Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
File:                     yp4g0QNLRO916V_ffriIFbb30vg.mft (raw, json)
Hash identifier:          7kWNRTfscmC3Wx2UZYuUC2BRWBUHLezJaCs2N8UZCmY=
Subject key identifier:   75:39:DD:FA:C4:DB:FE:AE:35:23:1D:00:79:C0:66:B7:C7:BC:A3:68
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Certificate issuer:       /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial:       01962FAB8D138E2E2B74E70CC626635A05F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
Manifest number:          0D46
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: KJabg-goYfqIShBpOYNsGhfln78.roa (hash: 5RhSWnJ06JVLJawdnqYDlBh1ZbuwgFFPRLF+/W6LgAk=)
                          2: kwy8KgUICcwuEJop_j-CKqXu_cg.roa (hash: VpzhVsmBR8ZtX+oH6lHXeHMgxo/zL5mzYyLWURLNaRU=)
                          3: yp4g0QNLRO916V_ffriIFbb30vg.crl (hash: 570biu3WkuKTBfvSHUb8JqdCY2bjapU7F/DmDxhzZ3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:13:8e:2e:2b:74:e7:0c:c6:26:63:5a:05:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=7539ddfac4dbfeae35231d0079c066b7c7bca368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:1c:39:ec:09:04:a8:19:56:a3:6f:7d:9e:
                    a4:44:9b:41:e7:2d:69:fb:1e:a5:ef:70:44:f6:0f:
                    77:b6:c6:2a:e2:8b:b1:08:c2:65:c4:24:ce:9c:94:
                    e1:cf:97:65:7a:d0:5c:83:06:f4:5c:f3:b1:c1:16:
                    28:3c:9a:aa:e4:21:b8:8f:9f:fb:86:b7:85:c0:09:
                    dd:85:cf:78:c1:1f:ab:f0:bb:53:7d:12:84:50:5b:
                    82:55:4a:79:8c:5a:64:d1:36:98:1a:1d:c5:f8:2a:
                    df:ea:27:09:fe:cc:36:23:05:c5:e0:8f:dd:df:77:
                    d5:06:fb:0d:0c:a4:0b:99:4b:e6:ff:49:62:38:03:
                    33:fe:97:1f:13:47:20:aa:fb:99:3d:31:c5:1e:fa:
                    bf:6e:e4:b6:fe:5a:63:5f:6c:bd:fc:ba:6d:fa:76:
                    64:3b:b4:5c:6b:a4:cf:df:be:da:48:9d:c2:0f:f6:
                    21:88:5e:97:1d:06:65:df:ff:ce:a3:0e:39:26:0c:
                    45:45:bd:f4:64:e5:03:5c:20:08:b7:07:e5:40:69:
                    22:00:04:fe:d7:24:46:ac:2a:e2:88:b5:81:17:4c:
                    ff:97:52:13:f6:f5:52:1e:fc:d6:5e:1b:f7:7b:7e:
                    95:b5:70:d2:31:7c:41:cd:6b:b3:eb:8e:07:22:a7:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:39:DD:FA:C4:DB:FE:AE:35:23:1D:00:79:C0:66:B7:C7:BC:A3:68
            X509v3 Authority Key Identifier:
                keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:12:0d:79:f4:79:40:19:94:94:dd:81:cd:6b:54:b6:85:f8:
         f3:ef:65:2a:eb:a6:2d:dc:d5:a9:8f:b9:fb:fe:3d:3a:37:f0:
         2d:3f:ab:af:97:d9:71:f6:a1:f2:80:58:27:1e:eb:34:71:e9:
         ce:3e:89:05:95:c2:30:f1:b3:02:32:b9:b0:54:f5:20:53:34:
         81:96:bd:69:d1:c9:e6:d3:ff:29:d4:f9:f7:aa:4a:1e:60:1b:
         da:5d:c7:3b:51:2e:3b:8e:0f:29:e3:e9:36:ae:a0:d3:3c:e8:
         86:10:72:30:ba:d5:ad:29:6f:fb:d8:58:87:92:fa:fe:74:44:
         79:59:bf:46:98:b1:dc:22:c7:a2:98:7c:4a:b9:f2:7c:24:71:
         45:c8:4e:bd:b0:7e:ea:5b:3b:87:b2:69:b4:47:d8:58:96:89:
         72:a7:bc:6a:51:75:7c:ac:3d:3f:db:2b:3f:da:b2:74:21:a1:
         50:f4:c8:cf:ea:84:93:85:9c:ea:ef:58:9e:31:69:fa:21:98:
         62:d0:eb:1e:a8:09:eb:e4:2a:45:93:39:85:67:30:43:f0:1b:
         e3:0c:8c:0e:cb:b2:e0:b7:ac:42:c6:5b:23:da:7c:b5:27:1c:
         e7:75:58:fe:a6:2f:8f:c9:9f:8d:7a:43:dd:ff:96:50:5b:91:
         7c:04:f4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----