Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
File:                     yQs5SsYzN2B_obsOq6EUU6gx85g.mft (raw, json)
Hash identifier:          m1V/mZUydP48b/n1dK+x21Q3wJ0y3wtMhngdji40JZA=
Subject key identifier:   71:79:98:F9:0E:DA:38:40:B6:96:5F:2E:06:67:3B:39:64:C7:7E:8D
Authority key identifier: C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98
Certificate issuer:       /CN=c90b394ac63337607fa1bb0eaba11453a831f398
Certificate serial:       01962F74510AA05264CE3B00A797FB28E8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft
Manifest number:          0B80
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 3DeOifSeLxMUCM20VxHQS5cXQE4.roa (hash: 783WmkyHs/Bvag8AxFOjFyrEJCCbAmS83HXavAaPMKY=)
                          2: yQs5SsYzN2B_obsOq6EUU6gx85g.crl (hash: SgHNCye2Ke4B/HQKwtnZQxG6tnPTzdTW2AMDa10IIDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:51:0a:a0:52:64:ce:3b:00:a7:97:fb:28:e8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90b394ac63337607fa1bb0eaba11453a831f398
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=717998f90eda3840b6965f2e06673b3964c77e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:83:dd:76:e9:5a:b1:ce:c9:da:1f:e7:52:
                    b7:3c:1a:7a:62:94:77:73:d4:42:00:02:62:bd:ff:
                    5d:b4:46:4e:1b:d4:2a:00:78:5c:34:6f:c6:04:e5:
                    65:6a:a9:e3:85:88:fc:09:af:9d:9c:27:8c:ea:2d:
                    78:d3:77:71:96:f8:64:a3:5e:27:3e:91:bb:10:1d:
                    0d:c7:9b:1c:bf:6b:75:91:14:47:1e:42:0f:2c:3c:
                    d4:71:78:15:cd:79:45:b8:fd:07:f6:c9:bb:ea:b9:
                    4b:26:f8:0c:3a:c8:aa:d6:cf:fc:ef:36:a7:01:91:
                    0e:aa:3c:22:a1:74:fb:92:e6:7c:c9:6f:35:0a:74:
                    6e:2b:c9:f6:c5:19:6a:65:20:c4:48:47:c2:b9:24:
                    14:36:5e:b4:9c:a7:db:b6:e0:9e:5a:07:9a:a3:41:
                    0b:47:cb:dd:0c:5c:34:43:5e:f3:14:0c:8f:14:e4:
                    9a:97:7b:41:a7:77:23:87:c2:f6:2e:de:b3:2a:6a:
                    ca:17:8c:07:fa:e7:30:46:1a:42:3e:29:9d:89:91:
                    43:0d:cf:c1:e5:0a:d9:b9:3c:7d:c9:bb:fd:40:99:
                    2a:23:39:4c:2e:b6:44:45:67:b5:5a:62:0e:9d:1c:
                    b2:71:c9:af:8f:54:27:d3:5d:e5:a5:de:5e:13:4c:
                    56:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:98:F9:0E:DA:38:40:B6:96:5F:2E:06:67:3B:39:64:C7:7E:8D
            X509v3 Authority Key Identifier:
                keyid:C9:0B:39:4A:C6:33:37:60:7F:A1:BB:0E:AB:A1:14:53:A8:31:F3:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQs5SsYzN2B_obsOq6EUU6gx85g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d784b-6639-4bc0-9ab9-1a200e41b006/1/yQs5SsYzN2B_obsOq6EUU6gx85g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:d9:f7:0d:31:83:74:10:d1:15:59:4c:43:e9:f6:fd:e0:
         40:81:14:05:a3:ea:b8:03:c1:ab:4c:29:61:61:93:02:8d:2a:
         71:ca:04:0e:ba:62:9f:c0:ff:60:63:8c:18:02:f2:0e:ac:a6:
         3b:34:74:0b:37:4c:d5:79:ea:58:80:dd:f2:dd:e9:b8:fa:13:
         7f:b8:8a:8c:c6:b7:aa:75:04:2f:36:15:76:a3:ea:b6:c4:2a:
         96:39:ae:bf:e8:87:b6:97:74:72:48:02:01:94:d5:40:4e:e0:
         51:08:14:06:e9:80:3b:c7:b5:a1:d0:cc:22:d9:6f:4b:bf:72:
         23:13:96:f5:e0:74:2c:a8:4c:ff:db:b8:25:84:c1:61:63:ce:
         fe:bf:94:fe:23:8d:31:be:28:7e:0d:cb:af:f2:99:10:12:05:
         68:91:ae:46:d6:14:51:e2:a0:68:64:e9:06:d6:e2:3d:7e:66:
         0a:80:59:d7:68:17:eb:60:4a:d4:d2:48:e7:27:b2:03:4a:9e:
         05:06:85:c4:3e:e0:5a:1b:0e:75:55:f7:eb:ff:1d:57:47:c8:
         51:f4:e7:22:a7:04:9e:80:92:eb:a2:c8:10:fe:ed:c8:07:aa:
         d1:94:0f:5f:64:8b:e4:1d:54:3c:7e:8e:63:06:93:b7:07:4d:
         bb:cc:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----