Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
File:                     yxODRz6KqHJwaPx1LgYOPb9j4O8.mft (raw, json)
Hash identifier:          c1XArRO+Mc1TklATj79QWWklfujfyJiEUz8vi4JDd4Q=
Subject key identifier:   B6:7A:5E:D5:C8:1A:52:1B:05:63:11:82:35:AE:2C:08:7B:93:02:01
Authority key identifier: CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF
Certificate issuer:       /CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
Certificate serial:       01962E98ECC1FD85229B44D9ED0A86EC9DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft
Manifest number:          06A6
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: rOX9zRwObaYZKZTR0WDKGvQYCI8.roa (hash: AVl8Cu7AhfVM1Wh1VdzrltPVEMOUXlEEy7ZTpT+wzAA=)
                          2: yxODRz6KqHJwaPx1LgYOPb9j4O8.crl (hash: 5EPUJqv7UKTBSnzpTCV6qS7JcKbZYzCGgDBY/oe97fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ec:c1:fd:85:22:9b:44:d9:ed:0a:86:ec:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1383473e8aa8727068fc752e060e3dbf63e0ef
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=b67a5ed5c81a521b0563118235ae2c087b930201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:71:89:ad:ca:e1:71:a9:4d:cd:dd:34:eb:
                    7c:08:62:99:4b:5b:6d:f8:b2:43:6d:95:9c:04:8b:
                    d0:ee:ee:e7:33:8d:2d:e4:4b:c4:cc:51:d5:7d:0f:
                    79:a5:20:19:87:46:8f:70:35:f3:3c:a1:13:ce:3d:
                    6b:d1:db:42:6d:c4:8d:9a:57:b0:59:a5:fa:1c:ef:
                    ec:99:6b:a3:9d:2b:80:cb:5d:37:cb:04:de:01:68:
                    95:6a:b5:24:b5:f4:1e:9f:c3:c1:56:1b:52:ba:29:
                    7b:f5:d4:80:2e:4c:9c:70:f2:01:63:57:3a:3c:29:
                    21:4a:46:1f:30:36:44:45:17:bc:99:8c:56:de:58:
                    62:b4:e2:7d:27:36:09:90:5d:0d:19:a4:27:96:4b:
                    97:90:2e:a8:b7:e2:2e:f7:f1:d5:66:c8:a2:06:d7:
                    c9:b8:9f:28:fd:0d:94:cf:f2:ed:b2:8f:84:e9:4a:
                    e3:cd:06:34:fd:b0:8c:51:78:d0:93:28:f4:ac:ca:
                    de:43:fa:e5:42:17:c5:b0:9b:14:3b:df:e0:a6:57:
                    d5:25:cc:a2:83:a3:b8:51:2f:5e:dc:9c:26:49:e3:
                    15:54:3a:d8:8a:6f:6f:86:f8:cb:42:77:3c:0f:12:
                    95:c0:cd:cc:2c:75:df:2e:0d:63:89:33:aa:36:5e:
                    8b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7A:5E:D5:C8:1A:52:1B:05:63:11:82:35:AE:2C:08:7B:93:02:01
            X509v3 Authority Key Identifier:
                keyid:CB:13:83:47:3E:8A:A8:72:70:68:FC:75:2E:06:0E:3D:BF:63:E0:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxODRz6KqHJwaPx1LgYOPb9j4O8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c63c94-e569-41b8-8e2b-d18b09cf3a1d/1/yxODRz6KqHJwaPx1LgYOPb9j4O8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:ce:1f:34:f6:58:54:fe:42:35:57:e0:8e:5c:63:f7:d2:
         d7:48:a5:4a:f0:a1:db:66:bb:13:37:c0:89:f9:83:18:a3:70:
         7b:88:eb:37:29:45:44:ad:87:81:f6:6d:28:a9:83:41:e9:29:
         a5:f4:29:ab:41:9f:39:f4:e0:a0:e8:73:1d:07:e5:95:00:87:
         4d:a3:43:70:2a:ad:bf:87:0a:2f:f4:6a:17:6e:d7:f5:5c:55:
         de:90:15:4f:b2:13:c9:20:61:fe:e4:1b:c8:1e:18:b6:ac:7f:
         5a:63:01:a7:1c:e9:0f:02:a7:37:1f:22:74:03:8a:b3:18:17:
         15:ef:24:a2:25:11:18:0d:98:ea:2f:f6:34:82:01:18:fe:4d:
         ba:c1:ae:91:c5:41:b5:37:00:43:01:c1:f4:79:ce:86:87:09:
         1f:dc:c7:21:cd:f0:ac:5b:02:5b:9f:8f:15:64:4d:3d:fe:4c:
         00:dc:51:e1:54:d9:a7:0a:0a:32:6d:15:e8:27:bd:3a:43:fd:
         55:5a:bd:d7:0b:46:c6:81:18:b4:bc:5a:d1:23:a4:cf:c6:96:
         49:2c:cb:e4:73:5e:aa:7a:be:f9:fb:89:de:6a:bf:5b:1f:bb:
         8a:70:53:ee:94:a2:e0:90:11:b1:c0:62:c4:49:51:99:58:8d:
         7c:49:65:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOzB/YUim0TZ7QqG7J2gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMTM4MzQ3M2U4YWE4NzI3MDY4ZmM3NTJlMDYwZTNkYmY2
M2UwZWYwHhcNMjUwNDEzMTAwMTM1WhcNMjUwNDE0MTAwMTM1WjAzMTEwLwYDVQQD
EyhiNjdhNWVkNWM4MWE1MjFiMDU2MzExODIzNWFlMmMwODdiOTMwMjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEpxia3K4XGpTc3dNOt8CGKZS1tt
+LJDbZWcBIvQ7u7nM40t5EvEzFHVfQ95pSAZh0aPcDXzPKETzj1r0dtCbcSNmlew
WaX6HO/smWujnSuAy103ywTeAWiVarUktfQen8PBVhtSuil79dSALkyccPIBY1c6
PCkhSkYfMDZERRe8mYxW3lhitOJ9JzYJkF0NGaQnlkuXkC6ot+Iu9/HVZsiiBtfJ
uJ8o/Q2Uz/Ltso+E6UrjzQY0/bCMUXjQkyj0rMreQ/rlQhfFsJsUO9/gplfVJcyi
g6O4US9e3JwmSeMVVDrYim9vhvjLQnc8DxKVwM3MLHXfLg1jiTOqNl6LNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZ6XtXIGlIbBWMRgjWuLAh7kwIBMB8GA1UdIwQY
MBaAFMsTg0c+iqhycGj8dS4GDj2/Y+DvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmIt
ZDE4YjA5Y2YzYTFkLzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jNjNjOTQtZTU2OS00MWI4LThlMmItZDE4YjA5Y2YzYTFk
LzEveXhPRFJ6NktxSEp3YVB4MUxnWU9QYjlqNE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsnOHzT2
WFT+QjVX4I5cY/fS10ilSvCh22a7EzfAifmDGKNwe4jrNylFRK2HgfZtKKmDQekp
pfQpq0GfOfTgoOhzHQfllQCHTaNDcCqtv4cKL/RqF27X9VxV3pAVT7ITySBh/uQb
yB4Ytqx/WmMBpxzpDwKnNx8idAOKsxgXFe8koiURGA2Y6i/2NIIBGP5NusGukcVB
tTcAQwHB9HnOhocJH9zHIc3wrFsCW5+PFWRNPf5MANxR4VTZpwoKMm0V6Ce9OkP9
VVq91wtGxoEYtLxa0SOkz8aWSSzL5HNeqnq++fuJ3mq/Wx+7inBT7pSi4JARscBi
xElRmViNfEll3A==
-----END CERTIFICATE-----