Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File:                     cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier:          nmWqw0dgkiV8TqFTCn7GTx85BzxM1k9QaRrPq+SNYgE=
Subject key identifier:   F2:A6:47:BA:4B:3B:9E:2F:A8:19:B7:BF:C6:AB:EF:53:97:0C:32:7B
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer:       /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial:       01962E2B4028D486A6CEDE946A74614C0AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number:          09BF
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: X6cLLxrYWHxVXQKrf+x4XNN0NHwolxG/ElOz2oh3+7A=)
                          2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:40:28:d4:86:a6:ce:de:94:6a:74:61:4c:0a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=f2a647ba4b3b9e2fa819b7bfc6abef53970c327b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:a9:42:8c:dc:00:8f:8b:bf:7c:9d:af:c7:
                    8f:4e:3e:20:d8:95:b7:e4:99:99:49:ce:34:0c:fd:
                    16:ed:fa:54:54:ca:30:6e:eb:df:3d:36:37:2c:1e:
                    46:7d:fc:6b:56:85:68:d9:ee:05:e0:7e:5e:50:fb:
                    d9:0d:cc:d0:1a:e5:4c:15:2a:8d:bd:05:f6:c6:95:
                    25:e9:db:34:b3:64:f8:93:27:e4:6f:2b:d3:1e:cd:
                    b4:b0:a0:61:c8:58:91:36:6d:c9:a1:26:aa:b2:80:
                    08:e5:21:bc:f5:b2:61:78:a2:2c:87:0e:54:5d:04:
                    c4:35:2e:74:bf:a2:55:d0:f3:63:f8:9f:2b:11:fd:
                    b5:b0:a9:c3:66:4b:d5:38:5a:35:4d:0f:2f:f2:04:
                    b6:e9:23:f4:b8:bc:69:c1:3e:ce:73:ff:e3:7a:c1:
                    dd:0d:ee:d8:c1:d1:66:af:53:4c:b3:af:29:da:6e:
                    d6:54:7b:63:bd:f8:25:b1:c8:ad:d4:3b:f0:ac:5a:
                    37:84:d2:c0:05:fd:55:98:cd:38:23:2d:0e:46:8c:
                    8f:7f:c9:27:1e:5a:5b:08:52:e0:bd:63:b2:14:3d:
                    f0:c6:fb:57:df:c7:02:f9:a8:e2:f3:e9:4b:c0:ea:
                    97:e5:59:30:47:8a:ef:43:4c:04:c4:2c:e1:c3:7b:
                    34:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A6:47:BA:4B:3B:9E:2F:A8:19:B7:BF:C6:AB:EF:53:97:0C:32:7B
            X509v3 Authority Key Identifier:
                keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3d:54:b8:fd:dc:2f:30:71:85:1e:d2:67:17:40:77:bc:5d:
         f3:42:b1:7f:56:60:53:76:62:40:bb:86:17:9e:5e:83:b9:2c:
         e1:6e:5a:80:93:34:a7:6e:6d:00:3c:c8:fb:f8:b1:85:92:1b:
         27:b3:98:aa:52:c6:06:fd:5d:75:38:c7:56:a9:b6:79:2d:f5:
         f5:03:c7:fd:49:9c:1c:3e:c7:1e:b9:da:1d:0c:24:19:ef:5a:
         b2:e1:04:75:fe:47:4a:a1:a5:68:d3:56:50:a3:a3:43:e8:8f:
         bb:3d:bb:39:89:14:e7:3b:11:0a:9f:3b:62:95:cb:4c:85:be:
         14:f8:3c:14:c8:d4:97:2e:15:38:ff:c4:01:53:7a:c5:1e:7e:
         36:5b:8d:58:23:b0:8d:e1:ab:01:db:4b:37:d9:c5:fb:20:6e:
         c3:26:df:c3:f8:1f:8e:fd:07:3d:3c:6d:43:01:d3:03:0a:6c:
         24:68:86:33:ec:45:62:5e:c4:d0:ce:8c:93:dd:77:ed:c9:e9:
         67:d6:6b:a9:2e:f4:78:e0:13:a4:1b:1f:b6:fb:58:a3:86:e4:
         8b:a3:9f:33:d2:4e:35:7c:5b:07:49:ae:ab:16:32:49:9a:b1:
         52:fa:e1:d9:df:f7:72:d1:cf:85:fc:5a:cb:2e:d4:f3:1a:20:
         4f:b3:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----