Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
File:                     yYfQn9P8K3BMZhELsCUu4Maxuko.mft (raw, json)
Hash identifier:          4U80XXG2mrNJDSTbnO0ZhNFOBEjHw4+icBahrBLCaZk=
Subject key identifier:   18:99:CA:B6:C2:B3:F9:92:1F:08:32:95:EE:55:EB:CF:04:22:F5:BC
Authority key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Certificate issuer:       /CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Certificate serial:       01962ECFE7599B11DD43CEE32677FBFECA71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 11:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:39 +0000
Files and hashes:         1: jZJbW0BsVFzwOis1-qgAs4YgHTo.roa (hash: Sk/yWlF7AwtnMT+QuY5wwjFpUnvnxIEukFPcttfDcVM=)
                          2: yYfQn9P8K3BMZhELsCUu4Maxuko.crl (hash: 28GKKD4aIWNmXSY6e0XjnWu4d9mODMiRG09Aduxv8qw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e7:59:9b:11:dd:43:ce:e3:26:77:fb:fe:ca:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
        Validity
            Not Before: Apr 13 11:01:39 2025 GMT
            Not After : Apr 14 11:01:39 2025 GMT
        Subject: CN=1899cab6c2b3f9921f083295ee55ebcf0422f5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:78:fa:cc:e0:98:e8:c8:b7:3a:0e:5e:6b:99:
                    15:48:52:75:b4:ac:1d:ec:cf:50:12:9a:53:f1:29:
                    cf:ef:05:50:e9:ab:d6:ce:ff:a8:34:c0:39:24:f3:
                    3b:f1:2b:d3:d6:28:30:d7:83:83:c8:88:dd:82:88:
                    0f:68:fd:6b:76:fc:0e:8a:88:47:b5:bc:07:9d:03:
                    06:cf:47:a2:44:21:8a:c9:45:b2:f8:2c:28:01:d2:
                    f3:16:4d:86:f6:ca:71:c6:9c:bf:fb:c1:b8:e6:4a:
                    04:f7:fd:65:66:86:40:88:d3:4b:d3:22:6e:8c:a9:
                    ac:22:f1:37:c0:9f:be:9f:e3:06:3b:c3:1d:eb:81:
                    cb:b6:05:15:14:c4:a7:18:00:22:e6:11:90:cc:e5:
                    62:ce:2c:5c:28:09:95:50:37:5a:88:64:8c:84:89:
                    91:19:90:2e:bf:4c:db:15:43:ae:bc:97:d1:e4:fe:
                    5c:6c:45:9c:32:61:ed:34:22:c0:1b:67:0c:7d:5b:
                    84:9c:f0:f5:6a:43:5c:1a:8a:b0:5a:5e:ea:57:fb:
                    36:23:77:d4:db:f6:a4:8b:9a:25:32:e4:1e:ea:1c:
                    00:b7:f0:f0:55:2c:90:ac:01:94:51:0c:08:e9:a9:
                    45:97:76:bb:71:24:01:c2:02:1c:d0:cb:2f:79:d0:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:99:CA:B6:C2:B3:F9:92:1F:08:32:95:EE:55:EB:CF:04:22:F5:BC
            X509v3 Authority Key Identifier:
                keyid:C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:70:2a:09:ad:3c:69:14:3c:ea:ed:48:8c:9a:90:99:d0:6d:
         41:38:2e:44:f9:61:ab:e5:ba:05:66:c7:a6:8e:dd:26:dc:a6:
         ce:40:5c:0e:4a:bf:91:f6:11:b1:80:f1:64:f0:46:9b:f5:c6:
         9d:8d:7a:8a:d1:d7:e8:b1:1b:c4:42:2b:5f:9f:40:7b:ea:d8:
         b0:89:69:5c:fb:23:c1:18:9a:ac:a8:c9:8b:6b:fe:1b:e8:08:
         41:9f:48:42:81:25:f4:0b:16:dd:90:8d:62:b4:23:68:8a:68:
         4d:9a:da:54:7f:f7:d3:6a:40:ca:63:67:cd:c3:42:55:4b:46:
         37:03:de:9a:5a:0d:df:76:d3:aa:4c:df:a6:a3:cf:b0:e6:0c:
         45:93:e0:e3:bf:66:41:c0:88:7b:c4:f8:09:09:03:fb:ae:a4:
         b8:c9:08:19:5f:fa:2b:59:d2:f4:b2:fb:ad:f9:ba:ee:72:c3:
         ea:f9:a9:bc:be:fc:e4:44:f2:0d:6e:7a:f4:f8:04:04:c0:f6:
         b6:2f:66:91:a1:0f:63:f5:42:98:d5:fe:87:0b:69:a5:76:9b:
         84:e0:b6:77:06:71:70:38:b1:53:20:67:19:56:d3:ff:0a:1d:
         5c:b1:52:b7:00:92:df:2c:c5:18:6f:73:b0:7f:89:7a:6b:ee:
         b1:32:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----