Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File:                     yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier:          JOe6FGgt58eT7SFIdm3TyubzdUSyTGNc4uCzf5ItLQU=
Subject key identifier:   AC:E5:64:E3:D6:BC:35:9C:AB:B1:02:9F:93:F3:7F:5B:DE:61:15:BF
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer:       /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial:       01962F3DE3BD11B87694C0C2FAE6383F0A56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number:          0C1F
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: nc-Ut0N4YEzlSxLCriwNW3L5bJY.roa (hash: CpEDv7qT3u78wfAAABUYzMXZLOCk+u5BsQilcshLjO0=)
                          2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: fv9VXLMlLePwNqdDX0c/prFxwX5fZU8tMpnONszUYzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e3:bd:11:b8:76:94:c0:c2:fa:e6:38:3f:0a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=ace564e3d6bc359cabb1029f93f37f5bde6115bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:de:4d:fe:a6:15:91:00:64:9c:be:76:5f:
                    07:d1:20:ce:42:82:33:ec:6f:6a:1d:27:b5:a7:51:
                    70:26:23:53:48:76:ee:d8:ff:c2:43:d4:94:dc:76:
                    da:d8:33:46:64:83:2f:cd:75:06:8e:48:54:d8:a9:
                    cc:c8:fc:cf:c3:51:3a:ae:16:0a:17:ce:9a:be:b4:
                    80:ff:57:12:a8:70:75:b2:51:c7:5f:c3:c9:86:aa:
                    70:8b:8b:9b:e9:f4:cb:5c:ff:33:23:68:c1:d8:3e:
                    93:7e:f6:aa:89:d0:19:83:a9:61:23:f5:ea:f1:fa:
                    3c:65:0f:d8:70:2a:8c:27:14:f2:01:2c:00:34:d1:
                    2e:42:1c:53:a8:86:45:af:3a:79:b1:35:4d:85:88:
                    9e:fb:58:5e:d5:08:72:33:aa:cb:83:35:f4:da:83:
                    14:d3:21:8e:b1:88:62:a5:97:e3:e6:85:49:6f:ef:
                    54:bf:c1:54:9c:56:bb:79:fa:42:6e:69:18:fe:92:
                    c5:ff:35:1c:cf:cd:0c:21:aa:c3:08:20:f2:b8:95:
                    c6:83:60:ef:16:c1:bd:dc:81:e5:49:c5:cf:bb:98:
                    e0:4b:36:88:0a:2c:52:29:5d:74:3a:4a:12:70:59:
                    6c:53:60:89:1f:c9:c3:44:a9:3d:a3:af:0b:2b:b4:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E5:64:E3:D6:BC:35:9C:AB:B1:02:9F:93:F3:7F:5B:DE:61:15:BF
            X509v3 Authority Key Identifier:
                keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8f:d6:e0:a4:3d:a6:f7:7b:6a:6e:13:d2:e9:f5:99:34:f5:
         ff:39:e0:7c:3a:5f:5e:3b:e6:ce:7b:e7:04:bf:79:42:81:ed:
         56:c5:cf:df:0b:cc:50:d5:46:82:69:6a:6e:c3:a0:de:6d:77:
         48:5c:57:e1:16:fa:a3:f1:98:b8:2e:d6:3a:5b:3d:88:45:be:
         cb:34:36:63:8d:33:e1:49:f1:79:aa:4c:d7:82:01:e6:f8:21:
         bb:f5:39:e6:31:da:8d:9a:35:a7:2b:c7:d5:2a:51:a1:ae:a5:
         61:dc:97:0a:e4:53:89:74:dd:39:99:93:e7:10:2e:81:65:ef:
         29:52:e3:03:c0:3d:cd:4e:f0:3f:67:b3:d0:8c:6b:2f:ab:dc:
         31:7e:92:dc:87:96:a3:e6:00:ef:e3:2b:f5:d3:bc:0e:d9:53:
         a4:b7:34:3c:4c:96:92:11:b7:68:9a:c6:44:42:cb:59:a4:59:
         82:6f:c2:4a:d8:52:c9:ac:61:7a:34:69:7f:c9:9a:ac:ec:09:
         de:9c:fa:5f:69:5a:1b:2d:c9:12:fb:54:c8:4c:f9:6a:9f:0b:
         ac:60:49:8b:55:98:a0:a9:ed:4e:7b:1d:8a:c5:24:42:bc:8b:
         cd:f7:6a:b5:b0:6f:4b:38:2c:e7:38:17:84:9f:16:57:6a:99:
         e4:d4:87:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----