Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
File:                     lYXBmRVFWDVFdBPvIip9N1spkB0.mft (raw, json)
Hash identifier:          EW8xS42fljQ2sRchyRuH8bSFOUeUwLdIWu5yJGarYdw=
Subject key identifier:   78:74:10:24:4E:88:99:C7:A8:2D:13:24:22:A3:D5:4D:94:7F:29:E8
Authority key identifier: 95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D
Certificate issuer:       /CN=9585c19915455835457413ef222a7d375b29901d
Certificate serial:       01962E9895747BE3F87C05FABA44D98EF946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 1prz6nfwB7MR42V9eL5e4pTM0a0.roa (hash: nHNcflpIKWPFe/S0qGh+RfefQb1jF3HSnY4U4fHegwQ=)
                          2: k2hJkZDc_xeXo7A97oeeqJQmzBY.roa (hash: KfO87HjfOnIIu1KT3PIvCkLOefmGzWA42/xP3gBOPMI=)
                          3: lYXBmRVFWDVFdBPvIip9N1spkB0.crl (hash: j9QKhe7HpusrcFoywXNY+Z0on2X+eS6ZxWVsRN7mtIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:95:74:7b:e3:f8:7c:05:fa:ba:44:d9:8e:f9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9585c19915455835457413ef222a7d375b29901d
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=787410244e8899c7a82d132422a3d54d947f29e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:9f:79:00:97:c4:9b:bb:c6:47:b3:0c:42:
                    f6:15:cb:58:60:45:fc:9f:e1:f0:81:4f:6c:9b:7a:
                    ee:39:e6:38:ca:a6:ee:43:7d:9c:37:ac:2a:7b:db:
                    ed:11:af:ff:5f:17:ca:6a:24:84:59:a6:53:3a:74:
                    b2:a8:ed:8d:5e:91:48:28:23:6c:bb:cf:b8:f4:be:
                    cf:69:d5:4a:e7:71:6f:ff:58:2c:9f:32:87:9b:df:
                    c4:78:50:81:45:5d:ab:c7:93:a8:b4:06:5f:a4:8e:
                    ad:8f:76:5e:43:fb:9b:c2:b1:12:60:41:30:b4:43:
                    c7:b1:ca:57:e3:9f:7b:80:3f:7d:7d:71:8a:26:a1:
                    2e:67:08:50:09:c8:24:6f:1e:c9:28:c6:1c:38:40:
                    a1:f8:5e:27:b5:97:4a:54:02:ee:64:8f:8f:01:43:
                    47:de:5a:c7:03:a3:9a:8f:35:7e:cc:19:0e:d3:d2:
                    06:c7:ee:d8:04:47:ba:cb:7d:30:c8:6b:51:7f:9c:
                    62:0e:46:74:e3:75:18:69:0e:39:cd:32:28:9b:bd:
                    7e:8e:1e:84:a3:fb:79:55:f2:5c:90:f8:e4:56:eb:
                    b8:92:3c:a0:30:48:db:ad:ce:84:3a:da:a3:52:9e:
                    f1:73:8d:a7:51:8e:0f:1b:ee:8e:ec:2f:26:46:38:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:74:10:24:4E:88:99:C7:A8:2D:13:24:22:A3:D5:4D:94:7F:29:E8
            X509v3 Authority Key Identifier:
                keyid:95:85:C1:99:15:45:58:35:45:74:13:EF:22:2A:7D:37:5B:29:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYXBmRVFWDVFdBPvIip9N1spkB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cf5758-aff7-4d88-b7dc-772918fff544/1/lYXBmRVFWDVFdBPvIip9N1spkB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:71:e4:da:9d:a4:b3:7f:10:76:f2:ba:11:b0:54:a7:e6:
         8c:d3:ff:ab:80:3b:9b:a9:2b:3a:b5:68:17:a5:cb:0a:15:0c:
         7d:56:69:1e:ac:8c:41:0a:f7:42:de:ba:78:12:8e:6f:0b:15:
         ca:e8:1d:a7:3f:94:0d:bb:31:62:0a:8c:48:fe:5d:00:3b:17:
         23:9b:84:91:92:87:59:74:34:67:71:ef:b8:94:da:17:f0:8e:
         f4:fe:15:8e:ec:c2:e3:f1:be:5f:79:4c:f2:0c:20:c9:02:6c:
         47:be:17:13:65:38:38:93:a6:fd:14:94:32:43:f9:2f:ba:9b:
         30:20:93:a4:2e:96:dc:74:4e:c6:a7:9d:18:73:84:1c:0b:c1:
         be:5e:95:4c:13:37:3a:36:62:13:3a:05:32:ef:98:ed:1d:a4:
         29:59:76:19:15:c5:82:db:74:14:25:23:a3:a1:a5:aa:c5:c0:
         18:ef:57:3c:ea:9d:39:8f:9d:a2:2b:1b:dd:22:32:9e:d5:17:
         cf:74:df:c8:f4:a0:fa:a8:e2:53:86:97:1a:ca:2e:8b:9c:70:
         eb:f5:e2:e2:e8:c4:4e:e1:e9:a1:ee:d9:7c:1d:66:48:bd:20:
         a2:6d:e8:9a:b0:01:69:a4:92:1b:3b:de:89:29:32:c9:b2:33:
         61:ec:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----