Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
File:                     y1eZ2NBfSgIAEdyoAxdivqASJV0.mft (raw, json)
Hash identifier:          X/ZbHQWir27LSpC7NPqJx76BKRuZIrKxOsTn9thhMRo=
Subject key identifier:   52:45:26:53:51:CF:D7:6C:96:C4:4F:47:41:05:85:A5:05:2D:13:26
Authority key identifier: CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D
Certificate issuer:       /CN=cb5799d8d05f4a020011dca8031762bea012255d
Certificate serial:       01962F069E2B5B54111C841A2E8EB743D865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft
Manifest number:          0A56
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: 1FhxmjQY59YAJAMVhG_T6zF5XSA.roa (hash: LhK5E0yQbIvlUPrgw8D5iXHjua3tvso8AKzY9lfo4J0=)
                          2: RNQvE2oEKPo_zVElIo7XyWY9pN4.roa (hash: cHPYWyTjBN1Ib/KsumMhkuYgXusEijJa/SgckNxXiqc=)
                          3: y1eZ2NBfSgIAEdyoAxdivqASJV0.crl (hash: XnCLhTiu4E9yLEX5RwM8NyhVCHfCROPBURhudBWt/pY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:2b:5b:54:11:1c:84:1a:2e:8e:b7:43:d8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5799d8d05f4a020011dca8031762bea012255d
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=5245265351cfd76c96c44f47410585a5052d1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:43:eb:c3:7e:e3:4e:26:cf:21:87:79:18:
                    56:e3:3f:35:5d:d7:e0:45:be:fc:58:ee:3d:52:f7:
                    e2:7f:6b:db:b4:1d:b8:61:f9:4b:07:a4:e9:30:e5:
                    ff:96:c8:74:ec:b8:ab:a2:4e:bb:2e:34:f1:2e:da:
                    59:80:73:bb:d6:e9:47:5f:13:61:57:d8:e3:42:bf:
                    1a:a1:df:27:63:d9:e2:e6:e7:9e:74:84:bb:09:47:
                    cd:fe:e7:f4:d0:13:52:9d:2b:ed:e4:04:f4:9c:94:
                    81:5d:13:a5:f0:18:76:72:9e:6d:d7:3e:79:ea:5b:
                    22:54:2c:e1:cb:7d:f1:b3:ec:9b:27:a2:1b:5c:35:
                    8f:30:5d:2b:26:6e:e7:f5:ed:97:f5:2b:2b:85:89:
                    13:d1:69:8b:b4:99:5c:3a:85:8a:8a:5a:48:87:c9:
                    b4:38:c1:0b:f3:e5:15:8b:5d:6d:c2:cd:8e:5d:4e:
                    1f:07:6c:9a:d9:d8:2e:47:a3:36:33:23:83:ae:70:
                    f9:ac:70:fe:fd:c4:9c:0a:db:c8:c3:00:c7:a2:8b:
                    7a:95:6e:1f:5c:75:0c:d5:7e:8c:2e:d0:10:22:2a:
                    47:8c:c4:9d:61:d2:89:1f:5e:9b:6e:0f:af:50:67:
                    c8:d1:e1:30:09:e7:86:fc:9c:c5:ca:3d:43:f1:6c:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:45:26:53:51:CF:D7:6C:96:C4:4F:47:41:05:85:A5:05:2D:13:26
            X509v3 Authority Key Identifier:
                keyid:CB:57:99:D8:D0:5F:4A:02:00:11:DC:A8:03:17:62:BE:A0:12:25:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1eZ2NBfSgIAEdyoAxdivqASJV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c78020-fa32-4988-9e14-5c602fde963b/1/y1eZ2NBfSgIAEdyoAxdivqASJV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:3f:46:37:38:2e:1e:54:d6:6a:9a:3c:13:47:d4:ed:d9:
         77:3c:48:4b:ce:40:1a:f8:4c:5b:7c:c9:91:5b:44:88:13:7a:
         4a:32:dd:20:89:21:2b:7f:6c:ae:73:ff:6b:74:42:a2:28:96:
         cb:a2:1d:6a:e2:f2:af:25:43:69:8b:21:56:9c:c7:19:62:4d:
         b7:c4:7c:d0:0e:3d:e1:6f:6d:41:98:1a:bf:c5:51:7d:9b:38:
         6f:c6:fa:c2:ad:46:9b:e5:de:50:54:bf:ca:cb:3e:93:60:c7:
         f6:c6:ce:03:6f:74:db:07:b5:0f:b7:1a:75:30:2c:fb:6f:be:
         23:e5:5f:ad:e1:44:0c:b7:1c:fa:6e:9e:99:4d:60:66:be:31:
         92:31:66:04:d6:8a:f7:36:1e:27:1a:e0:ac:2f:b4:a9:ae:d1:
         b3:ed:fa:9d:8b:d8:f7:83:dc:f2:17:5c:01:6f:1a:b8:a1:de:
         20:e2:1e:49:ef:54:c6:1b:71:66:29:8d:cd:7e:fe:46:84:59:
         fe:3d:17:73:11:88:fc:f4:56:8f:b1:bd:dd:73:7b:29:c1:e7:
         1b:fc:0a:88:fc:16:a0:0e:07:21:7d:4e:6c:03:7f:86:e6:43:
         39:d1:9d:1b:d9:d0:31:5d:2c:50:2a:b1:af:5e:c9:6c:e8:28:
         ff:f0:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----