Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
File:                     yp6lFngHtwhbUTEMpg2_K5GYL8c.mft (raw, json)
Hash identifier:          KhPysAiDeX7Jc4K3PqXgSxJQg1u6V5TXvI44e5n35aU=
Subject key identifier:   9E:E9:75:DA:48:E1:0D:8A:56:33:0E:D6:A2:9D:5F:88:48:8B:B1:B9
Authority key identifier: CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7
Certificate issuer:       /CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
Certificate serial:       01962E2AD4147D4FCBAB70BF9D900A760FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft
Manifest number:          09EF
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: xsFDhAZJurVFLNSpvCJf1kS8dwM.roa (hash: wMuwURUbdvicot2CMjliv2z3rDNvHfV1WIAmLSMG/Bo=)
                          2: yp6lFngHtwhbUTEMpg2_K5GYL8c.crl (hash: uAWJTCm3SoZ/5NyRWIuDh9Nv4eWvZo04JgmQmm/CHTA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d4:14:7d:4f:cb:ab:70:bf:9d:90:0a:76:0f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ea5167807b7085b51310ca60dbf2b91982fc7
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=9ee975da48e10d8a56330ed6a29d5f88488bb1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:48:56:f3:4a:ec:4b:b2:30:6c:62:24:c2:
                    89:3d:62:da:21:d2:45:a6:dd:25:27:31:57:5c:a0:
                    96:a0:31:9b:8d:59:d3:fb:31:8c:94:42:bd:52:79:
                    30:5e:d1:63:44:b1:28:a0:4a:55:ed:6b:49:c9:21:
                    23:21:28:84:aa:30:f2:dd:95:3b:7d:a5:f6:bb:44:
                    1a:32:ee:0e:d1:c2:69:77:b5:5d:e9:fb:da:68:27:
                    d3:20:50:d4:6d:19:d5:bc:06:4d:06:c6:f8:df:a8:
                    f3:96:6d:09:c9:20:aa:7b:da:04:dc:86:6b:9e:87:
                    4c:d2:ee:dd:95:04:aa:a3:16:12:d7:46:da:7a:c0:
                    30:0a:50:51:da:09:a8:37:b3:6b:f4:32:cf:74:16:
                    95:1f:cb:49:08:6e:4e:6a:df:05:15:21:ad:6c:f2:
                    48:95:59:55:6a:d1:c0:0f:69:a7:98:0b:f0:21:1b:
                    21:99:28:d8:aa:9d:4b:82:43:bd:52:a3:f8:5e:8d:
                    ec:37:8f:f5:6d:d4:b4:77:e4:ca:8d:f1:bf:b1:53:
                    53:dd:d7:b4:6f:cd:a4:ce:c6:d1:35:6d:9f:65:f2:
                    89:16:bb:07:fa:fb:e2:37:ee:2c:4f:77:72:c0:86:
                    81:60:2c:66:77:26:98:6b:f2:33:dd:d0:24:35:41:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E9:75:DA:48:E1:0D:8A:56:33:0E:D6:A2:9D:5F:88:48:8B:B1:B9
            X509v3 Authority Key Identifier:
                keyid:CA:9E:A5:16:78:07:B7:08:5B:51:31:0C:A6:0D:BF:2B:91:98:2F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp6lFngHtwhbUTEMpg2_K5GYL8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/be2540-48bb-4c66-8b24-2741b36b75de/1/yp6lFngHtwhbUTEMpg2_K5GYL8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:84:b4:ae:11:47:e9:8e:60:93:7c:3c:15:7d:dc:66:a5:b2:
         c0:1d:39:89:24:97:d8:fa:3e:e2:0c:da:a3:12:f0:31:8b:8d:
         7b:b1:a9:a1:92:c8:0d:1e:61:eb:99:f7:2e:09:fe:97:40:45:
         fa:51:3d:13:8b:9e:25:6c:05:a2:33:b4:ab:d8:6d:e9:e4:57:
         8e:5e:12:f0:99:8f:72:a6:10:08:8e:08:f2:2c:2d:b7:5b:27:
         16:a9:a1:8f:24:8c:c1:bd:6a:a6:a1:54:dc:ee:10:e1:fc:01:
         3b:35:c7:3e:45:da:82:91:04:19:2b:7e:14:82:d7:ba:bd:07:
         8d:b3:54:f5:22:46:d7:d4:2d:57:dd:56:fd:a3:85:74:5f:cf:
         4b:f3:de:db:fe:87:04:58:37:5e:3e:a3:c7:e7:d7:04:f2:ff:
         da:a8:28:99:df:7e:1c:18:71:00:c4:74:77:f3:a4:0b:94:50:
         10:a6:c4:67:c9:14:90:70:c4:1c:66:4b:59:f0:41:15:4f:fd:
         2b:b0:78:d5:bc:fa:9e:32:9c:ec:36:05:5d:46:48:db:69:fe:
         eb:54:a7:2d:de:04:89:69:e7:3b:03:d4:73:5f:e3:88:ac:0f:
         e9:63:d9:97:b7:4b:9c:93:ed:ef:69:d8:02:eb:5e:d6:c4:30:
         a8:78:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----