Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File:                     rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier:          JXsx3ZI2fSNa5GiwgNzDdtxBhN+RoFLayi8kEHx+r18=
Subject key identifier:   E7:37:D1:8E:8B:E0:CB:1C:0F:A5:FD:B6:4A:A2:F8:DD:51:E7:41:52
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer:       /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial:       01962E2B1FADEF72F72C8FA7B77E4EB0B8A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number:          12A7
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
                          2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
                          3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: yse/MZPa1XY3Vq5TqyIchReedRgwTjpXvyLpv4rJuLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1f:ad:ef:72:f7:2c:8f:a7:b7:7e:4e:b0:b8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=e737d18e8be0cb1c0fa5fdb64aa2f8dd51e74152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:dc:5a:9b:6c:32:61:b3:5b:11:cd:8a:91:
                    05:b7:13:00:b8:de:2d:07:49:8c:38:21:65:a4:ed:
                    df:21:e3:9d:5d:3f:1d:e9:53:72:dc:59:70:c8:25:
                    d3:90:2e:d4:27:9b:35:82:3e:10:19:e2:61:4d:b8:
                    d6:b9:32:45:89:ac:fc:1b:1e:89:d7:ac:3d:d3:ab:
                    a8:4b:22:85:88:ba:5c:ee:03:c5:c4:27:4e:ed:23:
                    71:76:46:49:c6:7b:9b:e1:34:31:3b:f0:55:98:8e:
                    a6:07:98:e5:79:2f:81:1c:49:05:ef:58:fe:7d:65:
                    9e:ff:e0:dd:f7:49:bb:19:c9:5d:5c:74:b2:35:62:
                    74:1b:3f:cb:e5:5b:ac:d0:74:2a:08:25:cb:47:62:
                    a4:9e:6f:bf:b4:2e:52:6c:34:72:fe:12:62:b8:c5:
                    85:d2:08:c4:62:02:0c:92:88:b2:50:85:c4:51:44:
                    71:c9:20:b3:92:5d:ef:80:b4:23:f0:45:44:88:8a:
                    35:0e:8b:e6:8a:1b:d7:e4:9a:93:4d:26:28:48:ee:
                    7a:88:34:fd:c5:e7:3a:84:35:1d:1f:e6:80:01:a3:
                    69:1a:95:43:7d:b5:fa:15:bc:19:ef:7a:09:cf:41:
                    4a:0b:3c:0d:c3:81:f5:c5:8a:5f:03:d9:8b:68:c5:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:37:D1:8E:8B:E0:CB:1C:0F:A5:FD:B6:4A:A2:F8:DD:51:E7:41:52
            X509v3 Authority Key Identifier:
                keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b3:e5:a1:d4:4a:65:e3:04:56:80:e5:ba:13:07:47:32:c3:
         8e:06:c0:fb:67:2c:16:23:97:4a:16:ba:c6:1a:72:89:b2:8c:
         8a:39:64:89:bd:5f:26:38:02:ae:33:8f:b9:55:73:a8:c7:1f:
         54:ab:ae:39:cf:d9:8e:ea:98:d0:ac:c4:10:af:8a:90:05:a5:
         1c:80:cf:84:ea:66:22:30:bf:8a:2e:b6:8e:55:86:b4:7c:ad:
         bf:70:ee:6c:27:25:2c:6f:66:0a:10:73:84:2e:6a:17:01:33:
         d7:ba:ac:49:38:26:3f:69:0e:e0:a4:26:3d:f8:2f:ac:aa:07:
         13:77:6b:32:7e:13:15:48:0e:89:44:66:f7:27:d8:ef:2c:24:
         98:7f:0e:d2:07:f8:6c:74:ce:a7:a5:6f:16:d3:cc:2d:07:84:
         a4:f9:10:f3:83:3f:9c:21:78:d3:de:7e:4a:68:e5:f8:4f:cd:
         63:3a:2b:a2:1a:af:67:1d:b9:c3:3a:b9:00:08:83:35:14:ec:
         1a:c2:0f:68:f4:1f:ba:2a:5e:36:57:4b:b6:3c:c9:0b:83:c1:
         a2:fa:87:3f:59:ee:67:85:d3:92:0b:b7:c4:1f:d3:c5:c9:dd:
         a4:7c:f2:1d:f6:62:b5:51:dc:1d:11:a8:d8:a8:1a:a0:73:cf:
         ee:3e:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----