Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
File:                     RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft (raw, json)
Hash identifier:          a10kpvUgaDN+DEWuZ3QQ1YmiyHvLRFzVuiXbAlAHF3U=
Subject key identifier:   4F:2E:AE:68:05:E3:5F:D6:6E:7E:D8:6C:02:3B:C8:DB:09:9C:2F:CB
Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0
Certificate issuer:       /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
Certificate serial:       01962F0657B6F0ED7C4FA014E3009C079F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft
Manifest number:          0C1C
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl (hash: TfgLW51FmNMC3OCMyWznftC2fZxDFuyf3vKBn82TGZE=)
                          2: UQFRRC8sXbk0r4Q6fEr2IYKv7N4.roa (hash: 7PfHdaN/WSlX46HPIjWpG4hQQPCzHjIU2IYqvwhWpeo=)
                          3: mycUbYI1PYCeJUOytd7OByddKj4.roa (hash: PDtk9wU6hfm72jtlMfw1RCeJrC6rGpFRRw/nfzu+rDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:57:b6:f0:ed:7c:4f:a0:14:e3:00:9c:07:9f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=4f2eae6805e35fd66e7ed86c023bc8db099c2fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:3a:dc:15:40:b8:01:50:ec:db:42:88:2d:
                    d9:de:43:31:b2:d0:fb:84:20:84:f5:e3:09:97:7d:
                    3e:93:fd:8f:f2:14:51:23:9a:f0:3e:38:0e:01:58:
                    bf:b7:ad:c4:bc:a6:90:03:5a:54:b7:08:8e:2f:89:
                    86:6f:49:76:06:63:b5:8d:e7:1f:21:52:6a:a5:04:
                    5a:92:a2:4b:4f:8e:39:c2:97:cf:27:56:dd:d4:56:
                    d7:cd:55:1b:00:a0:eb:d6:71:7e:82:49:b1:ab:5e:
                    44:fd:7a:82:05:b1:c3:7e:fd:b8:d5:3f:95:2e:ed:
                    40:1e:2f:78:ee:98:ae:1c:21:f7:00:13:6e:ec:84:
                    d9:4c:3e:18:23:8e:23:7e:e9:64:71:c6:9a:91:0d:
                    6c:b2:e3:a7:0a:ed:c7:5c:9b:d4:72:78:10:33:ab:
                    a8:4b:58:c3:2a:7a:11:6c:f0:97:87:24:28:2c:3b:
                    12:68:d9:62:27:49:cc:88:5a:c7:29:f8:ce:51:19:
                    af:18:30:89:1c:7f:ee:9a:b0:35:75:4d:b2:83:a0:
                    b0:3a:da:aa:37:16:8f:95:1f:c5:61:54:94:80:57:
                    12:c2:48:58:4d:8d:73:cf:2a:63:d7:78:fc:49:82:
                    76:73:85:52:77:69:c5:5d:f6:c7:e3:f8:cf:1a:7e:
                    02:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:AE:68:05:E3:5F:D6:6E:7E:D8:6C:02:3B:C8:DB:09:9C:2F:CB
            X509v3 Authority Key Identifier:
                keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:cb:a5:4b:55:55:54:54:e7:79:be:4b:c8:5d:75:72:e3:
         ec:13:4e:d0:1b:f0:7b:4d:c8:26:b2:76:38:9f:a5:43:ac:41:
         76:29:b8:ae:3d:33:d8:c6:fa:c7:4b:9f:ed:b3:bf:6b:f0:bd:
         d2:5a:5c:f7:1d:4a:67:f4:29:b9:66:16:46:c0:2c:1f:07:05:
         e3:95:17:07:41:17:02:c1:e5:46:cf:d8:1a:e5:66:ec:1c:e6:
         84:8d:75:59:d9:68:48:20:ac:90:e9:ab:97:2b:31:67:5a:34:
         33:3f:8f:15:97:ec:9c:be:24:e4:4f:1e:9b:d4:1f:ab:6c:44:
         44:9d:54:a1:a7:17:ec:41:3b:c2:19:30:cc:0c:c3:fb:99:ef:
         34:0c:f6:cc:bb:40:f6:db:62:35:bd:9d:59:d1:23:5b:b9:86:
         e9:1c:f2:b2:cf:d7:a5:88:d7:b4:2f:f0:29:9f:20:3f:50:73:
         cd:98:ca:c6:4c:84:3b:99:fa:e5:5e:f4:5e:db:e4:58:3b:02:
         76:93:b6:c5:1c:b2:c7:b0:32:24:b7:46:45:72:e7:f1:e5:b4:
         09:d4:71:55:bc:3e:da:b3:8c:a5:ad:b4:c4:0d:06:04:a7:5f:
         32:b0:f6:8a:57:30:e2:f3:64:9a:ce:b5:6e:65:13:08:71:63:
         2a:cc:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----