Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
File:                     Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft (raw, json)
Hash identifier:          vbTBYUsbLeqIbIP6nIxm3Rrd+Kr+pELbL1rhR4hUb+o=
Subject key identifier:   EA:60:1C:24:0A:D4:7B:2D:B1:0F:58:5A:A9:3C:00:A8:60:0A:98:4F
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Certificate issuer:       /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial:       01962E62004912F5FFED09AF96551FB43ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
Manifest number:          141A
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl (hash: swjPhglwmeE2dOx2DZKfUxJqv8JK3UsoUYWPwVRdgH4=)
                          2: trc9WRrx0GcsdoyWUNx1ByDuLOs.roa (hash: O5foXyUGS0pgYakUN+dT6VqKLJZgwkNIaZ4jTeLOo7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:00:49:12:f5:ff:ed:09:af:96:55:1f:b4:3e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=ea601c240ad47b2db10f585aa93c00a8600a984f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:22:79:dc:64:05:4d:81:83:55:2c:55:22:
                    ae:69:cb:d5:8c:39:4e:ad:20:b2:96:99:fb:e2:4e:
                    96:6f:6f:df:80:be:3b:29:78:c6:58:19:b5:d9:88:
                    ab:29:d5:c5:b8:f9:f5:60:c4:58:f1:06:91:1e:42:
                    45:bb:ac:82:ba:18:6e:43:ed:0f:e1:7c:47:84:cd:
                    61:88:4f:21:2c:ce:11:29:35:c7:83:96:51:00:91:
                    1b:60:b5:b6:59:a6:bb:a3:e7:08:84:8a:8e:90:22:
                    c3:23:44:50:75:83:b1:1e:e6:d5:90:05:2d:15:ec:
                    d8:55:43:ed:b7:af:e3:df:6f:d3:20:24:00:08:f0:
                    e5:0e:95:ac:4a:51:82:02:83:fd:55:f6:96:7a:6c:
                    ca:3f:40:96:30:bb:94:f4:0a:7f:aa:2f:e7:fe:b4:
                    9f:c8:35:93:19:f0:4b:37:6c:b7:8b:b6:50:d9:d3:
                    64:d8:2b:12:5e:84:58:0b:7a:bc:06:07:e3:00:a5:
                    64:8f:13:6e:d7:16:1b:c9:0d:f5:f6:2f:93:d0:80:
                    1e:0a:46:0a:ff:dd:b9:54:8c:a1:ee:86:22:6a:36:
                    6b:13:7e:34:f3:0c:a6:bb:07:f3:af:93:09:e0:7b:
                    c8:30:62:b2:e4:cd:99:cb:1d:21:69:35:6e:0a:5a:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:60:1C:24:0A:D4:7B:2D:B1:0F:58:5A:A9:3C:00:A8:60:0A:98:4F
            X509v3 Authority Key Identifier:
                keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:be:14:d7:1f:b6:ec:ed:53:d6:b9:8c:1e:3d:45:a7:b2:
         4b:25:c9:28:ba:25:cf:3e:5f:ac:f4:c6:bd:bc:44:e3:dd:80:
         e3:8c:e0:82:e9:cd:73:f0:88:ed:c4:7f:42:7e:71:00:e9:10:
         29:35:67:0c:83:d2:70:46:2a:96:a9:b5:33:e6:77:cc:1e:ac:
         ab:cc:33:de:2a:60:7a:ba:d1:c5:dc:1d:30:85:48:07:bd:7a:
         d7:ae:3f:a7:eb:95:50:f1:5c:9c:37:d8:f2:14:d3:82:98:e3:
         a6:13:a5:31:f0:26:44:6e:ac:27:2d:1a:24:1a:aa:92:32:60:
         d9:30:bb:47:28:6c:8b:ae:ad:5e:e5:cb:1c:39:47:cd:2d:3c:
         73:ce:c3:23:51:32:e7:f3:48:c0:8b:de:a5:04:ff:d1:02:57:
         fd:d6:1f:69:75:91:45:56:17:ab:89:40:05:b4:6c:6b:e1:c1:
         de:bd:3f:f0:90:0d:c9:4e:bc:b9:78:ff:54:7c:c5:c0:59:15:
         3d:30:57:f3:25:93:f5:5a:b9:25:6b:62:d1:36:74:2f:c8:23:
         16:3d:8b:73:ed:af:cb:e8:69:cd:c6:5b:70:fc:c9:af:b0:7b:
         3a:c9:38:d3:dd:f9:ec:7f:1b:38:c5:cc:81:b4:2c:88:dc:a6:
         20:b8:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----