Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File:                     JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier:          UuwgoSoz25YTbGzvXXVZCE3s+RN3le4KAaKVg4pHuXc=
Subject key identifier:   64:2F:F0:F1:7D:E0:AC:A5:4C:38:EB:10:6C:FF:C2:D7:98:5D:A9:B1
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer:       /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial:       01962FAB53D263682537E06EA5D0891AD3C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number:          0805
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: 1DOvfFlfGmSHCThlgpzswyiNOpRowPhuHPlpMC7m7GY=)
                          2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
                          3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:d2:63:68:25:37:e0:6e:a5:d0:89:1a:d3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457027e3a087b65f968b535e415f67432695876
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=642ff0f17de0aca54c38eb106cffc2d7985da9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:f0:fd:22:1a:db:15:0d:83:02:0e:31:12:
                    1d:72:52:5a:f1:35:39:95:44:9c:ff:2b:d9:b0:50:
                    99:0c:e5:17:a0:d7:ab:43:1d:da:1b:c6:dd:dd:75:
                    9a:9d:e8:2c:34:1b:35:57:a1:54:31:17:ca:05:54:
                    f6:c1:f4:07:fd:c6:6a:ac:ff:ee:48:1b:e4:8e:43:
                    72:b3:7f:21:0a:06:bf:f1:cb:e4:82:03:74:f9:60:
                    1c:e5:fb:97:4d:d5:95:1e:e5:5c:06:41:4e:c0:bc:
                    0c:29:c5:69:16:77:16:d2:e6:f3:fa:ce:b6:f0:40:
                    e4:42:43:37:ec:cb:67:73:68:4d:31:dd:76:9b:ee:
                    07:c2:5d:8a:cc:3c:b6:c4:cb:9b:24:13:4c:6a:c5:
                    bc:8e:fa:ad:2d:0a:40:41:a1:d1:73:00:6e:88:a5:
                    57:47:7e:78:85:c4:da:5c:00:b3:38:14:cc:9f:5f:
                    ea:b4:57:9d:27:95:4c:b8:62:3c:e4:90:80:0e:71:
                    7b:a2:ea:fd:c5:88:c4:b6:67:d9:8a:43:a0:f9:cb:
                    62:b9:7c:fe:9d:73:6d:7e:12:53:1a:3d:37:ce:50:
                    52:4d:7f:fe:b0:a8:af:74:44:0e:6e:3f:75:cf:c7:
                    a0:b3:11:0e:34:fb:ba:f5:a7:78:5d:6b:f6:f9:2c:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2F:F0:F1:7D:E0:AC:A5:4C:38:EB:10:6C:FF:C2:D7:98:5D:A9:B1
            X509v3 Authority Key Identifier:
                keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a4:4b:49:c4:bd:8f:37:3b:58:b7:da:f3:5e:33:b3:2a:04:
         ca:7c:da:f3:fd:95:8d:b4:fd:0f:e6:59:45:09:37:11:dd:5d:
         ca:55:b2:c7:01:62:e6:be:90:1d:12:eb:2c:fb:65:e2:e4:94:
         ea:68:cd:7c:74:2a:73:e8:9a:f2:af:02:4e:64:a1:23:ce:3b:
         e2:0c:45:71:61:c8:a9:3c:bf:72:34:67:2b:e6:a8:2d:68:d1:
         1f:1a:3e:60:00:ec:f0:4b:a0:d1:b3:02:b0:62:03:f1:b2:7f:
         5a:13:21:a9:b6:8e:63:9b:15:d6:7e:e2:33:8a:f3:13:d5:ae:
         35:b6:86:2f:ea:dd:df:ee:ae:fa:2f:8e:c7:02:1e:2a:eb:1f:
         50:52:4c:e0:c2:25:8d:57:73:b4:66:1a:d8:cf:b9:5a:ee:fb:
         43:dd:17:46:1b:1a:5d:e9:b9:ad:71:5f:90:33:dc:57:31:16:
         a7:c8:42:7b:bf:6d:ce:b5:93:41:99:1c:81:9b:53:31:5e:70:
         14:61:f7:6d:d0:b5:32:8d:6f:3d:90:f2:c1:0b:81:85:ab:c3:
         ae:21:23:fa:a6:78:a5:f4:b8:1e:79:d1:db:6e:09:87:72:fb:
         37:9d:fb:e1:22:b7:3f:4c:6b:99:bc:54:e0:2e:77:70:68:5a:
         7c:be:7a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----