Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File:                     yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier:          X5s7ctj3gZ8oXUrtCoGVlFuaZZktFHOF1yPTXSkJ8VI=
Subject key identifier:   42:AF:D7:16:AD:40:B9:6E:BF:EF:6E:00:26:0A:A1:E5:07:D5:BB:28
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer:       /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial:       01962E992797FDF57CB001E21C63F4C14BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number:          0A0B
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: 1-xE0-vSES3q7X24C7bA8kScsYVE.roa (hash: AMR+YDswQHGejlMnTq+0urVDztOvK2YpsO5lA8H1zXk=)
                          2: BHRefR2VcU9Cwhnc_jkStzqaKRk.roa (hash: ZrbTFGtHCrlkSMciC2wWa2wqdIxNJiFYUjns0T4P09g=)
                          3: KwFiVQgCHTlXMY_TYL_laU7APsg.roa (hash: qfYaVhKwplFB9wdvFF2eG+ZvwUUFbi4aeim7C9EVTCM=)
                          4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: FCPslGM6z4xTtdNB33jukTzLa2vT9aPULCmwJ01Mz1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:27:97:fd:f5:7c:b0:01:e2:1c:63:f4:c1:4b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=42afd716ad40b96ebfef6e00260aa1e507d5bb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:b4:87:43:a0:6d:76:5c:d8:fb:0a:49:59:
                    49:6e:d9:51:9b:0c:90:18:a2:d8:60:9a:f0:37:ee:
                    d4:98:6a:e9:62:c3:91:b8:45:fb:89:86:11:db:90:
                    a8:bc:1a:36:fc:55:68:b1:0e:99:7c:e7:3c:83:bc:
                    40:97:0d:34:2e:25:ac:37:d9:e0:f3:1c:8f:98:41:
                    54:43:34:a1:af:68:d0:57:a0:7e:62:38:de:d9:86:
                    07:a5:ad:8d:63:a2:52:c9:ab:da:3f:9e:eb:15:a6:
                    95:a8:68:83:c3:97:4f:58:ec:11:ac:0e:c9:e1:ef:
                    05:90:fa:3c:f9:41:31:f3:db:76:bf:83:e3:50:03:
                    e1:d4:58:ff:e1:52:e8:e9:40:11:c7:c4:af:f2:ea:
                    0f:8a:7c:88:1a:b8:9f:3e:2d:33:40:2f:7b:39:1e:
                    12:f8:18:3a:11:22:a9:47:2f:2d:9c:67:2b:f3:9b:
                    38:fd:fd:50:07:f0:bd:27:87:08:9f:b3:2b:f0:0f:
                    37:75:6c:7d:5b:1d:67:f4:23:c0:d4:a5:96:42:c0:
                    ed:16:3b:14:08:01:51:09:be:cd:d1:34:27:a1:43:
                    7b:ff:f2:35:00:61:9b:94:4a:c5:5f:95:2e:64:ef:
                    11:d9:ae:5f:79:c0:07:9a:ad:16:81:89:13:f9:ad:
                    9a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:D7:16:AD:40:B9:6E:BF:EF:6E:00:26:0A:A1:E5:07:D5:BB:28
            X509v3 Authority Key Identifier:
                keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:ef:77:2c:6f:ed:52:c4:f8:64:78:b5:88:85:5c:d0:3e:
         16:42:0f:3b:cd:2f:2d:f5:07:e8:54:5e:cc:72:8c:99:06:93:
         74:73:71:ee:e2:fb:23:e3:56:48:a8:84:b1:23:6e:91:78:6a:
         83:86:81:66:86:c5:7f:5d:40:3b:6d:c5:c9:fa:38:90:3c:5e:
         39:eb:fb:78:44:d5:7e:42:31:a2:ca:4c:91:dd:86:fa:a8:2f:
         ab:58:73:a9:02:df:1a:68:1c:32:a3:d1:df:1a:0a:a0:c5:d2:
         5d:97:d0:f0:4e:64:9c:63:73:32:4b:0d:1e:d4:12:63:b2:91:
         d0:99:84:54:a0:25:c0:98:2c:3d:9a:e2:7c:bf:f0:42:6f:00:
         a6:74:0e:3d:6c:7d:a4:c0:a3:0b:4d:36:3c:02:ab:f5:2d:a5:
         cd:92:b4:bf:4f:7d:19:7d:b2:8e:49:50:5f:00:e8:3b:b4:f1:
         eb:00:5f:bf:54:b0:3c:54:f0:90:49:aa:88:e2:df:ff:14:82:
         1a:14:dd:d5:90:a9:8e:d5:14:0a:df:b2:75:22:aa:22:0e:2c:
         1a:e4:e6:1a:04:62:a8:14:e8:04:c1:a2:6f:30:7e:3e:d4:b4:
         d8:f2:33:b1:07:fb:cf:16:af:3a:6c:d3:7b:a8:29:63:be:3e:
         6b:94:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----