Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File:                     SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier:          dCsJyY2V7bGEUsBrb8cGVWH/pt1GTp8xEUDlCwd+fFs=
Subject key identifier:   4C:28:63:FE:3D:2B:6A:EE:5B:78:70:E5:42:C6:80:A6:09:EF:0F:66
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer:       /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial:       01962E996E60AA843F0BF00D7157889C64AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number:          0812
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
                          2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: V3gahgXDteJLPlNJfhwl1HmGLFXrZ5VFuE7fBqgmjMw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6e:60:aa:84:3f:0b:f0:0d:71:57:88:9c:64:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=4c2863fe3d2b6aee5b7870e542c680a609ef0f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:90:ad:e9:bc:4e:ef:64:6d:b2:4b:e3:be:
                    68:c6:49:e1:b9:46:f9:29:15:ea:65:7f:ec:06:b1:
                    69:f3:9a:6c:29:f3:8b:3c:70:4e:7f:94:82:f2:4a:
                    32:0b:a0:f7:18:4e:a2:af:3c:f7:cd:df:31:18:85:
                    b6:23:a1:1e:56:76:2e:8a:b3:c9:64:4a:a6:66:52:
                    3d:8c:77:6a:54:dd:04:6a:da:fc:61:cc:a6:7a:58:
                    f2:a7:a0:e1:59:19:84:7a:b5:57:e5:09:be:43:8a:
                    53:4a:c5:b5:34:18:54:7c:64:bb:bd:d1:35:ac:c1:
                    e8:8a:20:2a:4e:1a:3f:2b:27:c1:2f:f2:d9:05:0d:
                    fd:af:40:72:ab:2c:ef:f2:36:68:86:d6:b3:d3:82:
                    04:f0:3b:1b:10:ff:5b:35:74:35:b9:98:0b:b8:03:
                    5e:af:10:fa:f2:13:26:55:68:64:81:2f:3e:ad:be:
                    15:5c:10:7b:81:64:74:a3:58:19:e6:50:85:56:83:
                    1c:4d:8e:f0:42:21:aa:d5:52:f1:08:f5:b5:aa:66:
                    1e:ed:45:3a:76:f2:38:bd:af:f8:2a:70:bf:38:2b:
                    ef:67:fd:bb:00:28:8a:fc:3d:f9:e1:86:20:96:1c:
                    e4:22:04:93:2d:46:06:d9:de:5e:27:1a:a3:ea:5b:
                    1f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:28:63:FE:3D:2B:6A:EE:5B:78:70:E5:42:C6:80:A6:09:EF:0F:66
            X509v3 Authority Key Identifier:
                keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5e:68:e1:00:ac:d0:75:1c:d1:a4:26:05:6e:df:a7:56:c6:
         3e:20:55:bd:8c:13:5f:e5:b9:90:df:f2:ed:39:27:8c:49:6f:
         8e:7d:45:62:0a:75:a9:a8:b3:ce:d1:94:45:74:cf:c6:33:6c:
         51:7d:49:c8:94:79:ea:d1:84:91:6f:f6:32:a2:74:95:b3:5e:
         95:af:d2:f0:e5:d7:b0:57:b6:d4:2c:49:05:1d:a1:cc:c3:dd:
         ad:7b:00:80:45:3a:14:e4:92:00:e4:9f:13:c6:93:25:3c:fc:
         26:3b:e0:fc:7f:35:83:f9:e5:fa:7b:2b:86:dc:7b:d5:e7:75:
         c5:23:07:ab:5a:fe:67:d8:15:2b:34:d9:b4:bb:08:f9:fb:34:
         6b:fd:62:13:d5:8c:65:65:6f:e4:87:22:7a:0b:75:21:5a:43:
         5b:f4:1c:c7:7f:ce:45:7e:75:e7:e7:e7:15:4a:bc:82:ee:33:
         bd:65:1d:49:e4:f9:d3:d2:87:c2:32:5d:b3:25:d2:24:80:c4:
         51:38:3c:0f:91:52:cb:b9:0b:e2:b1:06:1f:45:c6:dc:44:a7:
         b2:95:f9:a1:55:6a:9e:20:6d:41:04:a0:48:b8:f8:42:63:e0:
         0b:ad:07:e8:b0:92:d6:e9:0c:91:fb:26:0b:9c:ed:af:91:89:
         51:16:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----