Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
File:                     ycTTQSeR46PplAQFieyK0vWP4xI.mft (raw, json)
Hash identifier:          YVT1tf1xc4vmVX225w+6OSzDz4tGnKIM3RFJrYR8e1o=
Subject key identifier:   11:40:5F:3C:8A:26:BC:F3:FE:D4:BF:BF:71:BD:52:1B:56:B4:2A:90
Authority key identifier: C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12
Certificate issuer:       /CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
Certificate serial:       01962F74292C0486FDEF239F173EFF3BC322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: mMGnUGaN6rsw58xOd0MAF_HAY9o.roa (hash: 0HzReZTMzsNR7hcuVRKNU/DysaBkSSFxX1IonoMajpg=)
                          2: ycTTQSeR46PplAQFieyK0vWP4xI.crl (hash: pfWtgSyN9kd3iAS6An31vJ8VSOmmmlJLeuieaauNjBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:29:2c:04:86:fd:ef:23:9f:17:3e:ff:3b:c3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c4d3412791e3a3e994040589ec8ad2f58fe312
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=11405f3c8a26bcf3fed4bfbf71bd521b56b42a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d2:2c:77:f2:aa:31:75:40:77:02:a0:8e:0b:
                    f2:86:05:d0:72:b0:b5:43:d9:38:92:55:25:24:83:
                    77:66:bc:d5:a1:d2:c0:f1:07:71:ba:09:14:e5:57:
                    33:79:21:2b:ce:db:9c:e1:df:15:51:9f:37:9b:5f:
                    f2:a6:ca:29:78:c5:de:d8:35:60:a2:d7:f4:f2:6a:
                    91:ff:bf:59:89:31:e6:d8:df:8a:eb:4e:59:8b:2f:
                    26:44:72:d5:94:9a:a4:c5:ad:97:f1:1c:d1:56:83:
                    80:13:08:2d:bc:32:61:2c:7c:5f:39:88:63:3c:75:
                    61:7b:6f:28:1c:e8:71:6f:bf:58:25:75:f5:d4:08:
                    c1:5f:30:0e:d7:d3:f1:0d:64:da:79:89:a3:48:c7:
                    bd:94:2c:79:0a:4b:f4:f1:a2:71:53:df:e4:99:3d:
                    e5:bc:71:64:d6:b5:35:59:0c:9a:4a:5f:c5:8d:42:
                    b3:fe:78:cb:ef:5e:85:a4:f4:81:5a:48:62:95:60:
                    58:73:2b:4d:3c:f0:2c:74:f8:85:03:75:cb:8b:f7:
                    c1:9c:6f:0e:b2:3c:35:66:6b:d9:84:2d:e7:04:b6:
                    2d:7e:ed:a8:1e:79:9e:e8:5d:0b:d2:0e:3a:59:15:
                    02:72:a4:fd:5d:1b:04:be:81:ad:85:21:85:ca:e4:
                    cb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:40:5F:3C:8A:26:BC:F3:FE:D4:BF:BF:71:BD:52:1B:56:B4:2A:90
            X509v3 Authority Key Identifier:
                keyid:C9:C4:D3:41:27:91:E3:A3:E9:94:04:05:89:EC:8A:D2:F5:8F:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycTTQSeR46PplAQFieyK0vWP4xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c2c8bf-dce4-4283-bf72-cc7f87f4a950/1/ycTTQSeR46PplAQFieyK0vWP4xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:5f:39:a9:43:dc:3e:0b:33:19:2c:24:f5:9d:c1:e3:a2:
         26:43:38:24:e8:93:2c:e8:59:1d:55:95:09:c9:5f:4e:e7:00:
         86:cd:89:23:2b:e4:03:7d:0d:ca:f4:44:17:75:5d:e0:34:b5:
         23:fe:f7:17:73:4a:be:38:e3:2c:60:da:c1:b1:b7:9a:15:2e:
         13:12:40:23:95:9b:58:b1:b1:91:96:59:54:37:62:c9:39:18:
         de:e2:6c:bf:d4:20:eb:bc:30:5a:ff:f8:49:80:fb:e1:58:13:
         6d:12:4a:6e:64:27:c9:0d:9a:98:6b:2b:fc:f6:8d:1f:e7:5d:
         69:88:dc:6e:29:2f:8a:3c:31:b1:25:e7:d8:e9:c3:4a:35:60:
         ac:71:78:38:e9:78:e7:84:e7:23:bb:da:bc:ad:0e:c5:1e:ba:
         80:f9:74:fe:fa:a9:5c:79:4a:65:85:12:98:7f:0f:1b:2a:86:
         d4:88:71:57:8e:e3:a8:bc:58:d5:ce:0a:c5:3e:55:00:57:18:
         45:ed:fe:bf:fb:6f:11:47:a4:bb:a3:3f:44:6d:0b:d1:ee:c7:
         41:21:c5:a0:7b:38:63:e3:a0:46:0f:b8:a9:34:3b:20:d3:5a:
         08:be:67:d8:c3:6f:2a:2c:11:aa:7f:5c:d1:04:4d:71:fe:9b:
         86:a1:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----