Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File:                     yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier:          pIXcV7kpsb8503gr8w9xu39YUk5bzGOidyZrm+TSO7M=
Subject key identifier:   0C:5C:13:8F:C6:DD:0A:A9:73:FB:1E:29:F8:18:B3:B1:18:42:71:A0
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer:       /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial:       01962FAB442208EB3E9E25AF57DB6B11099B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number:          0E8A
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
                          2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
                          3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: sPsO6h7TnuxyTAnfkWU/LuepELs+/+QC5IqiWt3PsDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:44:22:08:eb:3e:9e:25:af:57:db:6b:11:09:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=0c5c138fc6dd0aa973fb1e29f818b3b1184271a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:81:a7:db:dd:ac:69:15:42:e8:19:5d:e6:
                    b2:34:04:f3:6b:61:1a:e6:72:3c:68:64:18:2f:26:
                    56:31:f9:ac:cc:70:40:93:20:6b:7a:6d:da:57:50:
                    2c:dd:2d:f5:ee:f5:c5:a9:b0:e3:df:ec:c9:cf:31:
                    7f:80:f7:8e:49:dd:7e:f5:c4:32:66:0f:32:fa:9c:
                    69:07:a0:a6:3a:db:a1:a1:aa:7c:5e:ca:80:c8:c8:
                    57:28:18:5c:d3:e9:ef:f1:9f:0d:39:3b:0e:56:09:
                    86:35:b4:e2:eb:85:14:ae:9a:77:fe:e4:4d:57:c0:
                    5e:dc:ba:86:e7:0b:90:e8:df:46:71:d5:39:d6:7c:
                    12:a2:22:73:1e:b8:1e:3b:25:c1:4d:35:1f:1d:9c:
                    34:ea:ce:eb:86:b9:8b:71:44:d8:b8:2e:30:1c:f2:
                    ce:56:f9:ae:11:e3:54:46:4b:ee:5b:fe:8c:b4:54:
                    ce:1e:56:94:23:f1:15:29:1a:3f:22:96:e5:7c:de:
                    1f:9f:61:c2:52:ce:a7:ec:6f:3c:00:40:cf:53:04:
                    c9:02:94:b0:2b:52:51:f4:48:95:2d:00:3a:cc:44:
                    00:7b:9f:57:e3:bd:4e:89:b5:64:ca:e7:a6:0a:0a:
                    f7:59:3c:f0:b4:4f:c2:46:27:a3:f8:c0:51:1d:9d:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:13:8F:C6:DD:0A:A9:73:FB:1E:29:F8:18:B3:B1:18:42:71:A0
            X509v3 Authority Key Identifier:
                keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:16:de:c7:7f:1e:a5:c2:e5:e0:ce:13:44:36:5d:62:fb:1b:
         5a:e7:23:04:c0:3c:ed:ae:08:87:fa:bc:71:77:59:7a:d4:9a:
         11:72:c4:7e:ea:e6:4e:39:90:97:62:96:00:7a:23:ea:87:f5:
         e0:8e:34:7b:f7:7e:a8:3c:85:0c:cb:22:d3:1f:97:ca:46:f0:
         52:80:6e:cb:3d:4d:82:ab:4c:6e:36:f9:e1:2d:02:0e:d2:0f:
         df:4e:0f:68:76:02:b2:42:34:45:ca:4b:8d:6d:72:44:e0:0c:
         ed:b7:53:5e:05:0e:9b:db:14:08:c6:40:db:9c:d6:3d:bf:f7:
         99:33:04:99:f3:85:c8:9e:e5:aa:db:e6:d9:9f:e1:c8:e4:35:
         b0:2b:79:01:e3:6d:4d:f8:3a:6e:5a:27:72:18:2b:96:9a:f2:
         23:64:a8:95:35:05:5a:3a:f9:e9:40:2a:cb:92:97:69:2b:42:
         a4:84:eb:ca:d8:96:d6:69:13:26:4f:ba:be:03:70:20:a7:d9:
         98:70:fa:5e:d1:86:35:3b:f5:e8:fd:fc:f6:b3:ba:07:25:6f:
         27:b0:d2:c7:ce:22:8d:26:60:eb:c0:0a:4d:d3:23:9a:b3:a8:
         91:a4:78:ec:df:fb:ce:12:ea:76:6a:39:e3:80:fe:11:f9:bd:
         a5:7e:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----