Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File:                     YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier:          tNbKPzASF1yCh0RtkkXXA5zXsxPcDnmL4dAsICmyM0E=
Subject key identifier:   F8:EA:89:AA:1E:C0:DD:7D:74:38:74:27:48:F5:FB:82:7B:9E:4B:9C
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer:       /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial:       01962FAB82BF54705D4319D0A617701AEF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: 86GrooClUl71gkQpid-FncZdZKU.roa (hash: zCT8Hn2EfMRZJ+CRruBga86mHz3WUzz8AipAIgNPJEo=)
                          2: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: Sd6xJ15CrZKT3bxW0a5vr92xqzP3eR0UWnva4OI4Zdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:82:bf:54:70:5d:43:19:d0:a6:17:70:1a:ef:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=f8ea89aa1ec0dd7d7438742748f5fb827b9e4b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a7:d0:bf:3d:3f:7c:2d:01:0c:c2:f8:99:b7:
                    ec:81:e4:e0:54:01:7d:13:a6:de:f0:d6:80:ad:3c:
                    28:ef:40:6c:e3:72:03:8d:b2:c4:76:c7:21:9d:42:
                    a0:e2:c2:8a:a7:05:14:3d:4c:7c:d8:86:48:b4:66:
                    9e:5d:54:a8:b7:c6:a4:52:88:8f:10:1f:7b:46:35:
                    9f:2d:2d:78:e6:8f:90:88:78:b9:5a:c8:c3:19:01:
                    30:b2:f9:79:6d:ed:7b:12:fd:1c:34:ee:ea:80:8a:
                    f2:15:39:81:1b:77:b1:f6:ee:c8:78:f3:67:ac:7e:
                    6a:b8:4a:47:8a:ff:ef:ce:bc:ec:ab:8e:8e:d8:50:
                    e8:71:a5:6b:09:3a:9a:f0:f5:3e:b7:95:6f:23:8f:
                    05:07:bd:b9:3f:b8:9c:39:d6:56:c4:f6:8d:30:61:
                    35:35:d9:76:8c:28:c5:f4:0c:29:a6:18:84:18:23:
                    f1:74:93:f9:53:4b:71:14:31:95:fc:c2:a9:df:a2:
                    b5:67:a5:40:67:b2:8e:39:4c:f5:bb:65:1c:3d:ba:
                    7f:cd:f2:bf:d0:96:ef:15:d5:50:80:2b:a9:98:cb:
                    52:f5:60:dd:07:8d:c7:53:02:81:f3:33:76:f2:18:
                    fc:21:f6:d5:b1:c5:8e:8c:40:8a:1d:11:c6:2d:eb:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EA:89:AA:1E:C0:DD:7D:74:38:74:27:48:F5:FB:82:7B:9E:4B:9C
            X509v3 Authority Key Identifier:
                keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:db:24:40:b8:27:64:d9:f8:0e:a7:ae:d4:47:09:a8:0d:
         f7:a3:01:b3:ee:25:33:d6:16:c1:ba:5e:c6:66:c5:0f:09:48:
         26:bf:7b:d9:de:c3:1d:1f:d2:27:c1:22:42:4c:55:a2:df:fb:
         77:c0:51:64:cd:1f:ca:af:26:7e:b9:54:54:9d:01:c5:bf:e6:
         f4:84:46:07:ad:c8:f2:b1:6c:07:b0:49:09:ac:d3:f9:e7:6a:
         d2:76:8d:d7:61:c8:ce:9e:5a:67:65:8f:44:07:4c:76:10:eb:
         f5:1e:a2:96:3a:9c:4b:78:61:35:97:bc:60:85:50:aa:94:dc:
         a3:90:71:f7:2e:a1:51:e7:d8:1f:9e:95:5a:db:86:b5:b2:75:
         04:16:13:2a:2c:ba:bc:74:bc:7e:ad:bc:c2:5a:c7:82:38:24:
         4e:5d:88:e0:b4:03:86:25:76:20:eb:8a:cc:8e:cd:e5:78:ec:
         be:37:0e:cd:59:32:14:5a:b9:b5:7e:7f:6e:df:48:fc:18:49:
         05:23:55:d8:f4:3a:51:a5:7a:51:88:65:46:7e:3f:f7:b5:58:
         ac:92:94:25:f2:9f:03:db:be:7e:90:18:d1:68:76:25:d0:74:
         9a:e9:f6:f3:cc:da:ba:9f:a7:85:38:17:3a:15:c3:c0:0c:08:
         e5:79:5f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----