Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
File:                     YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft (raw, json)
Hash identifier:          cgGUoHtXAL8zlEg0IFGabAFWrbjpk05JBvmJd70w0XI=
Subject key identifier:   2D:AD:25:DF:E8:4B:A3:8B:B3:FF:56:4E:03:5E:01:86:85:80:91:69
Authority key identifier: 61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF
Certificate issuer:       /CN=61b824b85aba7bc3512b1214b385de570fb294bf
Certificate serial:       01962FAB920C648C80B1BEEC1092ECB13E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft
Manifest number:          0AE6
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl (hash: DBOlbGPjqdglQogmG9JhuMstXHHDgWnsWi2TOq1PUzY=)
                          2: b9-Xe57-P3gr_wKG9Fdk9x-8_jI.roa (hash: 6yS6JDMkNFqPC6IhCp7cvJnugVcw1WsjLczS6bmB5js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:0c:64:8c:80:b1:be:ec:10:92:ec:b1:3e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b824b85aba7bc3512b1214b385de570fb294bf
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=2dad25dfe84ba38bb3ff564e035e018685809169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:1c:71:e0:a5:9b:c8:20:e0:32:62:83:65:
                    e4:5f:ce:60:1e:d3:58:fa:76:4d:51:94:27:e4:56:
                    5c:cd:2e:c3:02:8d:38:6d:0c:7b:9d:ea:d7:d6:22:
                    3e:86:2f:73:aa:12:f6:e4:4b:ce:13:a5:a6:e0:0c:
                    3c:c7:6e:fe:83:81:64:df:eb:eb:93:1c:1b:71:bc:
                    15:29:eb:84:bd:9a:2d:42:12:91:2c:be:7f:02:8b:
                    65:51:70:e0:7a:ba:36:64:ff:ac:35:69:fe:52:01:
                    91:cb:97:51:24:2c:68:fb:01:76:11:04:4f:55:b5:
                    19:b4:21:bf:80:53:e3:dc:1b:bc:5e:35:fd:1b:21:
                    2d:26:ce:c1:13:5e:01:73:54:c5:a5:9e:0b:9f:5d:
                    d7:a6:83:11:ad:f0:31:b5:83:18:19:49:32:96:1f:
                    48:e7:43:63:46:33:11:fa:71:63:66:72:cf:6d:9a:
                    35:36:53:b0:d3:5e:1b:52:d4:d1:01:f7:7c:6c:6d:
                    eb:0b:3c:9c:c1:ba:59:01:1e:a5:d3:cf:42:61:6e:
                    35:60:8c:07:b6:2e:08:4f:26:4b:12:c1:aa:49:7a:
                    2a:66:d1:65:a0:dc:73:0b:2b:de:27:a9:26:a8:a8:
                    19:e9:7e:77:eb:8b:2b:6b:52:b2:95:5c:39:fc:47:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:25:DF:E8:4B:A3:8B:B3:FF:56:4E:03:5E:01:86:85:80:91:69
            X509v3 Authority Key Identifier:
                keyid:61:B8:24:B8:5A:BA:7B:C3:51:2B:12:14:B3:85:DE:57:0F:B2:94:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbgkuFq6e8NRKxIUs4XeVw-ylL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c0e7a1-06f5-4ca0-8210-ea6ed29cab5e/1/YbgkuFq6e8NRKxIUs4XeVw-ylL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:1e:70:4a:c9:f7:32:d3:7b:73:68:8a:7e:04:17:b0:89:
         3b:94:fb:5e:b9:f0:f3:8e:93:51:c9:c7:ce:1d:80:6b:4e:34:
         d9:f0:2c:22:bc:a0:0c:0c:b7:7f:bb:a9:03:62:34:d4:19:bb:
         a3:4f:3f:96:07:67:37:8c:17:a7:08:15:74:af:b3:97:7e:27:
         0b:bb:30:9e:e0:4e:80:47:39:a9:7f:97:19:23:ee:c8:29:b8:
         27:79:ed:d7:ca:e6:77:cb:04:d9:be:58:2c:5a:11:29:5a:39:
         43:e8:7a:66:89:93:0d:10:1e:ff:10:5a:7e:11:0f:f9:f6:3a:
         cf:fb:24:db:2b:47:b8:2d:b7:09:bc:59:b9:88:a8:0e:91:8c:
         ec:fd:65:e7:2f:60:db:63:60:8b:5e:64:9f:90:e3:1c:8e:6b:
         49:04:51:69:26:b2:37:ca:64:a1:26:cb:9c:4f:d7:52:12:e4:
         60:5b:65:ee:06:a0:c2:2c:7f:48:5d:28:fb:c0:5b:1d:8d:3c:
         8e:ca:8b:c6:de:c6:e5:16:a4:a7:b6:d0:7b:87:94:7a:f7:55:
         08:b3:bc:31:0a:12:9b:39:eb:40:af:5f:7c:ec:5c:b2:fe:f5:
         dc:f3:30:a1:86:f8:58:87:9d:c7:02:4e:9c:29:80:93:7d:52:
         c4:bb:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----