Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File:                     yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier:          0WbQVd6OCna6z74qWUKTh0byROwLiOkLty6ePLXHWec=
Subject key identifier:   A5:F1:1B:2A:35:80:65:F4:15:ED:08:5C:49:48:13:93:64:8A:5D:C4
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer:       /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial:       01962E9972F75A366FBFB250D2A2ECC71FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: eLZf6bXb8xEZurUf42JvubCYQLQ.roa (hash: CQdXKjlldjU5ONxgLx9uzQIu5vM63ThRAoUDUMH3Bko=)
                          2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: yG8a+SLOAwfFGvYHnOBi51mLp+D9hYIMo1uxrQk+v+Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:72:f7:5a:36:6f:bf:b2:50:d2:a2:ec:c7:1f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=a5f11b2a358065f415ed085c49481393648a5dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:6b:d9:a4:42:5e:a5:2c:93:35:22:88:86:
                    29:15:93:09:c8:a4:e0:97:8f:0b:5c:22:5f:24:a4:
                    58:94:f3:3b:f3:c9:e6:46:e9:64:44:8f:48:85:df:
                    e7:9b:85:25:8f:90:51:4b:5b:63:2a:56:4e:e4:86:
                    5c:25:1d:c3:7e:e4:34:c2:09:e1:fc:46:4d:78:27:
                    37:bf:a9:23:aa:b2:db:bc:5b:95:57:15:e6:66:9c:
                    2d:71:36:1b:40:e2:53:e3:36:86:5f:cb:dd:a5:34:
                    39:3e:ec:ed:10:1e:66:e7:40:e0:38:aa:38:23:0d:
                    db:80:c9:15:09:a0:fb:8c:bb:75:e9:2a:ef:87:7f:
                    1c:24:99:49:bb:7f:67:b9:6a:8f:27:96:0f:d3:b3:
                    c2:a8:92:63:5e:e3:58:aa:2d:96:41:37:2e:8d:f0:
                    1f:7f:19:50:9a:4f:aa:c0:69:03:af:94:69:2b:d9:
                    ed:18:db:ce:f5:48:cc:a7:7a:65:f4:b9:b7:33:44:
                    0a:ee:2d:7b:99:48:8e:70:e1:af:f8:02:f8:30:64:
                    59:c3:02:96:16:f6:1f:3d:85:31:6f:f7:76:65:62:
                    16:0f:02:32:b8:cd:15:72:01:45:b8:fd:d2:a6:cb:
                    da:25:38:7f:aa:2d:93:d4:80:44:30:c7:2c:23:47:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:F1:1B:2A:35:80:65:F4:15:ED:08:5C:49:48:13:93:64:8A:5D:C4
            X509v3 Authority Key Identifier:
                keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0a:63:c9:64:0a:12:4e:16:0d:09:24:5e:7a:c8:bb:fa:40:
         42:e7:52:39:51:2b:16:0f:be:04:db:e2:be:b1:38:19:a4:98:
         7f:b5:2d:7c:cf:ef:04:6f:7b:6a:0a:2a:0e:b5:33:7e:a6:9b:
         81:a4:85:11:03:29:e9:12:df:35:cd:ef:f1:aa:c5:95:49:fd:
         aa:1e:68:ef:39:78:37:67:db:88:05:de:aa:d0:62:d2:98:80:
         d8:fa:21:aa:94:be:8a:11:5d:5b:74:61:dc:93:65:29:0f:f1:
         cb:f8:37:3d:3e:9b:a5:93:f9:80:86:db:df:c9:31:01:b1:38:
         88:0b:ab:9f:0d:38:e3:d9:a5:9c:75:70:b0:13:fa:dd:d6:64:
         dd:12:24:eb:72:64:ce:97:5d:3b:b0:ee:68:aa:92:1f:3e:45:
         d7:56:51:18:9d:35:28:34:12:a2:00:15:e9:cf:c8:3e:62:3a:
         41:31:1e:1d:46:f5:db:03:2f:4d:f1:ba:b2:97:3c:ba:aa:e7:
         4c:78:e3:cd:20:5b:de:60:00:95:f6:3b:82:9c:9e:16:f9:a7:
         60:18:f3:bf:b7:c8:e6:84:65:3a:57:7b:01:e7:ee:fb:1a:50:
         a0:1c:76:17:25:87:ae:e5:c9:c1:97:f2:a4:e5:28:44:52:f8:
         53:94:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----