Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File:                     yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier:          w87Qax3TMmdiwz7z9OwpUGvBlWdF9pOeqa4MmO530Y8=
Subject key identifier:   93:EC:5C:6F:9B:E1:ED:2F:AE:32:78:76:CB:AD:2A:F5:CC:45:0F:C0
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer:       /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial:       01962F3D7ABC5D6FC38F9528477999553788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: yEMlFNYIo_7PBG15hC66LWSw4E0.roa (hash: 0NF8QaEpF30c3qMJTec6Bga4N+I8Ns4AqntJ51k9D0k=)
                          2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: TtFlrYy6xRlo2MjlVHQZGFiwfd8rzfgBy/LFKZKVBxw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7a:bc:5d:6f:c3:8f:95:28:47:79:99:55:37:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=93ec5c6f9be1ed2fae327876cbad2af5cc450fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:f8:76:c4:68:73:17:94:60:ce:05:09:60:
                    d1:36:02:f7:88:d1:d6:79:dd:e0:f0:6d:89:60:60:
                    85:5b:87:43:fe:52:d6:bc:50:49:fe:e8:5b:d0:a0:
                    76:dd:cf:8e:f5:16:f4:f8:7e:ad:df:f0:ec:3e:0d:
                    19:26:8b:51:f2:58:d2:0f:58:ee:a3:22:c2:8f:69:
                    f2:0c:fd:19:28:7a:35:4a:50:7f:88:87:4c:2f:82:
                    96:7c:1c:c4:71:bc:49:eb:13:3d:f4:d3:c5:51:e5:
                    0a:d6:b6:c4:78:fc:64:98:c4:76:e4:8d:2f:95:cf:
                    45:21:c9:cd:d3:17:ae:6a:9d:db:f2:fe:64:54:5e:
                    f8:37:7d:fc:6d:2f:b6:c3:6a:fb:d8:59:2b:64:6f:
                    c6:75:25:fe:68:8e:3d:33:f2:cd:8b:66:b8:55:e9:
                    84:e2:a4:a8:ae:0b:d8:0b:64:a9:9a:5f:2c:98:61:
                    f9:47:cc:40:15:44:29:cc:47:12:45:ce:06:a1:b0:
                    cd:9b:60:c2:15:12:0c:46:43:9e:db:74:3f:0f:6e:
                    7c:f1:be:f5:fa:d5:5c:17:30:3e:fa:00:05:75:19:
                    d6:7f:83:3a:a1:8c:69:31:09:6d:91:51:70:fd:ea:
                    b7:fd:19:4a:8a:ed:32:6b:c8:a9:a3:02:5d:06:07:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EC:5C:6F:9B:E1:ED:2F:AE:32:78:76:CB:AD:2A:F5:CC:45:0F:C0
            X509v3 Authority Key Identifier:
                keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c4:4a:9f:a8:04:df:5f:39:34:be:d9:77:79:4a:99:61:45:
         db:81:18:10:b6:95:d9:24:ac:21:31:e8:5e:a3:b8:2d:8d:7e:
         42:9a:1e:55:9e:d8:d6:c0:cf:b4:cd:28:23:19:17:c4:50:2b:
         aa:26:38:63:f1:4a:86:47:6d:7f:43:e8:8a:b3:38:1a:1c:0f:
         22:cb:ff:1e:c1:7d:ca:9f:86:01:9f:03:46:3a:4e:26:6a:36:
         9a:39:79:2e:53:b9:b9:a1:94:8a:26:bf:4a:71:19:a0:b3:45:
         28:71:33:13:42:31:e4:6f:12:a5:cc:1a:a2:26:ca:93:7c:45:
         19:6f:f8:c9:7c:8b:c1:93:f0:32:58:6f:9b:98:d2:1d:62:b2:
         0a:e4:e6:65:4b:15:50:9a:19:a4:5c:1f:ca:c7:41:7e:b3:04:
         dc:f0:8e:cb:df:02:d8:e9:4a:bf:1a:51:7e:bf:1c:d6:07:d2:
         4d:2b:0c:fb:7b:81:71:53:15:fb:d4:cd:09:3b:ea:c5:b9:33:
         12:ce:75:39:ef:20:08:af:40:6b:32:5f:85:1a:e9:1d:3f:1d:
         49:c3:9d:01:bb:4d:1f:c4:40:77:11:10:7e:1a:fd:fe:c8:4e:
         d1:f5:be:7e:f9:52:19:b0:69:59:2b:41:fa:60:57:40:a1:c5:
         1e:19:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:12 2025 by rpki-client on console.sobornost.net