Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File:                     yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier:          bF94MnnGmzggz8f59KCTcTO+8pVpEE3FaQ8BitejAG8=
Subject key identifier:   CA:D2:57:D1:FE:DF:24:11:DB:EA:01:23:41:56:4B:BF:FF:B8:FC:BA
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer:       /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial:       01962FAB91678541119822B63590544F0CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number:          048D
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
                          2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: 2bLGcfimL0brXD/RO9i6s7nCoXLPVRSdCWeUSrrCKlw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:91:67:85:41:11:98:22:b6:35:90:54:4f:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=cad257d1fedf2411dbea012341564bbfffb8fcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:80:90:6d:90:48:c8:24:6f:35:5c:56:15:
                    6b:ae:ee:f2:03:77:ef:55:48:e5:98:9e:71:db:41:
                    9c:54:90:5b:04:93:71:f6:5f:a7:37:a5:e5:22:35:
                    bb:ee:d2:f8:bf:b7:80:08:61:30:62:98:49:7d:c0:
                    1d:3e:dc:60:ed:e5:20:09:24:23:ba:90:ed:1d:8b:
                    9d:89:d8:58:f8:fa:d8:ff:2b:de:fc:52:7d:90:57:
                    fe:e5:76:ca:b0:7d:ab:bd:d1:a3:59:62:05:d5:0f:
                    a3:ca:72:0f:bc:de:da:ab:2b:9b:b0:24:c4:a2:78:
                    e5:b5:27:d9:5d:9c:42:05:8b:35:e6:58:8d:e9:1d:
                    14:d8:0a:93:9b:2a:da:6a:1a:b0:66:61:78:c5:cb:
                    4c:83:0c:43:a5:fd:23:7d:c2:1a:41:88:49:93:20:
                    40:77:65:2f:8c:f0:06:97:14:5b:54:72:3b:38:a5:
                    fe:07:39:5d:be:49:9f:f5:3f:ee:88:12:72:c4:9b:
                    6e:0a:41:36:45:fd:de:1c:20:90:f1:19:30:b5:ac:
                    ac:fa:61:0d:70:79:2e:56:8c:1d:a4:6d:2d:32:93:
                    92:f0:20:bd:e2:ef:18:85:c2:f5:3e:f9:0f:3a:e5:
                    82:71:be:41:f0:7e:e9:62:ba:5d:af:d7:8e:da:c3:
                    9e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:57:D1:FE:DF:24:11:DB:EA:01:23:41:56:4B:BF:FF:B8:FC:BA
            X509v3 Authority Key Identifier:
                keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:60:4f:91:72:c8:cd:82:94:f6:27:19:23:ad:56:9d:a5:
         30:87:13:aa:46:42:3a:9f:8c:cc:40:ec:fc:8e:9b:f1:b1:a6:
         f3:00:43:1a:5e:f9:50:15:fa:85:a7:b8:7b:7a:49:df:b9:60:
         6b:27:4d:03:49:b0:34:9c:fd:6e:a1:11:3d:1e:36:45:5c:8d:
         49:cb:9c:4a:43:74:1d:08:49:34:bf:20:8a:4b:6f:8a:18:4d:
         02:6c:62:ad:f1:1c:83:8c:33:1a:8c:43:e2:54:b8:7c:a7:b6:
         26:90:56:a3:79:a3:12:08:da:09:64:86:8a:4c:97:fc:b2:c0:
         e5:49:34:68:04:9c:3c:3e:47:f2:c1:8d:bd:bd:bd:0b:38:e7:
         c3:0a:03:39:d2:75:a6:54:4e:6b:1d:0f:c2:18:70:f2:fc:bb:
         b7:7f:22:c8:a7:e2:eb:15:f5:22:6c:34:1c:51:f3:92:cb:f8:
         fd:21:f3:90:c1:36:e4:e3:59:d2:43:94:36:4e:b8:d9:0f:98:
         1e:3f:06:e2:89:c9:d0:bd:b2:fc:af:c1:87:06:6c:ac:18:a5:
         18:57:2c:0a:67:5d:9e:82:5d:a4:10:a4:8c:e4:00:3c:32:4d:
         6d:14:28:df:2c:cd:a1:69:e5:e5:e5:65:00:0b:04:58:cb:68:
         9c:5c:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----