Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File:                     yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier:          PHl3gOzmW5+3VHWBcMPBXQtfI984OjxPbcO8GVQD/oI=
Subject key identifier:   C2:54:65:60:04:D7:79:3A:59:3F:01:2E:A1:7F:24:09:09:96:BA:69
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer:       /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial:       01962F74E2585B5875FD37E9F15B51AFCB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number:          053B
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: ZOtgfqLDYdNWH5fYDhWkm9PND4Y.roa (hash: JwgLkVzCQiB/ULcLxd8PPGsr5tfW+toDKbyYKCvjGSc=)
                          2: by9kfZ4EbEKUVkVK0jeGqBsmfmk.roa (hash: LEv0S+P2XEMPTW4EvLdn5P/pRRYNUEDyCa7a7Tp2BTY=)
                          3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: jIpW3oiIPkOuKJ8DYoot5puwoEvUedwv5y/g1rRp7VE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e2:58:5b:58:75:fd:37:e9:f1:5b:51:af:cb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=c254656004d7793a593f012ea17f24090996ba69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e4:bb:3c:85:b6:42:0f:90:c7:e2:88:1e:4f:
                    6c:30:4e:33:dc:bd:33:00:fc:80:97:b8:74:d1:85:
                    b6:39:05:44:96:9a:7b:16:cd:6c:b2:4c:f5:88:03:
                    89:d0:5e:4a:b3:9f:00:be:fc:be:4a:d7:be:3c:7f:
                    de:f4:c2:5f:ec:fb:ed:24:44:6d:9d:2c:26:bc:98:
                    bf:f3:4b:a0:47:f2:aa:34:54:a3:8f:c4:f3:c7:07:
                    8b:96:a5:f8:ee:ea:4a:b2:46:11:5f:c7:57:f4:b4:
                    c8:18:ca:34:56:b1:99:ad:5c:f2:88:60:cc:9f:e8:
                    f8:cb:30:b5:79:72:26:db:29:c9:73:87:74:42:0c:
                    bf:d6:42:ad:75:c0:d7:b1:24:81:00:02:5a:e2:1d:
                    6a:2b:ba:fb:82:3f:fa:7c:e3:7d:33:90:cc:81:b5:
                    0b:3b:23:87:b0:e6:90:28:20:2c:51:c2:8f:33:6f:
                    c2:d9:bf:37:f6:a2:2d:30:da:7b:b7:94:3e:46:e9:
                    21:07:45:fe:91:9a:48:7c:1f:ab:e1:c0:9a:5b:1f:
                    80:c1:45:73:84:98:58:09:58:d4:c4:a8:7e:ef:24:
                    02:da:6e:55:77:c0:b1:90:e0:bf:10:56:8f:5d:f8:
                    a3:69:89:d6:8d:ad:35:74:89:d0:41:f0:9e:81:fa:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:54:65:60:04:D7:79:3A:59:3F:01:2E:A1:7F:24:09:09:96:BA:69
            X509v3 Authority Key Identifier:
                keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ca:83:6d:e2:5c:d6:ee:64:70:05:17:e1:2c:e7:42:1a:ea:
         66:f7:4b:22:59:49:29:90:0f:a7:1c:01:a9:96:78:9f:77:9f:
         ae:da:e8:06:50:dd:de:2c:ca:3c:19:15:01:fb:65:f3:ea:6d:
         89:6d:b9:8d:a0:90:94:84:5f:54:0b:3c:e6:d5:f1:9c:c4:13:
         dc:37:df:0d:02:e7:5a:46:42:3f:d4:84:57:eb:b3:8e:a5:72:
         5a:da:0d:8a:4c:e7:a5:a3:07:46:66:10:1f:c2:d5:b2:48:96:
         25:47:0d:7f:d2:fa:91:2d:de:c7:45:f8:86:75:ae:d4:6c:2a:
         b1:e4:58:ff:d2:48:83:68:5d:2e:7a:64:37:80:9e:58:c5:6d:
         47:59:ae:a3:f4:f1:81:76:d5:50:80:d4:cb:81:73:0e:49:7b:
         de:19:75:38:38:cc:c6:b5:ac:08:a1:c5:41:cb:50:cb:bd:ef:
         90:79:50:51:bb:52:4f:ba:8b:2a:b0:0e:a6:3b:8e:cc:5c:ea:
         b0:ed:9e:7e:3f:58:3a:a9:46:bd:e9:7b:78:f2:a9:7c:d9:b9:
         de:02:59:14:3d:aa:75:0d:da:bd:2b:fb:66:5b:0a:ad:00:63:
         e6:16:3d:41:ff:fb:d2:89:bb:bc:67:69:2c:1a:23:7b:0a:69:
         2b:43:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----