Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File:                     YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier:          lhGQbnQd6rg1mPzbaohsDi5WEu93IUa99rADsLCLeWw=
Subject key identifier:   9F:38:3C:CF:90:04:B2:3B:8C:44:3B:73:FB:2D:1B:61:78:41:C8:C9
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer:       /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial:       01962ECF8FDE087F33DA5E9CFF4BFB73BC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: B254PCc3PRUmXT9tMIpAl8XNBm8.roa (hash: DpvsWvC8Sgiw0PT2yPQOf/12fRPoJTcquOU/HLYaUhc=)
                          2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: mtnY62LhK9/QxSlCcrkdXzKirEpdV2hHPnEaasLLDDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:de:08:7f:33:da:5e:9c:ff:4b:fb:73:bc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=9f383ccf9004b23b8c443b73fb2d1b617841c8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1d:a7:fc:d6:25:71:43:d1:3f:37:55:5f:a2:
                    3d:f8:7c:2d:86:3c:56:88:1e:61:a8:5e:e9:54:3b:
                    94:47:b6:0a:c6:56:e9:5a:0b:2d:aa:26:19:ea:5d:
                    91:6d:64:a4:df:83:48:21:aa:61:b2:74:d1:39:fb:
                    b9:cd:df:6b:3b:59:03:0c:6f:05:01:2d:aa:07:64:
                    5f:9f:3c:e9:07:28:b4:06:a3:08:2a:fe:4f:eb:47:
                    dc:3b:cb:d5:41:13:34:f6:79:9d:3d:8a:84:bc:89:
                    79:e4:78:2a:53:06:c8:1e:d6:cb:73:a8:f7:3e:d6:
                    04:24:a5:72:0d:3f:e1:98:68:52:70:2a:44:67:7c:
                    6e:3c:35:f3:00:05:84:77:d4:b9:2b:7c:33:9b:a7:
                    c2:42:13:6c:51:60:85:91:11:f3:37:c3:81:84:a4:
                    a8:a8:58:a4:12:b6:aa:66:7f:a8:99:55:c4:61:c4:
                    a2:de:c9:bf:a7:33:00:d4:ed:52:0f:2f:63:d2:ae:
                    1e:b9:88:76:c7:25:fd:bd:c5:bc:58:fc:95:6e:58:
                    98:a9:33:2e:27:58:ac:45:66:db:ce:f6:6b:a0:6d:
                    7d:8e:59:a3:61:e2:2b:d4:9e:ff:e2:28:6e:21:b2:
                    62:5c:ad:ed:d9:a6:58:b9:53:82:61:ea:93:6a:ff:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:38:3C:CF:90:04:B2:3B:8C:44:3B:73:FB:2D:1B:61:78:41:C8:C9
            X509v3 Authority Key Identifier:
                keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:12:ac:75:e8:9a:eb:2b:ff:67:fd:f1:5e:92:f1:c7:24:e7:
         89:dd:68:53:9c:8b:f0:19:ac:9c:f3:da:56:41:be:37:45:4a:
         6b:bb:30:3b:e6:48:13:fc:c1:1f:88:4e:db:33:17:a9:0f:89:
         55:b3:7e:23:9a:13:66:a6:ae:84:a3:4d:5d:15:00:bb:6e:25:
         98:bb:73:58:4d:d5:0a:e4:e9:ab:4b:ca:f5:af:0a:db:34:ea:
         24:0a:c4:e4:82:7d:ff:2d:4c:1b:80:91:6a:70:46:9c:3a:3e:
         9c:c1:1d:5a:b4:39:ea:ce:70:74:d2:98:af:31:11:05:89:0c:
         66:0a:16:e1:1d:c7:c5:4a:a1:ef:94:ab:d5:45:b3:1a:ce:a2:
         8e:e1:0e:0d:e1:23:cd:e4:9e:c5:c0:0e:3c:9c:c3:00:ff:22:
         3a:5c:86:15:63:7a:f4:f7:b3:68:0a:e0:11:bd:4c:c2:f7:98:
         b8:a2:7e:c3:f4:07:a7:25:aa:73:92:47:b7:e8:30:99:00:44:
         14:e9:0d:dd:a7:a3:4a:9e:c7:37:d5:e5:60:a2:08:da:7e:71:
         39:29:af:27:9d:e6:ca:32:bc:18:82:6f:fe:8c:aa:92:c0:32:
         f9:48:c0:1d:fc:c6:c3:99:56:d8:25:d2:1f:0d:76:2a:7d:f0:
         75:69:06:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----