Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
File:                     y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft (raw, json)
Hash identifier:          +A6OTCGhTPl8jHsTxBAijiTPgdwNxPmM4tm9mWp1sfs=
Subject key identifier:   C5:CB:AC:E5:50:8E:CB:BB:65:4C:05:C3:B5:08:33:1C:0F:42:61:13
Authority key identifier: CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D
Certificate issuer:       /CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
Certificate serial:       01962F74DBA102FCE1B62D58283D7918F31D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft
Manifest number:          0312
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: fOUkBLPvgdmMw3qOCphjRq4t0eY.roa (hash: r4VQRSy7Gza9d4nweiTC6bFhiBWBCqInaEx5ZdTsmu8=)
                          2: y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl (hash: TfkM6KDnh7y3BgnjQbrUXlg9Cx0NMRz9jsWbcKR6RUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:db:a1:02:fc:e1:b6:2d:58:28:3d:79:18:f3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4ed88c5bfbc2b956fcbb30d14e832bdbb9610d
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=c5cbace5508ecbbb654c05c3b508331c0f426113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:09:4a:fb:d4:a4:cd:e4:f5:50:ca:a0:ea:
                    4f:5d:54:bb:ae:5d:c6:14:4a:0c:c2:06:6a:4e:9a:
                    a5:3e:6b:f1:9b:be:f8:d9:8b:98:6f:15:78:ff:23:
                    e1:c8:9c:ca:56:10:27:fc:fd:cc:67:dd:a7:56:11:
                    1b:54:39:a8:55:ff:d3:8f:59:8a:d3:b2:cf:91:3c:
                    d4:46:fa:ff:9b:15:33:0a:30:1c:fe:e3:84:5a:0b:
                    44:16:2e:f6:81:51:33:25:31:58:2a:bd:a5:7b:5b:
                    5b:1c:8e:e0:fa:30:b7:8a:13:f3:aa:a2:88:7b:3d:
                    b2:2d:c2:30:c9:ba:f6:47:4a:a3:52:2c:2d:57:1e:
                    dd:1c:bf:1a:bb:63:7f:ed:f6:37:b6:0d:48:3f:ff:
                    2b:9a:33:2c:ec:17:64:cb:77:b5:fb:54:05:e8:da:
                    b1:f7:a1:77:1e:fb:04:2c:3a:03:06:dd:e3:44:f6:
                    16:88:de:fb:08:f9:45:40:50:8f:36:9c:e1:68:a5:
                    47:ef:9b:80:66:88:ae:8c:54:8f:c3:a1:9a:62:df:
                    4e:8b:93:c2:61:0b:c7:f5:83:00:a2:1a:20:00:7c:
                    79:38:01:83:91:6d:96:cc:b8:f6:6b:fc:77:75:a1:
                    97:8b:f5:52:85:0c:ae:46:10:26:68:7f:e1:2a:7b:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CB:AC:E5:50:8E:CB:BB:65:4C:05:C3:B5:08:33:1C:0F:42:61:13
            X509v3 Authority Key Identifier:
                keyid:CB:4E:D8:8C:5B:FB:C2:B9:56:FC:BB:30:D1:4E:83:2B:DB:B9:61:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b30916-2125-4a4f-9a36-2641975443ff/1/y07YjFv7wrlW_Lsw0U6DK9u5YQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bd:c1:1b:ad:f6:50:de:10:0b:bf:93:4e:6a:a6:33:c4:b3:
         f2:26:a6:6f:ec:6b:56:5a:66:b5:94:f0:d5:14:4e:7a:dc:2c:
         a1:cf:4c:24:a0:e2:9b:57:c1:5f:0d:1b:c3:26:f7:bd:6d:04:
         d1:2d:82:d0:b7:4d:b4:ab:92:58:c7:1a:c5:7c:92:69:64:57:
         9f:48:40:ec:ec:77:d8:e1:1d:1f:db:5b:eb:71:f3:f4:39:8b:
         cb:ae:78:f9:b5:02:09:93:9e:d0:47:82:c6:60:4c:be:b2:09:
         93:bd:eb:ca:a5:ea:c6:7d:fe:53:58:c8:fa:38:6e:ad:9a:ae:
         7c:42:34:74:04:75:ab:6c:fe:5e:f4:6c:f2:2a:98:11:19:fd:
         06:30:4d:fb:56:bc:32:b1:0b:d3:ee:fe:9f:60:c0:73:a3:b5:
         67:c8:83:b3:eb:02:53:42:6e:dc:94:36:86:97:9b:8b:ae:3b:
         b6:ff:6d:f4:7c:00:19:77:32:a5:58:89:7a:4b:dc:c6:b9:67:
         af:85:eb:e2:b2:21:5a:7f:f3:95:f2:ee:db:c3:b0:64:ab:5c:
         1e:3a:a4:2d:ec:7f:d6:fc:f5:38:bd:51:d1:e1:ce:ad:e4:72:
         6e:3c:c2:ee:4e:84:9b:2e:f9:b8:47:5b:ab:7c:30:97:1f:a8:
         b3:7e:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----