Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
File:                     Yijn4B-tpJwaUvoT82JsQbQaUbg.mft (raw, json)
Hash identifier:          FgJ/pWpTV/90ktb7rbRMQvrTPJTJLdKA4UbnfBcvSx8=
Subject key identifier:   DE:47:31:80:BB:8E:AE:47:8C:69:CA:4C:1F:88:E4:27:2E:70:EC:B6
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Certificate issuer:       /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial:       01962FAB649BFE49BE65FD8F238DF957C5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
Manifest number:          10B8
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: 39Hl2YtVKmMlT4Np8aTqcLmOeDQ.roa (hash: J30KXNySdgIczVtUgN74dsxfOaEmv254pBQGUApoGWU=)
                          2: 3vDPYhTVSNkpwDXIOAhKw07fJVo.roa (hash: LClf9wKTgSH7aYKU8gpOq60UxTyxsP0oBqiiisbaoMw=)
                          3: 9gdq4DPxWANqV88tyEbEG8Ldy2s.roa (hash: Qcx/zZKUQJlfYuyogBZyJJ8LJtGP90X7Aowz2zO0zoM=)
                          4: EUqk-yAaG5paOCIVkA1j8wPk104.roa (hash: CKnm8iWykIQyELL5aMGGlKm7sfX4o/GjDgMt4OBiDmo=)
                          5: MS7f7uAFrgsoqEC82oQcdxoTjbw.roa (hash: q7csoElnOVcDXyC+5AwwUXnv70b0boL5P5Uhy6UmF5c=)
                          6: MVUh0hcLIjE07dK8EAE-IOh5K_k.roa (hash: h64Mn6MhkYZu/pWDLICKE5G2uu0K1bG/f4Qgol+8E+k=)
                          7: PQV-lmNPs22kjH81gqLzZC2Hxyk.roa (hash: 3Z7VYjtRWDW6BIMcoEyNqO1K5os33IdoDIoXJJUJXX4=)
                          8: QZoa2FVMFT1UIn9TjIdCJB0KRm0.roa (hash: Ms+peXedl4VTyfxLJJp1x3zUfnRF0n3j5fmzunIlaVk=)
                          9: WfEws16cTi2Df979LQ6mRAE2axY.roa (hash: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=)
                          10: XRMjotv_RyNi_vyyDUqJa5DvdNQ.roa (hash: NqkkZ+12y4P7wuBMP3qkI6mM9Ot2hXdE9NxBdiV//lo=)
                          11: Yijn4B-tpJwaUvoT82JsQbQaUbg.crl (hash: ucYecj21sZ99rAB+nmpadoJ1Muvt5Ardo8Qm9NzWQO4=)
                          12: _uqBPfdUyY-uye7sIJ6VDcTnm9Q.roa (hash: qTMeoGDMJupk/FgaEtzpurysBRR50/CTtxcte770sgo=)
                          13: aQ9TKcMoz5YUQ7Dv119RHqsXoe8.roa (hash: kuhGQLKsA1Pu5uUkS6WTtzxq+5UJHPF8akUoFzgsuJ4=)
                          14: fBH0IYJayUM82fLAtCFKL3waLMo.roa (hash: aENlkeS/IhrQKMHBx/tjK8TdolIAB2oUek9AYMeHgkc=)
                          15: hBP1dFOLVBvt5xRqn-UPkUvOwX0.roa (hash: V1O7muMxpNnuboppInS/cPK8sqYq+I6fZjgAvWtea64=)
                          16: hO23WjxsvovLeYLtPCuS-3E0Vpo.roa (hash: 4CIWct6dmxFnbDCjzVX8u7ggPdnC/a3Xxdl8QvHxzeE=)
                          17: i8JcBpZfWepYkpF9UtgUc8u8oaE.roa (hash: hAhGsCAZqxE2Xuoo8wKC0KNjWz+UEQ+A4lqd+kgBL1s=)
                          18: jjbE1RnOSZ2q761YRZ132c8JiG8.roa (hash: dQGgrXxlcNXkPaPmlJTPvKt0F6rOcsVsYCx7icARUrQ=)
                          19: kLq7SqUeKI2DIUAAWUSXfOrIc2Y.roa (hash: rGBOCgBJX1i/E1elpdsBPlkFxELh0gIOeC6WMkdyhOw=)
                          20: lAqndAolY7BWQzN7LT0Q-IX6vb0.roa (hash: TGjadtZcD24yjuhtvBWL3IHkQVMYaJkPJka0+x4+n2k=)
                          21: mVXDsutnAgycmKCU0s0vqiIrWkg.roa (hash: nEoy3ANJmNvdHM1/EwE8AOqLbRC8BUKhSO6ToUJ1eCc=)
                          22: rWQw3Ap9IMTI_3cbUgb5cs9sfpg.roa (hash: 16/Ubwkj0gDZvLp3sxFfuFWuE+SLZxXhapNbePhBARw=)
                          23: tCBTeEpVZ9rGnN0OWe0wOiDMqec.roa (hash: +xHIXcppCVOpv/Ff3OFAwPnh7JSeP+CGAOVt+PcgeQg=)
                          24: tLgdq7x552M51Z859B5olJtsdB0.roa (hash: rixhj8UvpeqfwDPceY6i6tMORueTt6XMWtFaW5Efwiw=)
                          25: vm3AkptGALvAIgoY078ymc1XraE.roa (hash: u7VTKuFFoDvsz4NJh5f73LnR4kgTqMbb59uC7JU+Hv8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:64:9b:fe:49:be:65:fd:8f:23:8d:f9:57:c5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=de473180bb8eae478c69ca4c1f88e4272e70ecb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:3b:17:8a:d4:84:35:32:97:8d:9f:99:4f:
                    bb:b2:4f:d6:36:c0:de:6f:1a:84:9b:9c:02:30:a4:
                    5c:52:f9:c5:db:14:ab:ed:77:c4:a0:48:6b:1f:00:
                    eb:e2:b2:94:50:c9:3c:86:f5:00:e8:d7:f9:52:c2:
                    b9:04:31:60:f7:d6:29:cc:31:52:23:ae:74:85:e6:
                    c8:68:d9:dd:d8:af:23:39:b5:ad:d0:dd:55:ae:20:
                    06:ce:7c:99:4b:49:c8:74:c9:4a:01:c6:55:50:e9:
                    9b:b3:18:1b:a7:32:a7:f5:4c:cf:a8:69:65:d5:33:
                    14:ac:e7:13:1e:ea:c7:6f:9a:16:9c:ff:35:36:95:
                    35:75:58:60:f1:f0:48:4d:7b:37:6a:4c:17:21:b2:
                    10:14:e8:4e:f0:92:8b:7c:4a:b1:91:0f:8c:32:5e:
                    1f:c3:25:4c:0b:72:ff:6e:5e:74:6c:c9:fd:11:de:
                    9a:94:6c:8d:7b:c8:2c:a5:f6:26:47:03:60:f8:81:
                    85:ef:1f:6e:96:aa:cb:78:d5:46:72:37:1c:6e:05:
                    fa:68:5f:a0:89:f4:96:58:56:83:e3:cb:70:cc:35:
                    77:1a:5e:ca:1c:46:aa:d1:79:55:bd:90:d9:f0:cd:
                    8e:12:4e:48:e5:c4:3a:fb:c8:25:64:26:26:b9:40:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:31:80:BB:8E:AE:47:8C:69:CA:4C:1F:88:E4:27:2E:70:EC:B6
            X509v3 Authority Key Identifier:
                keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:eb:c6:e5:e4:e7:32:05:b9:96:a2:3b:a9:38:8e:8e:ce:75:
         db:f3:2b:ef:fa:30:22:3e:4d:89:6a:d4:f8:23:47:d0:09:ab:
         a0:28:39:a5:d3:0d:8e:07:61:73:d8:02:7f:30:d8:02:7d:23:
         5c:57:8b:ce:30:2a:7b:67:ed:52:3c:39:c7:22:ad:34:07:2f:
         1d:fd:5d:d5:8b:3d:a4:9a:43:4f:3f:f8:d0:a8:0a:18:20:df:
         5b:0e:3f:db:2e:02:b8:4d:c4:63:26:65:a7:e5:18:06:d5:ec:
         44:9a:60:f9:03:d0:ab:4e:9a:84:9d:e7:c3:f3:50:34:ef:44:
         87:7f:af:6c:42:43:38:c0:08:84:ff:71:61:79:02:99:61:42:
         b3:00:3a:7c:3b:8f:82:70:3a:57:37:3a:19:0d:1f:d0:3c:6b:
         69:2d:5b:44:0b:0b:3b:9f:7f:97:eb:3a:76:bc:2e:a6:ea:24:
         44:d3:4e:f7:fd:a5:4a:0c:be:a3:d9:f8:96:d4:e2:71:96:c9:
         93:be:43:bd:1c:a8:76:8f:ce:65:26:67:a0:b7:e0:21:03:ce:
         73:9c:dd:d8:17:8c:fb:fb:db:c3:f8:55:33:d1:82:3e:75:5e:
         cd:2e:41:6f:fd:a9:88:8f:0c:01:93:df:a8:74:4a:c1:33:d6:
         c8:74:fc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----