Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
File:                     MYy__80hEn3jYoaXWY2wwtnhE1E.mft (raw, json)
Hash identifier:          9WS95JXuDPBl3qrsO1+0nl2CZbCevVqIadpmK6Q9bCU=
Subject key identifier:   EA:EC:3C:95:78:A8:6C:76:30:48:3C:62:8C:D9:AE:72:6E:4D:17:EA
Authority key identifier: 31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51
Certificate issuer:       /CN=318cbfffcd21127de3628697598db0c2d9e11351
Certificate serial:       01962DF3AC44D2A7A443A137A34512607F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft
Manifest number:          0E1C
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: MYy__80hEn3jYoaXWY2wwtnhE1E.crl (hash: liygxleODd8NsResYbYHQGwcNomFYA8Y/MTFr83ze0I=)
                          2: ygWfHOj23VJgj35j5q6wo1fH7i4.roa (hash: Fn0E1OEA7wrBSTSTMjLK8G+ESh9SLPnfGckk+sIOOeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:44:d2:a7:a4:43:a1:37:a3:45:12:60:7f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=318cbfffcd21127de3628697598db0c2d9e11351
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=eaec3c9578a86c7630483c628cd9ae726e4d17ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:16:3c:a9:af:ce:60:fb:b9:75:58:e9:cd:
                    93:33:a6:9e:56:c0:9e:da:ae:8e:cd:0b:6a:64:94:
                    55:3a:5e:5a:52:45:6a:01:a9:86:c3:4a:2a:1d:8c:
                    0e:e6:ae:7b:80:c8:9f:17:0e:03:d7:98:82:2d:0a:
                    40:d8:fd:8e:f8:92:61:fd:57:46:f1:1f:80:45:70:
                    a6:86:49:d2:ba:95:a1:a6:5e:af:71:8a:a9:dd:63:
                    2f:ac:38:c4:c0:16:2a:6b:f2:e3:51:ca:e1:d7:ed:
                    8e:dd:03:1d:f8:81:3b:db:6f:c3:80:a7:39:1d:af:
                    d8:0b:40:79:8e:a2:d5:d7:bc:5c:66:b2:81:07:c8:
                    a1:92:11:ee:5d:5c:44:c6:8b:06:7f:04:5e:c7:2c:
                    0f:8f:06:6c:c9:62:07:37:55:c2:ad:a9:07:6c:62:
                    02:49:9a:3c:1d:71:da:92:7a:f0:41:2c:f3:d8:95:
                    04:d6:1e:5c:8b:5d:04:6b:b9:7d:e6:06:79:74:de:
                    91:b3:63:c5:28:61:c6:cd:c3:e3:c6:50:cc:5a:6c:
                    46:cb:23:3f:14:93:84:6e:ee:a1:cb:ec:23:2f:82:
                    86:0e:12:1b:42:52:16:e9:77:74:e6:2a:42:7d:68:
                    95:c4:da:81:36:2c:27:f7:60:b3:d3:bc:20:e0:6c:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EC:3C:95:78:A8:6C:76:30:48:3C:62:8C:D9:AE:72:6E:4D:17:EA
            X509v3 Authority Key Identifier:
                keyid:31:8C:BF:FF:CD:21:12:7D:E3:62:86:97:59:8D:B0:C2:D9:E1:13:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYy__80hEn3jYoaXWY2wwtnhE1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d0a3f9-997a-42a8-aa47-4bb71e274a5c/1/MYy__80hEn3jYoaXWY2wwtnhE1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:06:a8:49:9f:61:d9:31:d2:99:65:a9:be:31:20:a2:75:8d:
         ec:12:dc:9a:73:0e:66:ea:b7:b8:a4:c2:7c:8a:48:3e:ba:92:
         5a:04:3d:99:a0:b1:e3:2f:13:89:45:c0:50:f2:09:3b:2d:62:
         25:9d:55:aa:e8:9c:52:de:a2:d3:4c:56:2f:55:91:db:13:0b:
         3b:5b:54:24:b7:90:3b:d8:55:68:95:dc:eb:c3:77:8e:1c:ad:
         88:c5:b6:fc:6c:3f:34:e3:2a:ca:9b:a2:61:00:9d:5d:47:2a:
         f8:1e:aa:fc:a0:fe:f1:bd:ad:d0:65:8f:e9:09:98:4a:03:88:
         81:0e:76:80:7a:22:0f:7b:07:0b:57:06:97:21:f4:4b:0e:78:
         d5:70:eb:f7:b4:e9:95:57:3d:5a:6d:57:5e:43:fb:74:3c:bc:
         50:4d:84:90:86:2b:0b:06:3b:5f:f1:6d:01:b6:fe:66:85:37:
         b4:0a:fa:11:74:1b:32:ae:30:df:c3:e7:01:21:53:4d:d3:3d:
         97:08:a3:f5:c0:3e:27:e3:35:21:c4:5f:91:ff:6e:23:77:d6:
         31:24:0a:e6:34:91:3b:0e:d6:b9:04:79:e6:6d:b8:e2:09:38:
         e5:cb:51:84:6a:3d:d8:36:a7:61:ef:99:85:fd:13:79:d4:aa:
         fa:04:66:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----