b:9a:74:31:06:85:ba:88:f2:
                    d5:9f:ef:aa:b3:e7:b3:b3:1b:26:9d:4a:60:64:60:
                    cd:ea:3f:33:32:9e:cf:61:28:9e:c3:51:cd:fa:f2:
                    d8:a6:fa:40:30:e9:89:87:d8:ed:99:e0:b1:7b:d6:
                    96:fd:34:25:a5:98:e8:0c:ca:a5:b5:52:23:bf:1c:
                    8f:a6:a1:29:c9:91:85:15:6b:ed:c2:58:4a:4e:26:
                    21:c3:70:72:db:98:d7:e6:95:65:17:98:71:4e:bf:
                    9c:06:ac:3f:90:1a:ac:83:fb:c0:94:bc:15:cf:46:
                    85:f6:4a:ba:77:79:85:06:ba:fa:d4:32:9e:86:6a:
                    af:c7:af:fd:fe:08:c1:d8:b5:a4:9e:c4:b9:7e:60:
                    b5:25:04:9f:5c:6c:8f:6e:7c:cf:31:34:6d:87:25:
                    c7:0b:bc:5f:85:25:4e:16:65:b8:cf:59:f7:f2:18:
                    45:9f:a1:49:f2:a3:1d:2a:00:9b:9a:f9:e5:22:e8:
                    35:e3:d4:fb:00:89:bc:4f:23:64:84:b9:8e:37:c8:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:54:54:04:11:53:62:84:F8:64:A0:C1:20:AB:42:B7:08:75:C5:91
            X509v3 Authority Key Identifier:
                keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:d6:dc:44:8b:ec:aa:2a:4c:69:56:43:cb:dc:ee:2a:af:
         1a:00:bf:b2:b2:ee:7e:9d:0f:d1:da:8e:d1:8a:13:a4:3d:a6:
         8f:a2:a0:5d:eb:d7:36:26:66:1c:37:bd:8d:fc:b1:b1:d3:91:
         c2:c4:23:36:e6:25:23:f2:a5:c0:94:cf:93:1b:33:37:39:42:
         88:cb:88:d9:35:4e:3f:75:48:2f:f4:7b:c5:27:cb:f6:26:06:
         21:dd:d9:7b:94:ed:07:40:63:8f:75:16:b5:b8:a9:0e:44:0f:
         0a:11:10:df:07:f5:16:94:5e:8a:98:ea:b5:a5:f5:7d:df:7a:
         40:70:7e:fb:cd:3d:b3:4c:96:3e:05:14:55:28:28:66:47:09:
         b4:14:ed:ee:73:00:9a:88:be:a6:48:dd:6f:5d:66:29:a8:8e:
         95:6b:5d:45:40:18:03:91:11:53:28:e0:47:96:9a:2b:71:6f:
         9d:c4:8a:15:e8:1f:b8:7d:7d:0b:39:4b:d8:ed:03:bd:26:68:
         6f:80:2c:b2:78:23:13:31:76:bf:2c:cb:79:27:f3:b1:2d:e2:
         28:74:29:77:ca:27:e7:48:95:40:1d:fb:83:5c:f1:b9:a0:03:
         dd:b3:f5:e0:7b:bd:04:63:c8:d3:83:35:28:79:9a:cf:76:40:
         1e:2c:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----