Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File:                     jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier:          QPCriFxwItzJBpaO8tIYSHd0ijRbJY7rmHx5JJVm770=
Subject key identifier:   84:84:F6:7A:C9:BA:77:4A:A1:A9:BC:99:88:CE:41:B0:9D:BC:35:ED
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer:       /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial:       01962F3DD3A5AD8F3F80CF796BD17D6E2101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number:          0EB5
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: OCqdENUlXvkzyIHVnB7rqA+1nBS8zpFwJeTBhHOM6ic=)
                          2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d3:a5:ad:8f:3f:80:cf:79:6b:d1:7d:6e:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=8484f67ac9ba774aa1a9bc9988ce41b09dbc35ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:95:91:1e:3a:ce:23:28:07:25:80:d1:78:
                    d6:69:07:de:2a:7f:af:58:d2:aa:a0:1f:73:0f:6c:
                    d1:3a:8a:19:e9:35:84:67:ef:9d:be:ed:59:9f:86:
                    bd:2e:57:94:e1:10:bb:e7:8c:77:c3:1d:a8:82:ab:
                    df:6e:71:be:b5:f9:74:4a:da:c1:78:e5:08:5c:d8:
                    6a:cd:84:e0:17:b9:47:48:ad:85:43:50:30:cd:01:
                    ce:8d:ff:0c:7f:13:f8:38:15:a9:89:74:ce:42:08:
                    a2:58:0b:c9:b8:f1:95:c0:ea:e9:6a:e3:d6:a9:06:
                    87:4c:73:b4:c3:e4:69:b6:cd:c0:63:40:14:c5:4c:
                    20:2a:3b:36:75:b4:a2:53:77:6c:7c:61:79:da:52:
                    80:c8:a7:d9:e8:32:2f:1b:02:30:19:35:c0:6f:2f:
                    b9:1f:1a:02:48:58:f3:7f:21:ec:c8:03:73:e1:fc:
                    e7:a5:7f:64:f3:37:17:2c:e5:10:9e:95:bb:ae:6a:
                    7d:84:07:f3:20:09:5f:0c:ed:cc:1b:72:fb:92:ba:
                    fa:e1:f1:f2:91:64:c1:82:c2:76:f2:43:8c:fa:2d:
                    c2:1e:fd:7f:3d:f6:e2:5c:35:1d:7d:d3:00:e7:4a:
                    32:45:97:34:dd:3b:fe:d1:09:ef:02:9d:89:8b:45:
                    5f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:F6:7A:C9:BA:77:4A:A1:A9:BC:99:88:CE:41:B0:9D:BC:35:ED
            X509v3 Authority Key Identifier:
                keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:28:9d:a8:cd:20:d2:86:1f:73:64:81:fd:03:c0:22:8b:5d:
         d6:f7:bc:76:89:34:e2:7a:84:02:67:c6:6d:6b:75:0e:cf:af:
         96:16:2a:ac:19:e4:4f:14:29:f2:4e:3f:e5:ed:46:8b:dd:d8:
         01:0d:ae:82:1f:b8:f5:c6:e8:6a:a3:9c:49:e0:e9:54:06:5d:
         f6:89:22:5b:6d:29:49:46:c7:5d:f2:eb:49:85:ac:01:aa:cf:
         a1:47:94:7a:0c:56:7e:53:ee:35:81:9b:c4:d0:c7:59:e9:e5:
         52:fa:69:c5:b9:cd:83:fb:dc:ca:4f:aa:2c:b0:77:43:fe:b3:
         90:40:fd:6c:06:bc:35:ab:af:36:de:fc:b8:8a:7e:18:b7:dd:
         f5:01:03:65:30:5c:35:5e:1d:db:4e:a3:36:af:b1:99:8c:d5:
         a8:b4:e7:6d:55:c4:d9:0e:3f:c3:f7:f4:ee:5f:dd:87:4c:a4:
         8a:01:a3:0a:b1:60:46:8e:a8:43:da:3f:68:7c:f3:a4:34:39:
         1b:82:19:05:d2:d0:21:38:82:52:79:36:1e:78:83:8d:75:06:
         3f:d8:a1:91:d8:7f:14:ea:e7:10:5c:ad:7c:0f:32:25:5d:8c:
         85:2d:d9:31:ad:5d:c9:64:70:c1:20:6d:c9:0d:b2:9b:2c:7f:
         e4:ce:8c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----