Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File:                     yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier:          ACVrqdSGTdR3U23VznddWw7uOWj7rcFKmH5K2XzQM5k=
Subject key identifier:   71:FA:31:33:B0:A0:BD:3C:F9:50:1C:36:90:EC:2B:69:EA:AC:AF:D0
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer:       /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial:       01962F74D53D1E539068B4324C7E88951E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number:          13B1
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: jOZRDN_BFHgGfDMvwJ0jkJTVBko.roa (hash: v7urVrLJEvfyeck+EYvOP/ZepjN99wS4T6ZKWFITJzs=)
                          2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: s5UwCP9C1mlXI3KKy9AGJjUlwRdndnpIUVLrygDDaPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:3d:1e:53:90:68:b4:32:4c:7e:88:95:1e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=71fa3133b0a0bd3cf9501c3690ec2b69eaacafd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:d1:e6:48:53:88:67:9c:1c:2e:5b:27:0d:
                    91:82:2a:e8:b8:06:8b:10:54:39:4e:eb:e3:cb:2a:
                    72:fa:4d:a7:a2:73:a5:9c:05:92:36:16:d0:81:1e:
                    87:3b:64:3a:af:b4:a0:fb:c3:54:cc:0c:ce:c8:91:
                    93:82:f3:83:a5:5b:56:b2:63:a7:0e:27:48:d2:d1:
                    ae:8e:b5:b5:4a:89:7b:ae:f6:92:6b:07:a7:c0:f5:
                    51:e6:23:9a:53:6b:89:a0:6d:09:3d:74:4d:fd:31:
                    c1:c6:35:78:fb:8e:8f:f8:eb:3c:52:5f:21:27:c1:
                    93:04:45:67:82:75:bb:a3:d8:4b:bb:e1:39:b2:5f:
                    94:82:18:f7:45:88:70:8e:b4:e7:ae:87:7d:1c:4b:
                    6b:83:90:41:88:e3:d1:7e:ba:2a:85:a6:eb:2f:06:
                    c1:06:10:24:4c:ab:d7:b2:6c:24:8a:c9:24:2c:6a:
                    37:0b:5e:7c:8c:e9:c1:41:c8:73:36:72:ec:d5:a6:
                    cc:65:ee:12:0d:2e:53:da:52:42:28:74:48:2e:2c:
                    e6:aa:4d:4b:39:30:a3:49:50:bf:c3:08:4a:3b:e4:
                    45:20:d4:69:bb:66:fc:54:2d:44:18:8d:a8:4b:84:
                    c5:26:57:09:f2:5a:ab:e5:6b:ce:b2:4d:1b:75:f7:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FA:31:33:B0:A0:BD:3C:F9:50:1C:36:90:EC:2B:69:EA:AC:AF:D0
            X509v3 Authority Key Identifier:
                keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5a:01:98:7d:c2:b8:95:cd:cb:74:a7:42:60:9f:1d:33:95:
         4d:02:25:31:01:2b:b5:0d:8b:0a:0f:0d:b9:b1:44:6a:b4:5f:
         f5:e0:65:f8:cf:1c:28:2f:c2:c0:72:e6:f0:d8:97:14:6f:c9:
         b1:82:1b:ab:2e:0f:c5:93:2c:30:ec:e4:aa:4d:b0:17:20:b9:
         4f:36:6e:a0:45:37:6b:92:d7:91:f1:6a:c8:09:71:5e:12:af:
         c5:89:80:45:e4:a2:4e:82:67:70:bf:6e:04:9a:4d:0a:39:4f:
         99:d0:e3:75:0f:fd:70:75:1c:3b:1c:e9:59:30:f3:e3:e1:c9:
         3d:ab:3c:3e:9d:d8:9f:6d:09:86:13:a2:b5:3a:95:c9:46:3d:
         ee:b3:64:01:b7:c7:ca:90:8c:9e:21:9d:23:24:08:37:e2:56:
         f6:86:1c:f7:2f:24:4d:27:80:d0:18:ba:7a:f7:bc:93:e1:5d:
         87:20:cf:bd:4b:81:f7:b5:62:fb:21:2c:d0:3f:87:25:cc:e6:
         39:b9:42:d4:fe:3f:f8:01:13:74:0d:65:ff:16:77:d0:fd:5f:
         02:21:df:fc:a3:f6:b1:8d:cb:b3:48:09:92:c2:24:ab:52:d9:
         7d:d1:32:d4:f7:29:92:cf:b6:b2:33:3f:34:a9:a8:50:44:8b:
         6b:3a:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----