Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File:                     yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier:          RqLC5FEmKu5kdtCDtUUZrM3mz8kh7i6EcgQPhgvaVGI=
Subject key identifier:   E7:A3:EB:5E:0B:3A:56:B6:9D:A8:ED:71:73:BA:BA:64:B1:78:73:B1
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer:       /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial:       01962E9912472A61E60BDAC0B3F3ACE388A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number:          0439
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
                          2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: WOLivqLqacNHkVp+3Ad81WcLaX5R7sDL1/T4d3vGXJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:12:47:2a:61:e6:0b:da:c0:b3:f3:ac:e3:88:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=e7a3eb5e0b3a56b69da8ed7173baba64b17873b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:09:d0:2c:98:20:3f:98:22:be:42:a9:64:
                    f5:4d:84:65:e5:a5:54:54:cf:51:4c:7f:f6:37:6c:
                    31:dd:db:79:9f:ff:58:dc:71:f2:65:9d:84:b2:fb:
                    1e:b3:79:be:25:ec:02:ff:5b:f1:64:84:2f:fa:11:
                    8d:99:6e:71:9a:bb:d5:1a:ba:03:1a:32:8c:42:c0:
                    6e:4c:7a:a9:c1:01:2e:6a:38:47:61:b6:7e:63:e5:
                    33:0a:8a:85:17:66:58:e5:4c:e0:63:be:f3:9c:5c:
                    3a:85:45:9d:87:92:e6:88:99:d9:ea:04:be:29:72:
                    34:20:5c:c8:89:be:23:5e:1c:39:70:64:1c:ea:7c:
                    d2:30:89:c7:e6:ea:b6:34:4f:52:1e:2f:11:10:d6:
                    33:58:8d:64:82:f4:96:04:0b:0f:4e:a2:b0:86:fe:
                    06:61:02:f1:64:c3:04:c5:34:3b:8f:a4:8d:cb:bb:
                    43:49:90:b8:1a:2c:c1:ab:87:85:0e:71:91:81:8f:
                    61:c9:6e:10:28:de:f6:03:02:cb:c8:8b:af:ae:7c:
                    c1:b6:c5:9b:77:eb:b9:ba:d6:83:0e:0f:76:ed:7f:
                    6d:b4:0f:9e:3c:7f:3e:34:75:e6:c2:43:31:1b:ae:
                    2c:71:0f:74:65:a9:9b:1f:e0:6d:b7:81:8e:c5:32:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:EB:5E:0B:3A:56:B6:9D:A8:ED:71:73:BA:BA:64:B1:78:73:B1
            X509v3 Authority Key Identifier:
                keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:27:1e:93:b6:f8:31:fa:a0:a4:a6:13:32:51:3e:bd:cc:
         55:72:3e:bd:3f:b9:76:4c:76:cd:43:6a:c0:a4:b6:75:78:a8:
         18:b8:64:ec:f8:86:c2:81:e6:38:8b:44:a8:e4:a6:87:76:20:
         86:5c:f4:33:95:4f:1d:18:26:e1:fa:44:f5:22:b6:14:c3:e7:
         d5:a6:96:04:ef:2d:ac:60:16:69:ac:82:1b:cb:e9:6a:2a:17:
         09:14:a0:c5:e4:db:09:0c:23:73:90:ef:2d:3f:fa:71:e4:44:
         31:40:fd:61:6c:22:ae:e4:10:51:9b:98:48:e7:14:56:da:fc:
         cd:36:f7:98:27:57:d3:39:ea:99:65:b2:c0:35:af:d3:1f:02:
         64:34:15:05:cc:09:4a:98:75:93:f0:fd:fb:74:14:d0:54:1c:
         21:35:a5:30:ae:ed:3a:82:d1:a6:2d:7f:10:58:88:12:21:ed:
         4c:4b:21:f7:ed:0c:2e:29:d0:b8:a1:c0:a6:0c:03:14:d8:55:
         ca:2a:27:c4:9d:e8:65:ab:ff:9b:35:fb:f1:c1:2c:39:f7:d6:
         69:08:eb:2a:c2:7a:9b:7d:1b:b0:c4:c8:3c:e8:6c:0b:ff:30:
         1a:8d:15:e6:55:b0:72:f9:11:53:e9:c8:b1:db:48:0d:3d:e7:
         fb:e6:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----