Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
File:                     JaiVOVIABCcNNCU73BbYd4QVbho.mft (raw, json)
Hash identifier:          GWAmA794CIXkeCpLkZG+/9GiM8CHb2acCnQ2fuYy4CU=
Subject key identifier:   6A:C1:5B:81:6D:59:1E:11:E9:B5:04:35:5B:6F:C7:0E:38:4D:C1:93
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Certificate issuer:       /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial:       01962F067A4C2C6777E39031267C54B80E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: DS50rlRZwLY8XuiZwHc5tBN6hvU.roa (hash: b+B4AXqT01CIYHbKVSC14drPdJqiCbfJo8D2ZJ20764=)
                          2: ElFRzESyd_FARx8sdZQyvtKhhiQ.roa (hash: IEIHuOHLB6gBvdNNBa+2SrGflQf88tZq8uIpIn/+Bss=)
                          3: FDLG3C3BdLH5mkEdaIkf5JVVR9k.roa (hash: eIvSohIS9AHs7C/UrNBbvINwpxqPAthufHpH6qHXtGg=)
                          4: JaiVOVIABCcNNCU73BbYd4QVbho.crl (hash: B7nettopFWlKP5rRCwDEkDJq6X2ZNkXRIwF10AmEiw4=)
                          5: L7hjIkY3zoZbF7otJPkyYp1-3GQ.roa (hash: KFKmyw3tb9aiPbS7iVWhwyX+8k/yoTNSo8uFnLcyUwc=)
                          6: myo0lOXlik6455mDWNn0s-P-G5c.roa (hash: GWM9iq3advWBN0WarVLZ14po4AhHo2qPitRczQuVb+0=)
                          7: vsFMEu8HS7LJh_IaQ_W3ChIz1iU.roa (hash: zvI+1QpRjWuIExjKMTnNsiDmzbwtShfXAATLbqaVci8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:4c:2c:67:77:e3:90:31:26:7c:54:b8:0e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=6ac15b816d591e11e9b504355b6fc70e384dc193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:50:19:1f:c9:24:d4:2a:c5:9c:d3:7a:9a:
                    4c:3b:df:c1:5c:84:45:dd:0f:e1:b6:c4:eb:2b:dd:
                    be:42:05:b6:f9:40:c8:77:19:ba:e2:3e:df:1a:01:
                    dc:8d:a0:19:0a:12:13:18:79:68:94:c2:c5:49:f9:
                    00:24:ae:fa:32:40:b7:0b:0d:76:9a:36:0c:d9:7d:
                    b6:bc:54:36:c8:6f:a4:c4:70:ef:d2:eb:a8:3b:d8:
                    62:43:9e:05:01:44:71:36:1d:ec:eb:d4:71:64:6e:
                    60:d8:d4:34:eb:5f:8b:f8:fc:65:88:bb:3e:f7:b4:
                    d3:45:58:c5:73:3e:20:b1:9c:10:63:9f:41:a7:76:
                    a6:b8:4c:a8:a6:d8:8e:6f:05:c6:d1:1c:e5:83:87:
                    8e:4c:3c:53:2a:8d:d5:f0:8b:57:64:71:b5:dc:4b:
                    e2:c2:d5:b3:5a:e4:5a:e9:ee:84:34:21:e7:c5:90:
                    6b:61:ed:db:8e:59:f5:26:7f:01:32:77:34:2e:66:
                    63:f4:61:6d:5f:a6:ba:97:6a:fe:81:6e:76:e4:dd:
                    87:3d:dc:51:69:7d:f8:9a:42:e7:18:30:eb:82:18:
                    de:22:93:3e:55:7f:a4:83:89:93:5a:54:51:32:2a:
                    09:4c:af:04:9d:c9:3c:16:83:bb:13:d4:4f:93:d3:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C1:5B:81:6D:59:1E:11:E9:B5:04:35:5B:6F:C7:0E:38:4D:C1:93
            X509v3 Authority Key Identifier:
                keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:cd:3c:50:83:b2:6f:76:c7:ee:e7:0a:e3:97:8e:28:6a:
         67:fd:16:fd:b7:38:09:a9:b1:77:f5:64:cc:e2:5c:4c:1b:ab:
         96:eb:5a:e1:ad:b6:97:a2:fc:a7:7e:3a:c6:9f:99:6e:b1:d8:
         6a:7b:47:81:18:0f:5c:fa:79:05:b7:eb:5f:fc:2e:87:3f:e6:
         aa:72:70:d3:d1:45:f9:12:9d:e6:5a:0c:a3:a6:f1:43:0d:3f:
         da:a5:78:ab:6c:43:8a:9e:ce:86:e4:7a:3c:db:b5:50:00:d6:
         ad:ac:e4:a6:40:cc:53:12:0b:97:3d:8c:01:1a:9f:17:5b:98:
         95:3e:da:d4:cb:b8:d9:44:45:01:b8:bd:73:75:d1:fd:77:0f:
         e1:3a:50:80:99:44:cf:53:52:17:94:82:e9:37:d9:81:ac:c0:
         c9:b5:01:9f:cf:4e:2f:64:3c:b1:bc:1a:36:0a:22:35:3f:d2:
         62:ad:2f:25:a7:24:6b:93:02:3e:34:e8:37:21:1d:a5:f0:0a:
         43:ab:0e:3c:8f:9e:12:f9:93:cc:f3:80:bc:91:15:90:0f:e1:
         ad:0a:0c:0a:bb:44:af:8b:6f:93:d4:30:35:71:c5:ec:70:4a:
         ad:d4:df:53:e6:3d:87:6a:b1:dc:10:74:96:dc:60:dd:df:e8:
         3e:73:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----