Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
File:                     y34FPHGZWsyb8TM_55w9W_1ulk4.mft (raw, json)
Hash identifier:          7f0InbpcAp+5SDHylkPZ4HbPyNXwuZ3APSPWZcoplok=
Subject key identifier:   C7:A3:6B:32:EB:6E:4B:68:59:67:FA:84:FE:23:20:6B:7F:95:16:D0
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Certificate issuer:       /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial:       01962DF43346AC2FBCD3CD4136D90AB762E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
Manifest number:          0B58
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa (hash: af8mlEBnTxkbr73XYFoiiYy6suBahBU1dHobCDHfy/U=)
                          2: y34FPHGZWsyb8TM_55w9W_1ulk4.crl (hash: AeotRX5vJWwrdn5am1fitd6unmpNzMVRRygQIhn+iMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:33:46:ac:2f:bc:d3:cd:41:36:d9:0a:b7:62:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=c7a36b32eb6e4b685967fa84fe23206b7f9516d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:d1:30:24:c7:82:e8:99:b4:e6:28:53:88:
                    05:41:79:d0:44:05:0e:8d:cb:d2:37:29:a4:f8:c0:
                    52:07:c7:55:ee:7b:df:80:2f:43:75:e6:2e:82:99:
                    02:19:0a:e0:14:4b:96:2e:9a:ec:e4:9c:71:54:c1:
                    f0:05:d0:7c:8d:86:42:07:a2:c5:a1:33:ca:68:38:
                    42:73:80:c9:1d:82:da:88:c0:7d:a0:df:54:11:69:
                    ab:75:58:58:2c:b4:7a:d2:fb:44:b8:5f:de:f3:3f:
                    7c:71:ef:86:46:1f:32:89:88:a2:59:8d:4c:0b:46:
                    0c:da:4c:8b:94:72:07:32:a9:f7:1e:7e:c0:f3:c9:
                    85:f9:cc:26:7c:22:12:61:68:64:91:dc:49:26:97:
                    c5:b3:36:3b:47:37:0d:4d:59:d1:bf:0b:08:6b:1b:
                    0a:7f:92:3e:30:c7:08:18:49:ca:8e:a5:58:41:28:
                    38:35:92:ac:7e:06:8c:bb:1a:13:44:0f:e4:25:58:
                    8c:e4:a5:dc:c8:15:43:a6:04:b2:d6:b0:73:0c:a8:
                    c9:eb:30:f1:a8:aa:fd:0d:d7:b8:9e:e2:48:81:dc:
                    e7:43:4b:4d:5d:c9:1c:29:a0:9b:a4:c0:42:1c:06:
                    d3:a8:ac:7b:d5:d4:69:50:27:12:32:b8:07:e2:8a:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A3:6B:32:EB:6E:4B:68:59:67:FA:84:FE:23:20:6B:7F:95:16:D0
            X509v3 Authority Key Identifier:
                keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:43:d0:21:85:d3:4a:6f:9d:10:ff:3e:0b:fa:d2:06:04:cb:
         85:35:3b:69:2c:f8:3e:de:1e:55:05:db:af:c7:31:09:86:fb:
         94:c7:4f:20:58:ff:a3:e6:c3:72:0a:6d:ac:a9:c0:d6:df:84:
         1f:55:58:31:55:37:a6:05:74:45:c7:6a:e3:c0:74:d8:27:91:
         db:26:54:83:e4:9b:82:09:5a:68:3f:d1:43:df:69:29:67:d7:
         fe:94:b3:7e:6f:e2:0f:1a:ce:5e:eb:ba:59:8b:28:03:87:51:
         3d:1f:82:86:25:f8:8e:66:1a:a5:9b:3b:38:ac:b8:61:45:f5:
         d0:66:6a:2a:7c:e0:92:2f:74:4a:aa:e5:d6:e8:e7:74:37:0d:
         c2:6a:2d:8d:2b:b4:1c:21:3b:0c:e1:89:6f:12:fb:b8:30:b1:
         55:6a:5f:9d:8d:6b:82:c7:63:d3:5a:dd:62:9f:29:ad:a1:16:
         4c:67:fe:eb:56:26:79:22:7a:ee:cb:ae:6d:53:07:a4:a9:f9:
         7e:92:f8:61:e3:47:be:80:88:fc:f1:6b:24:7b:7a:ca:9a:f1:
         e1:5c:71:35:0d:c1:ff:1f:9c:86:cc:3e:a3:05:9e:4e:b1:6a:
         33:bc:d2:93:dc:16:fa:5a:b9:08:b1:35:b1:1f:a0:cb:5f:d3:
         7d:65:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----