Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File:                     jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier:          zQY4KUia/OlInPtKuApYVgF4iath3aN95kRtpVvIrwk=
Subject key identifier:   5A:1C:7C:84:1D:68:28:B5:1B:FD:64:9A:6A:96:C9:CC:E9:F1:39:20
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer:       /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial:       01962E2B0D2466656573A44ECEF3FF9D5B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number:          11AD
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
                          2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: g0WiYN/ODjJM6b+qmY1Gl0aXhcBFMaEgHWVNGMTlSSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:24:66:65:65:73:a4:4e:ce:f3:ff:9d:5b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=5a1c7c841d6828b51bfd649a6a96c9cce9f13920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d8:1e:65:d0:bf:9c:cc:b9:25:f5:31:99:af:
                    e1:4e:5f:0a:32:43:5d:be:c3:62:7b:eb:8f:55:ad:
                    fc:4b:7e:3f:dd:5c:37:7f:0b:b5:55:11:af:45:02:
                    46:81:23:99:14:ea:b1:52:11:4d:f1:0d:1a:6c:b0:
                    cf:7b:36:ee:e8:28:44:3e:9d:75:31:fc:93:65:f6:
                    9a:d3:85:52:94:ca:3c:12:eb:48:d4:9b:08:4d:cc:
                    f8:c4:64:c9:6c:b2:9f:0b:b4:b3:7a:e0:cb:33:cd:
                    71:eb:22:3d:e9:18:62:46:8a:1f:cf:45:30:06:8d:
                    09:c7:32:ea:07:66:38:b5:92:87:77:26:dd:c1:9d:
                    aa:d7:39:f9:1f:2d:45:61:d0:0a:a4:58:be:34:d3:
                    1e:02:01:f3:09:26:37:70:24:28:55:4e:c3:b9:77:
                    1d:8f:2a:29:57:c0:08:3c:f3:7b:6a:a2:67:55:28:
                    5b:a7:08:9d:ba:11:c7:02:4d:de:02:ee:f5:fc:5c:
                    e6:6d:81:e5:e0:be:75:5b:4e:15:97:67:ef:7c:8b:
                    e8:5f:86:a9:af:7a:c5:eb:c5:b5:d7:04:d0:0c:d3:
                    32:f7:7f:ac:a0:07:dd:93:f9:b4:95:65:b2:ec:c7:
                    33:8e:f6:d4:ca:eb:35:a7:ee:fd:43:44:17:50:b6:
                    c9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:7C:84:1D:68:28:B5:1B:FD:64:9A:6A:96:C9:CC:E9:F1:39:20
            X509v3 Authority Key Identifier:
                keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:8d:34:19:7c:49:0c:c7:04:33:22:2b:8d:6a:f0:8c:3a:7b:
         92:9d:32:ab:af:5d:cc:04:6d:7b:55:4f:3d:e6:bf:0a:42:60:
         3c:52:41:0f:8f:34:73:39:db:b1:db:df:72:2b:ed:10:46:c5:
         e1:a0:d8:58:87:cd:16:f5:e4:6c:cb:57:06:07:f7:75:b4:72:
         fe:c3:02:28:54:53:8d:8c:95:06:70:f0:2f:12:cd:ac:af:28:
         61:ee:cc:ec:df:d4:a0:e9:0e:ca:52:e8:38:dd:0d:b3:0d:77:
         cd:0e:5e:bd:45:97:c3:f3:8f:88:dd:e4:cb:41:96:da:d0:50:
         4e:49:10:ab:f7:8a:17:00:da:07:d0:a6:45:b2:01:43:2b:5c:
         96:de:ae:87:1a:41:d0:95:cb:3e:37:99:4c:07:cb:f0:27:d2:
         5a:e6:ab:36:bb:dc:c2:4d:50:10:05:01:6c:5d:d0:a9:2a:2e:
         44:55:d9:46:4b:8f:73:c7:0d:1e:41:d7:b8:db:c1:95:a3:1d:
         5e:fc:74:ab:11:a8:77:8f:41:3e:0f:92:c8:c0:a4:8e:2b:66:
         ff:e5:89:d4:ca:0a:c6:45:5d:8e:83:14:27:4b:80:a9:6a:e2:
         81:8e:a6:df:d3:03:03:a0:43:2d:2b:65:fd:d7:52:00:90:f4:
         2e:45:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----