Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
File:                     0YZHAF-osG5H7i77_e3Jegx3Vfg.mft (raw, json)
Hash identifier:          i0lnrR/Hq6tnI7FfsxYQ3wuVfTgP02GaKMBEr05D2gw=
Subject key identifier:   84:7F:7B:5B:F6:99:BF:7C:1D:CC:00:CC:16:59:BC:6E:9E:1B:0F:71
Authority key identifier: D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8
Certificate issuer:       /CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
Certificate serial:       01962E98CC5B7267FAFB01A63E58ED74B3A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: 0YZHAF-osG5H7i77_e3Jegx3Vfg.crl (hash: kyo+KjkjS3ET8d6XdfvtkvUZ0ZuDu66vSQDg/THmE2Q=)
                          2: ZyIu060SPaMWxMQNL4CIeyP46Zk.roa (hash: GVU/SWZQhKij7yAFfd4z7w9wi6LHgd9IcJaXLlSPbVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cc:5b:72:67:fa:fb:01:a6:3e:58:ed:74:b3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18647005fa8b06e47ee2efbfdedc97a0c7755f8
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=847f7b5bf699bf7c1dcc00cc1659bc6e9e1b0f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:b3:72:77:ff:7f:65:70:54:36:65:aa:ae:
                    69:e8:63:14:c3:7b:50:0d:48:77:94:0d:5a:5b:43:
                    8d:5f:cc:a6:22:69:00:11:09:4d:ae:9e:1e:de:8f:
                    e0:d7:48:cb:d2:0d:14:85:c2:c5:09:4d:8f:86:c2:
                    43:b0:c5:ca:51:d6:bf:fc:af:71:a7:94:fb:c1:1c:
                    26:3b:1f:b2:d9:8b:51:d0:ed:75:d5:6f:5d:48:69:
                    25:08:48:11:6d:8d:4d:92:91:a8:0c:73:f3:9a:66:
                    d8:ac:8a:22:d9:3d:01:6f:ce:c8:d3:c3:46:d3:86:
                    3b:ba:c6:dd:e2:7f:4d:3f:f6:0c:aa:54:ad:bb:11:
                    ed:3c:b6:0f:8c:52:c2:e1:7e:73:e3:aa:a0:7a:7e:
                    05:ac:a5:e7:77:33:57:e1:87:bf:3f:fb:24:ed:94:
                    e8:03:80:0d:09:55:85:1c:69:e2:19:d4:f9:49:1c:
                    34:c5:1b:66:b2:45:05:3d:b0:25:c2:a1:16:dd:98:
                    37:69:ac:00:e9:78:65:40:89:27:54:b3:c4:48:a1:
                    83:59:c2:65:c4:99:74:90:28:3a:f0:31:b1:7a:37:
                    ed:87:58:69:fb:31:60:6f:40:44:2f:f1:c2:01:fd:
                    b8:6b:37:ba:7b:c5:4d:73:e4:6a:9c:f0:91:c3:a8:
                    0b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7F:7B:5B:F6:99:BF:7C:1D:CC:00:CC:16:59:BC:6E:9E:1B:0F:71
            X509v3 Authority Key Identifier:
                keyid:D1:86:47:00:5F:A8:B0:6E:47:EE:2E:FB:FD:ED:C9:7A:0C:77:55:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YZHAF-osG5H7i77_e3Jegx3Vfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7fa791-b3c9-48ae-8034-c2104673c20b/1/0YZHAF-osG5H7i77_e3Jegx3Vfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:f9:70:71:2f:53:50:d4:04:2f:fd:4f:f1:b5:87:5b:51:
         5d:da:e1:0f:ee:7d:fc:22:0e:6d:39:17:46:b4:61:bf:ba:98:
         a4:f4:e4:1e:d5:4d:25:45:c2:c1:1b:59:5c:e2:d6:ac:e4:45:
         a4:b1:20:b2:e4:7c:96:f6:ad:bb:76:e2:9f:f9:0d:4a:98:46:
         ed:a6:ef:95:27:b7:0c:6e:b0:e9:5c:f3:53:67:2a:3e:62:34:
         21:2f:e7:4f:0f:72:1d:c7:39:6b:1e:1b:62:01:09:56:27:df:
         95:2c:5b:43:15:fb:9c:bd:7d:ce:fb:92:69:ee:36:4c:35:97:
         d4:50:be:9d:d1:70:d9:6b:76:8a:c1:7a:49:e9:3c:b9:03:b1:
         68:8d:76:8b:4e:a4:f1:5b:c8:98:e3:9f:39:0b:53:64:a6:64:
         fb:3c:29:24:f2:fe:7d:ac:70:f8:e8:d6:66:d9:ff:fc:92:8d:
         e6:27:c1:e5:3e:c8:d3:51:76:d9:bb:3c:69:28:59:e7:82:96:
         74:89:84:67:bc:d3:c9:20:c8:bf:9a:98:ee:4d:bb:6a:40:17:
         f4:b4:83:96:22:de:c7:98:59:e7:fa:50:2a:75:8d:f8:e8:4a:
         ce:d4:cf:fa:1e:42:5a:9a:24:17:c8:54:a4:0f:0c:dc:8c:27:
         7e:ad:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----