Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File:                     yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier:          Zu3kOFJkOIzu1NFRxgE1QzELH56BGGKKQ+qq/VyJk2k=
Subject key identifier:   FB:3B:8F:88:AE:5F:19:E9:94:F7:A0:AE:5C:2E:E9:B1:E4:41:37:CC
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer:       /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial:       01962F06D11825065D949CF3EC4AA98D878E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number:          0FCA
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
                          2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
                          3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: tGbseU3bxfNakNh/JvN/C75NS71rR4ETBAz5JuckjQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:18:25:06:5d:94:9c:f3:ec:4a:a9:8d:87:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=fb3b8f88ae5f19e994f7a0ae5c2ee9b1e44137cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:10:16:50:74:f5:a3:76:09:06:3e:db:e0:
                    1b:7a:50:b8:07:0e:96:6d:f1:f9:a6:8b:91:46:09:
                    8e:29:7a:1f:04:4a:50:c2:21:df:3b:41:fd:f2:bf:
                    3e:9e:17:95:95:87:59:07:60:ff:80:57:f5:20:36:
                    cf:04:a5:03:a5:27:fe:79:67:f1:5b:18:1e:4a:7f:
                    e0:80:8f:ad:32:8f:14:31:35:b4:32:cb:92:ad:71:
                    74:c4:fb:30:4c:e5:09:88:e7:d5:83:6c:fa:de:b9:
                    b2:2b:d3:f0:b2:8a:cd:ec:c5:61:c9:af:70:5a:53:
                    d6:e0:dd:29:16:d0:15:95:08:73:41:a8:16:6c:fd:
                    f5:77:f5:71:27:3f:22:f0:a8:fd:c5:80:01:5f:e3:
                    b9:7b:d3:73:f0:58:94:5b:81:1a:5c:31:dd:a7:f5:
                    01:4a:b4:c3:eb:0e:ab:34:27:a5:ce:cc:e5:cc:96:
                    b1:73:a0:1c:90:99:f8:d7:e5:7a:c3:ab:6c:9a:5e:
                    a2:4b:83:84:a0:c7:50:c2:3c:5a:55:78:6c:d9:23:
                    59:4d:b3:21:b4:11:27:c9:3e:54:00:65:af:02:18:
                    b4:a1:99:68:da:5d:e2:db:21:65:f2:e1:32:32:7c:
                    7a:e2:df:7a:80:06:52:c7:f9:64:db:f9:16:21:cd:
                    20:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:8F:88:AE:5F:19:E9:94:F7:A0:AE:5C:2E:E9:B1:E4:41:37:CC
            X509v3 Authority Key Identifier:
                keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d2:b7:07:a8:98:d9:f1:db:ff:5c:69:ab:99:f7:e1:b6:1a:
         00:48:93:f0:df:3e:de:19:31:80:59:94:ec:2f:cb:e3:7d:93:
         67:6e:8b:d9:58:69:dc:6a:86:16:f0:1f:b0:1c:4d:6b:03:62:
         f0:1e:03:b9:e0:f7:01:2b:d4:ea:73:ae:47:67:fb:c9:10:20:
         c7:97:e1:c2:21:30:de:4c:97:29:46:52:81:47:82:05:bd:45:
         3d:30:2e:42:b1:47:da:fd:b0:90:dc:33:97:65:99:ac:1c:60:
         88:6b:2c:96:89:f7:43:b8:58:01:a4:bb:1e:71:2a:bb:ad:53:
         e8:a3:08:f4:95:de:49:3f:f1:a5:c9:4c:c2:44:f9:29:45:b2:
         ba:a1:32:70:7b:af:a1:53:1c:20:bc:07:71:a7:f8:88:ae:21:
         12:9e:13:de:f5:58:8a:28:f0:8e:1c:ca:6e:44:bc:0f:94:fc:
         1b:3c:8a:f1:6b:0e:fc:63:ed:b8:8d:ea:43:b0:1d:4d:78:c5:
         0f:4f:7e:18:44:bc:4b:2f:da:5d:5f:5d:26:09:07:dc:0f:f4:
         29:c8:98:e6:c3:16:b2:67:ad:2a:48:f2:ba:93:6d:d8:e3:28:
         71:ab:13:4f:9d:08:4a:3e:a9:42:85:eb:d4:a9:d9:dc:35:d4:
         0c:7b:42:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----