Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
File:                     yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft (raw, json)
Hash identifier:          H/F+2Znos/44QEaeSFIvP7q2Dd2TcWbUP23jCcUw2VY=
Subject key identifier:   56:D2:F3:90:AA:DC:AC:EC:CC:74:F8:92:4F:33:47:7F:2B:F2:B5:91
Authority key identifier: C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6
Certificate issuer:       /CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
Certificate serial:       01962F74ABC80BFBF2E8C543B7BC0462DB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft
Manifest number:          0FF4
Signing time:             Sun 13 Apr 2025 14:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:37 +0000
Files and hashes:         1: u-olTnLwJF6ytkR-o6rX3D_kci8.roa (hash: MR3jrf7iR8t6kjldj/3xqnHlhsr0yJP0AElvCOGrpJI=)
                          2: yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl (hash: NjzzklavmPuOTmLm1IbhXbaIK9gniGYb3WM38+pTi94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ab:c8:0b:fb:f2:e8:c5:43:b7:bc:04:62:db:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9a7ff012cb72ea84d1b83c002c3203cc024e6a6
        Validity
            Not Before: Apr 13 14:01:37 2025 GMT
            Not After : Apr 14 14:01:37 2025 GMT
        Subject: CN=56d2f390aadcaceccc74f8924f33477f2bf2b591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:33:99:61:6e:7e:0e:cc:05:94:bc:2f:f3:
                    a7:68:89:a1:6f:1d:a4:f6:c7:23:e6:67:ec:04:df:
                    88:dd:0b:d9:fb:ce:cd:2e:7d:c6:3d:18:59:df:df:
                    a0:ba:a3:7c:3b:44:6f:58:1c:92:e6:69:af:1c:c1:
                    56:c4:1b:cc:59:7d:55:85:94:c1:89:8c:77:c5:98:
                    18:d5:0e:be:e1:4f:77:80:a7:c1:f8:22:73:bc:46:
                    8f:bb:43:4a:06:48:ca:28:4d:fe:41:5f:c3:82:5d:
                    0b:55:6f:81:42:4a:3e:e3:45:a0:67:e9:71:62:7f:
                    c5:31:69:08:50:2f:6c:34:c7:01:26:77:bd:35:5b:
                    77:47:28:7a:4e:0f:2f:45:0e:be:cf:aa:12:80:62:
                    6f:7d:bb:22:20:d9:42:6e:36:ef:3c:0b:5a:3c:17:
                    a6:8a:f3:6c:b3:bd:91:5a:02:87:9c:3d:cc:0a:8b:
                    1d:8b:8d:f2:a7:f6:9c:ee:ff:d7:ee:cb:46:b1:42:
                    8f:c4:b0:14:ab:5f:82:49:16:13:8a:05:11:61:4e:
                    6f:c4:f2:eb:71:3d:99:9c:b7:26:1b:4b:ae:b8:69:
                    24:03:e1:18:79:da:5c:be:b8:8a:29:29:f3:37:c8:
                    89:fd:57:62:97:aa:f2:91:fb:34:e7:11:64:41:f9:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D2:F3:90:AA:DC:AC:EC:CC:74:F8:92:4F:33:47:7F:2B:F2:B5:91
            X509v3 Authority Key Identifier:
                keyid:C9:A7:FF:01:2C:B7:2E:A8:4D:1B:83:C0:02:C3:20:3C:C0:24:E6:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaf_ASy3LqhNG4PAAsMgPMAk5qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42fb3c-61a6-45ca-a47e-d2d1209c4825/1/yaf_ASy3LqhNG4PAAsMgPMAk5qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c5:e5:df:5e:87:14:12:b1:4c:82:4e:d8:8f:b8:fc:b8:f1:
         3c:d5:53:74:89:f5:b6:99:18:fb:9d:a9:fc:2c:b6:66:76:c0:
         12:e4:30:38:dd:c8:91:20:07:78:f3:83:3f:10:8e:31:54:06:
         18:37:d0:1a:ff:d6:df:73:25:f5:e2:78:e3:14:82:8a:6a:c0:
         c2:96:cd:4b:3b:0e:52:13:e5:91:7f:44:5d:3f:58:d1:4d:a5:
         ba:43:a3:1e:a1:0b:8a:75:81:da:f7:2b:ca:97:dc:f6:1c:ca:
         46:35:87:e8:c5:70:4f:89:25:60:35:7b:a8:42:f7:67:c8:45:
         bf:bf:bb:b5:43:15:21:0b:92:c7:3c:da:d7:e3:6e:ea:b5:67:
         92:2d:4b:09:69:8d:50:a0:40:20:e3:3d:9f:7a:a6:5c:ee:4d:
         a9:63:4d:55:df:c0:0c:35:ad:0b:9d:c3:b9:45:c7:51:9c:30:
         1c:73:87:27:e9:9b:95:42:50:65:85:91:30:e5:4a:f5:52:14:
         aa:9f:16:2e:3a:ee:a0:d3:31:0e:c9:12:43:f2:69:e7:9f:7f:
         d0:35:81:58:8c:af:da:39:40:60:6a:16:97:fb:d0:6a:7b:f3:
         f5:26:76:4d:0c:e1:a9:55:fc:c7:b9:83:f4:d0:b3:82:0e:96:
         ff:fb:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----