Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File:                     yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier:          61TEBSjwU6MyZVmG+YHJOpoxPBYfsGxqU9EJsJJUkmY=
Subject key identifier:   F7:16:9B:89:49:23:CB:BB:87:3D:9D:68:9D:C7:EF:5B:1F:06:92:A7
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer:       /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial:       01962F07473256C7C4AA4B5564F2D7B6AE6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: fF2XIJTPCrRrtW2Ed7f3XI5YBGE.roa (hash: yAyZKCviC/wjO248iuIwgpoUtsrF9JNp+X9B5Xdnj9A=)
                          2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: ev8x/PE5gn9zEBWLBAhygZk9tRPsK74T27uQQcV1ZoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:47:32:56:c7:c4:aa:4b:55:64:f2:d7:b6:ae:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=f7169b894923cbbb873d9d689dc7ef5b1f0692a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:50:ac:d9:e2:a6:38:b0:61:24:6e:b7:7a:
                    09:36:e5:d9:62:d4:3f:22:1c:c4:38:95:79:5c:78:
                    a6:fc:5d:52:96:ba:97:26:e4:6b:38:81:f6:4c:32:
                    86:7c:7c:4b:c3:7b:12:e7:18:33:9d:3e:01:a4:d9:
                    9a:ed:e2:0a:e7:93:37:c7:f1:39:96:dd:b9:63:c4:
                    ef:f9:67:0d:9b:2d:8e:a9:80:1b:93:4f:86:b0:b9:
                    f0:da:be:2c:fe:18:ae:1d:f6:b9:74:18:db:d4:a8:
                    a0:ea:b2:b4:3a:05:2b:c2:d3:43:1d:a1:b8:08:95:
                    53:1e:f1:78:13:fa:5c:79:05:f1:80:d7:b9:8d:9d:
                    15:3e:0d:e4:b1:2d:03:6f:ab:21:ac:55:26:4c:36:
                    23:e1:ed:f2:0d:5a:b3:ee:8e:80:6e:23:f7:d3:11:
                    49:bc:58:39:95:17:77:c4:f9:70:5f:fe:24:aa:50:
                    78:e2:f6:b5:38:71:83:17:51:21:1b:d6:2d:47:b4:
                    60:99:d1:3d:e1:e6:1c:a7:4b:7c:6a:1a:a0:6c:5c:
                    b3:57:5d:dd:af:de:05:16:f9:b6:c8:f3:99:a3:96:
                    85:a7:d3:ca:c1:27:0e:de:c2:17:bc:3e:4b:36:fd:
                    ea:77:1a:9d:92:30:2f:49:7d:d9:67:c8:51:f9:1d:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:16:9B:89:49:23:CB:BB:87:3D:9D:68:9D:C7:EF:5B:1F:06:92:A7
            X509v3 Authority Key Identifier:
                keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:61:b2:26:21:ef:2d:85:60:ac:c9:ec:42:51:f0:70:99:0f:
         ec:ac:89:76:26:9d:ee:22:de:53:a7:e6:6b:c4:1c:2b:24:05:
         30:0a:0d:9a:5d:c0:ec:8d:c0:bc:b7:38:12:ef:62:71:f2:a0:
         3f:31:61:2f:ac:09:68:2e:dc:35:6b:ef:24:f7:65:b7:70:bf:
         ae:20:66:e2:2a:fa:8e:69:53:88:47:e4:2b:5a:4f:70:e8:43:
         47:c2:8c:b3:e6:2e:47:6e:aa:3d:f8:92:7d:32:37:7a:de:6c:
         b8:76:b2:23:96:b7:2f:85:db:c3:12:07:ec:e3:3a:18:80:fa:
         a5:78:0c:52:0c:6c:46:43:1f:a5:27:16:be:32:76:ba:75:97:
         81:02:93:7f:f5:3f:81:41:94:06:e6:2b:bc:a1:c2:2c:90:05:
         2d:99:26:89:53:bf:73:9f:d4:5b:8d:1f:65:83:ff:00:51:1b:
         7f:cb:83:6b:86:93:7b:1a:94:d6:82:5c:3d:fe:c7:66:98:72:
         b1:37:ab:93:ff:78:03:73:95:79:d1:2c:4d:d2:2f:c1:f0:dd:
         b1:08:53:e9:5f:5c:22:58:aa:4b:d4:15:60:51:e2:16:47:74:
         4e:a4:e4:b4:c9:21:7a:a2:8d:f0:25:7b:38:77:9c:f5:43:39:
         fa:f9:f5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0cyVsfEqktVZPLXtq5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OTgyYjAwZGM2MDAzZGNjNWNmZDdkMjdiNTU5NWQwY2Fj
YTVkYTEwHhcNMjUwNDEzMTIwMjA4WhcNMjUwNDE0MTIwMjA4WjAzMTEwLwYDVQQD
EyhmNzE2OWI4OTQ5MjNjYmJiODczZDlkNjg5ZGM3ZWY1YjFmMDY5MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIVQrNnipjiwYSRut3oJNuXZYtQ/
IhzEOJV5XHim/F1SlrqXJuRrOIH2TDKGfHxLw3sS5xgznT4BpNma7eIK55M3x/E5
lt25Y8Tv+WcNmy2OqYAbk0+GsLnw2r4s/hiuHfa5dBjb1Kig6rK0OgUrwtNDHaG4
CJVTHvF4E/pceQXxgNe5jZ0VPg3ksS0Db6shrFUmTDYj4e3yDVqz7o6AbiP30xFJ
vFg5lRd3xPlwX/4kqlB44va1OHGDF1EhG9YtR7RgmdE94eYcp0t8ahqgbFyzV13d
r94FFvm2yPOZo5aFp9PKwScO3sIXvD5LNv3qdxqdkjAvSX3ZZ8hR+R0zTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcWm4lJI8u7hz2daJ3H71sfBpKnMB8GA1UdIwQY
MBaAFMiYKwDcYAPcxc/X0ntVldDKyl2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTkt
MTY1M2UwZGU0MDUwLzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yMTY4YmEtMWM0Yy00MjA2LTkyOTktMTY1M2UwZGU0MDUw
LzEveUpnckFOeGdBOXpGejlmU2UxV1YwTXJLWGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2GyJiHv
LYVgrMnsQlHwcJkP7KyJdiad7iLeU6fma8QcKyQFMAoNml3A7I3AvLc4Eu9icfKg
PzFhL6wJaC7cNWvvJPdlt3C/riBm4ir6jmlTiEfkK1pPcOhDR8KMs+YuR26qPfiS
fTI3et5suHayI5a3L4XbwxIH7OM6GID6pXgMUgxsRkMfpScWvjJ2unWXgQKTf/U/
gUGUBuYrvKHCLJAFLZkmiVO/c5/UW40fZYP/AFEbf8uDa4aTexqU1oJcPf7HZphy
sTerk/94A3OVedEsTdIvwfDdsQhT6V9cIliqS9QVYFHiFkd0TqTktMkheqKN8CV7
OHec9UM5+vn1Jg==
-----END CERTIFICATE-----