Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File:                     SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier:          BWzJ4xvRwwyBRqLTepsKoHqIRmUp+I4ck/Wsv+QDyrA=
Subject key identifier:   BC:E2:FC:6C:21:0D:93:E9:1D:74:44:BB:6F:72:F5:F9:B2:7C:3F:6D
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       01962DF3DA7405B2702DAD3080CD439127C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: ZLpQfc1oJVxt+/fPRpgoNsQQNXBHLlfq8CAy9r9Uozc=)
                          2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:da:74:05:b2:70:2d:ad:30:80:cd:43:91:27:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=bce2fc6c210d93e91d7444bb6f72f5f9b27c3f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:b1:a9:a7:69:56:35:30:79:a7:70:f5:4b:
                    c6:5d:87:d7:b3:36:25:a5:11:47:d0:0a:a3:81:2c:
                    72:6d:9c:90:ec:9e:1a:44:85:2b:fa:84:c0:96:49:
                    ee:bc:6d:c7:18:16:b7:7a:8b:de:a2:4c:e1:e8:11:
                    6a:43:09:1b:ab:94:fa:b0:21:60:46:c7:62:0f:f9:
                    09:e6:f3:ff:73:c5:68:cd:7a:f7:eb:be:e5:aa:ea:
                    58:82:f3:0f:c7:f9:3e:44:ea:d9:e9:6b:a9:c9:55:
                    77:58:f2:a8:63:41:d8:13:1a:09:2e:22:d1:72:42:
                    90:79:38:fd:4a:33:51:dc:b1:e6:5c:8f:90:8b:1a:
                    44:f8:bb:0f:fd:64:18:37:d8:ce:32:1e:18:00:cc:
                    a0:23:cc:1c:71:a6:ee:96:18:17:30:8f:71:24:2d:
                    24:c5:82:e0:bb:0e:94:22:9e:35:a9:d1:c7:ea:d3:
                    0e:68:ea:b2:b2:36:26:8f:ef:6e:12:70:8c:05:18:
                    0c:a3:46:ec:16:75:79:b3:82:77:25:50:2d:de:d6:
                    63:63:fd:b4:5a:d4:2e:6c:80:f4:b8:29:05:26:29:
                    34:f5:48:57:81:cf:60:56:43:81:4f:f0:d6:3b:1d:
                    df:a1:53:86:b6:b1:50:99:19:3b:01:d2:76:93:6d:
                    db:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:FC:6C:21:0D:93:E9:1D:74:44:BB:6F:72:F5:F9:B2:7C:3F:6D
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:ef:0e:e0:1d:8f:85:c3:c4:4f:fd:7d:6d:9e:cb:f1:38:
         76:b4:48:83:b7:44:d2:d5:92:68:11:72:92:96:71:87:a8:8e:
         00:17:e2:e4:fa:cd:bf:09:28:e6:eb:62:ce:cc:0f:20:00:a7:
         65:25:1b:2b:26:00:31:41:3b:9a:da:fb:57:db:47:00:14:4f:
         f9:67:5e:26:db:f2:0e:b4:0a:f6:8d:be:69:cb:0b:01:ec:80:
         a0:40:04:3e:ef:3b:fb:e3:71:7e:97:5c:91:65:bb:cc:2a:1c:
         4b:64:ee:a1:14:39:e6:41:eb:48:35:37:54:38:ec:51:f0:ed:
         f2:68:7c:1a:bf:51:0e:fa:ee:6f:b1:66:fe:da:ff:56:cb:e9:
         65:75:c0:51:6b:1d:0f:82:ef:b5:ad:65:2d:65:34:fc:91:4c:
         eb:48:bf:0e:7b:ba:3d:f8:d6:b8:4d:8b:77:30:26:0f:44:4f:
         fb:cd:7e:b3:b8:8f:f4:5e:01:1f:8b:cb:cc:d0:08:3d:78:6b:
         82:80:8b:52:7b:4b:21:68:5d:1a:bf:4b:51:90:64:be:03:b6:
         ae:b0:4e:f7:c6:5d:ec:47:82:92:38:71:54:26:cf:83:c4:5f:
         b5:7a:86:53:05:c4:c4:57:c9:82:c8:62:bc:70:22:a4:a5:f6:
         b9:38:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----