Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File:                     JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier:          oLAnGb4uNi8B0TISTR96WRSK3rAb3hqvTE9461NIkYw=
Subject key identifier:   03:D4:2F:0F:F4:A9:32:AF:FB:A4:35:C1:A8:A0:2D:04:C8:0B:C1:A5
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer:       /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial:       01962F06A314C83B830A2C819B4A09277D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: D6bgyDxOUbUnLj1kC9QhzMFmlhax8gmDanGqlF9EcRg=)
                          2: OPRG5qVik0clg7wkwnl7SUN9jY0.roa (hash: ZN4J6ol4OC/X57nz18jc3tVUWSo2XvbIumwEP6WKJXU=)
                          3: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a3:14:c8:3b:83:0a:2c:81:9b:4a:09:27:7d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=03d42f0ff4a932affba435c1a8a02d04c80bc1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:b5:f3:14:9b:a6:31:97:e7:67:44:01:a3:
                    5b:7a:d5:ee:96:9b:9f:3d:4d:3c:3b:24:e4:9f:1b:
                    56:c1:19:f9:29:e9:72:b2:9b:1b:4f:57:21:0c:48:
                    af:65:70:b9:fe:3d:b7:e2:1c:97:77:15:92:b6:1d:
                    61:e7:49:74:41:28:1b:d0:e6:00:59:23:d5:eb:26:
                    fc:b7:e1:d6:12:0c:e8:a4:21:d0:ee:c8:7a:a9:6d:
                    d3:74:60:7d:d0:ac:a5:6a:d3:fb:3a:f7:f1:97:8e:
                    a2:8d:fa:fb:ca:6b:02:3a:7d:84:fe:73:64:ff:5c:
                    f6:e5:53:f1:bf:43:46:34:c9:b7:4d:20:0f:3f:cb:
                    91:ed:11:78:b9:73:f8:2f:cc:8a:77:39:70:eb:fe:
                    be:75:98:c8:b2:d1:24:0d:69:5f:9e:ea:a5:84:b1:
                    10:f1:0d:9f:18:f6:35:d4:55:94:7e:3e:d1:59:70:
                    a6:84:6c:97:a3:37:c3:7d:4c:1e:37:ad:4b:4a:7f:
                    03:33:00:d0:94:1d:e3:19:81:26:6e:ec:e5:fd:df:
                    d0:4b:21:b2:2f:ea:17:d2:a1:1d:7c:09:12:2e:15:
                    19:7a:00:48:9b:1d:b0:d4:53:35:49:a4:02:e6:76:
                    a4:11:1a:89:17:d2:aa:0e:ff:5b:76:eb:ff:71:3e:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D4:2F:0F:F4:A9:32:AF:FB:A4:35:C1:A8:A0:2D:04:C8:0B:C1:A5
            X509v3 Authority Key Identifier:
                keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ce:ef:66:93:78:e0:6e:62:1d:84:a1:5a:eb:a5:b4:7b:c3:
         2f:79:c2:ec:64:82:7d:e2:72:9e:83:59:29:53:18:68:7d:45:
         8f:f8:a6:d6:87:c2:4f:01:23:75:c0:2f:9f:f1:95:20:16:bb:
         57:b4:ec:6e:3c:c6:f8:df:bc:f3:17:c6:b1:19:e0:3d:0c:53:
         b7:f0:86:e5:15:5d:28:8f:d0:de:30:e0:6b:20:73:e0:86:c6:
         a0:b6:24:d0:4e:be:0b:56:20:02:30:6d:58:9d:ea:a6:ab:87:
         af:13:d4:8d:3d:ba:06:e2:77:ad:20:3b:f6:d3:65:c0:d9:b4:
         6a:66:5e:36:ac:eb:15:d1:f4:0d:5d:74:bb:65:1e:1c:0b:28:
         10:f4:19:5d:88:96:25:af:44:5b:1b:5a:24:0f:d4:09:3a:75:
         f8:e2:f9:ca:8e:94:22:c8:93:ee:0a:c7:3e:ed:c8:da:6e:cd:
         d3:67:b9:31:81:0c:f5:65:f6:ff:07:b4:0a:51:8a:ba:83:f2:
         94:07:26:e1:c6:60:e7:53:fb:c4:04:71:a4:bc:51:aa:05:a7:
         ea:c7:97:b3:e2:35:3e:ef:4d:d0:2c:3b:95:28:5b:ba:43:e4:
         e5:9c:b8:96:66:f9:f5:32:64:fb:a7:f5:56:4b:eb:0b:e5:47:
         f5:b3:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----