Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File:                     RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier:          AcDY6vKypxL0mkP74f+Oo1k189IHl1wUufZwxugbPik=
Subject key identifier:   5F:3A:AD:E9:6B:2A:96:45:47:A2:3A:36:DB:F9:DC:DA:DC:23:B0:32
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer:       /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial:       01962F06D5C2BE79B06B1863FD6136889108
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: JEpAKI0ruCDqdzka1pT5x+s6BZlEsKg6PqcLEpHgr8g=)
                          2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d5:c2:be:79:b0:6b:18:63:fd:61:36:88:91:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=5f3aade96b2a964547a23a36dbf9dcdadc23b032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:74:90:66:0c:cc:b8:9f:7d:42:0d:0d:1f:
                    d0:53:1e:fe:b8:ab:c5:b9:ca:52:c8:c1:57:7d:f1:
                    83:3c:13:a7:28:f7:bd:1f:00:13:79:70:59:35:fc:
                    35:56:c3:c3:81:b3:4f:0c:5c:91:ef:c7:05:73:1e:
                    64:da:d9:8f:a1:13:ca:5a:49:70:90:16:6c:d8:f5:
                    13:49:00:72:bc:eb:12:17:3c:2e:4a:bf:1e:8d:e2:
                    55:61:17:50:6a:f8:97:db:62:cc:95:7d:28:8a:09:
                    69:dd:c0:56:c3:b4:72:0d:d4:db:c0:af:aa:33:a7:
                    f3:3b:2b:d7:a0:2c:d2:89:63:dc:13:a7:f4:6a:3e:
                    ee:76:db:5d:1c:72:5f:ea:59:c3:d5:d0:6b:02:f3:
                    b7:ea:54:e1:05:f1:78:64:4d:91:f6:82:81:92:08:
                    ca:bf:1c:82:af:17:70:e9:13:b7:a3:61:1a:55:e7:
                    9f:96:4a:05:ff:c5:07:dd:4b:a7:74:50:98:10:f4:
                    b7:db:56:ce:a8:03:bd:57:73:26:de:a8:2c:28:28:
                    6e:0f:2b:c1:6d:fb:b8:86:73:56:37:e7:bd:b0:99:
                    35:6e:68:fe:bb:81:a2:4b:e8:f9:94:79:a7:d1:ab:
                    42:b7:ad:31:a1:18:5f:46:99:20:23:a6:26:2f:c3:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3A:AD:E9:6B:2A:96:45:47:A2:3A:36:DB:F9:DC:DA:DC:23:B0:32
            X509v3 Authority Key Identifier:
                keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5e:13:54:68:a5:6f:cb:b5:08:40:d1:50:3b:9d:29:4a:25:
         94:d9:42:cd:b4:de:db:27:e6:d2:e7:cc:cd:a4:3f:17:3c:50:
         bf:23:89:e8:b9:94:c0:e9:2f:af:ee:d4:93:0d:ed:7e:10:29:
         73:28:b3:73:f0:3a:29:c4:29:51:6a:5c:1a:2d:b1:3e:2f:a9:
         79:5c:f2:e4:6f:59:28:22:76:7d:5a:3a:56:df:70:b4:8c:5f:
         70:02:b2:9f:10:fe:b6:7d:32:dc:7f:2c:91:59:c0:ab:7c:84:
         c1:25:83:59:de:43:58:42:b1:23:4d:a5:5f:35:0a:c2:3d:97:
         1a:1d:5f:94:86:b1:cb:69:80:48:d4:09:a3:93:63:69:29:02:
         80:4f:cd:e1:bb:f4:4d:a8:94:d1:9a:c4:5f:a2:81:69:37:b7:
         ad:0a:8d:4b:3c:0f:40:41:57:c1:ad:47:75:ab:df:17:0d:62:
         4c:46:b1:3d:2b:4a:cd:b8:bb:66:b7:42:26:52:fb:c9:63:38:
         a6:e0:e7:66:1c:d1:3a:1c:38:af:84:48:b4:3e:e5:ec:c0:e1:
         5b:ce:2a:9c:42:ad:df:53:f9:e5:f3:2d:c7:61:0d:e9:38:03:
         d1:ff:d6:9f:da:66:38:73:67:67:aa:95:36:d8:78:87:d6:b8:
         3a:b5:5e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----