Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File:                     y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier:          Bhb6Xq4rBXd2hfAUQCLNCZ3f1mpqYXQqwWn277FVCTA=
Subject key identifier:   2E:AE:3F:BC:E6:C5:8A:96:BE:56:6F:61:AC:A1:45:79:9B:73:12:E2
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer:       /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial:       01962E2B0F85B6482B4232B263DBBA56749F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number:          117E
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
                          2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: T6g+T6k1Q3etXUvaPcaK1/hV9+xFtN8xvkFahVlg9Nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:85:b6:48:2b:42:32:b2:63:db:ba:56:74:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=2eae3fbce6c58a96be566f61aca145799b7312e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:35:75:84:80:23:c6:f2:7f:b4:b4:b7:46:
                    dd:9e:c2:06:87:38:c9:e3:64:92:d8:17:d3:0e:0a:
                    03:6f:36:42:c0:2a:d4:5f:8e:22:36:0e:56:57:2b:
                    7d:7e:9c:f0:32:9d:38:31:51:01:88:2b:fb:93:4d:
                    85:ab:52:36:c4:3f:80:f9:6d:8a:d2:61:8d:50:ff:
                    7f:bf:65:7d:29:ca:a2:e1:b0:19:5d:68:b4:75:30:
                    53:e4:0f:cd:b0:59:15:f2:53:03:4f:14:0e:86:5b:
                    a7:5f:05:04:e5:74:c6:88:5c:73:f1:c1:e9:07:d4:
                    19:76:5d:53:74:88:a8:89:fc:8a:bb:b6:54:e0:ce:
                    9a:3e:83:b8:c6:3a:71:5b:f8:05:80:a6:f5:a2:86:
                    56:dc:aa:0a:d7:d8:d2:aa:22:d7:e6:59:2d:01:85:
                    55:61:93:39:20:7f:04:66:61:e7:85:9f:5b:8f:dc:
                    40:7c:e6:5f:67:57:cb:65:56:57:34:0d:be:41:1e:
                    a8:27:8d:f1:79:33:2a:6e:b9:c0:4d:cf:d0:83:28:
                    6c:2b:ed:bf:a9:ea:c8:b7:88:89:9c:3b:94:17:ce:
                    51:ad:7b:26:90:1f:8c:f9:f1:fa:46:5e:a7:09:e2:
                    17:d2:37:18:18:ee:cd:95:16:b0:93:31:ef:be:d1:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:3F:BC:E6:C5:8A:96:BE:56:6F:61:AC:A1:45:79:9B:73:12:E2
            X509v3 Authority Key Identifier:
                keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:c2:c9:97:ba:58:4f:2a:20:2d:37:06:20:cc:43:c7:dd:
         d3:ea:b9:96:01:c1:86:10:ca:0c:5e:b0:00:86:76:aa:08:e7:
         75:8e:d7:df:5b:82:64:31:10:2e:03:c9:b1:e0:65:c7:58:0d:
         ff:fc:32:a0:bc:cd:ca:67:ef:43:55:a6:28:ad:7e:3f:37:03:
         d4:97:11:d6:8f:92:a0:4b:25:1c:39:b2:f8:08:21:05:09:b6:
         02:94:ec:0c:06:bc:53:d8:95:e0:68:c7:00:a5:dd:38:81:2a:
         19:95:d2:b8:5b:c3:d0:6e:90:fa:99:3f:50:3d:ae:01:8d:ed:
         ef:88:5f:cc:3e:71:da:30:ca:a9:8b:5b:2c:36:08:aa:df:a8:
         d1:f4:73:d7:1d:cd:61:4d:85:a3:18:c8:34:e5:78:a7:b9:61:
         3b:6a:ad:a8:3a:fe:ae:d9:b1:5b:4a:91:64:bb:7e:2e:0b:0e:
         fa:8e:f4:e7:30:28:82:eb:2f:82:aa:34:f0:ad:a7:9a:a9:b3:
         e6:1e:e4:17:58:14:76:a3:52:27:81:fa:12:4b:47:40:02:f3:
         bc:a9:61:ee:8b:ce:30:c7:3b:ad:66:69:6d:ce:53:0a:77:d9:
         6f:9a:52:0f:cc:70:4e:6b:61:51:4d:7d:bd:18:9a:5d:41:8d:
         28:39:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----