Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File:                     _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier:          Sre62fsqF0Wdg+10rcjGLIaKfHyQGW3lrFHNwR3bxdg=
Subject key identifier:   80:06:0B:AE:AF:23:DA:2F:05:C7:0F:C4:46:1A:6F:AF:4E:0D:89:CB
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer:       /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial:       01962ECFE91DEC0230AE367A61D6184C6D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number:          0B7A
Signing time:             Sun 13 Apr 2025 11:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:39 +0000
Files and hashes:         1: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (hash: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=)
                          2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: 0I0r8uNrjHBo5Ql8rjtssW+ZzKbfoED/M5Hk73pdlAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e9:1d:ec:02:30:ae:36:7a:61:d6:18:4c:6d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
        Validity
            Not Before: Apr 13 11:01:39 2025 GMT
            Not After : Apr 14 11:01:39 2025 GMT
        Subject: CN=80060baeaf23da2f05c70fc4461a6faf4e0d89cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:b5:76:60:f0:53:d1:34:65:39:f3:2b:ae:
                    ce:78:e4:08:f5:e2:10:20:27:bd:a1:d9:2d:13:ce:
                    22:b8:35:e2:53:23:02:c5:a4:29:a1:6e:b0:31:d2:
                    b4:84:f8:92:91:41:34:d0:7f:a5:7d:02:e7:e1:0e:
                    e4:bc:83:33:88:7e:7a:83:dd:62:e9:9c:af:92:03:
                    b3:25:d3:ae:6d:ec:ad:da:ef:31:cc:18:be:cc:8e:
                    35:e0:58:9a:2e:93:1d:48:13:a9:87:b3:fc:2e:01:
                    78:bb:f3:65:ac:12:35:a4:74:f7:66:67:0a:c8:85:
                    18:76:d1:fe:5a:8d:73:f2:5e:29:b1:6b:25:26:79:
                    e2:35:b0:7a:f1:62:56:49:68:12:b1:26:bd:89:d5:
                    fe:42:db:c4:23:1b:e3:8f:2f:e1:20:22:6d:75:86:
                    89:b9:67:21:7a:7e:84:e2:4b:97:e6:00:e2:c6:54:
                    fa:e4:e3:ad:0f:b7:04:e0:91:e2:9a:df:ed:0b:1a:
                    ec:e1:d7:4f:ed:55:a7:4a:b1:8e:c2:8d:e3:82:5b:
                    98:29:00:76:bc:f1:e5:8c:16:9a:f7:fe:88:ff:54:
                    8a:d4:c8:fc:55:9a:49:cb:7a:6e:f3:e8:05:15:2a:
                    24:3c:27:d4:ad:ce:99:58:30:1a:fa:6a:7f:70:a3:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:06:0B:AE:AF:23:DA:2F:05:C7:0F:C4:46:1A:6F:AF:4E:0D:89:CB
            X509v3 Authority Key Identifier:
                keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:fd:ac:b1:e8:a2:4d:1d:f8:00:ca:44:25:c5:a0:c5:8e:
         f1:c1:9e:4e:71:90:68:1a:28:30:9e:d9:8c:83:35:64:99:4b:
         97:dd:52:87:6d:1e:e1:95:f6:9d:6d:e1:79:84:ea:8a:9a:61:
         c0:dd:01:84:4d:88:aa:19:fb:f4:84:e9:5b:24:f9:86:72:f0:
         81:7d:c7:ea:a0:ea:0e:45:b1:ac:db:31:0c:5e:68:21:39:9f:
         2b:4d:50:c0:06:d7:09:b9:dc:85:c0:18:2b:4c:41:d1:bb:dc:
         66:91:95:b8:45:08:83:fb:bc:bb:31:e8:06:90:a9:88:e7:f8:
         63:27:0e:66:37:79:f3:07:67:45:80:42:7d:ed:a8:01:07:ac:
         76:ab:4b:5f:94:33:34:24:e5:49:d7:35:a2:37:9c:d4:34:f0:
         55:d8:fd:8e:be:ad:5b:01:65:e8:b7:c3:5d:94:1f:fe:dc:72:
         e5:64:9f:70:e6:7a:f3:8f:2c:f1:da:18:bc:9c:2e:a7:01:5c:
         5e:9f:8d:48:20:9c:70:f8:f8:59:72:c2:de:f1:4b:53:cf:a2:
         7b:91:cc:54:8a:e2:8a:5a:21:5a:a4:a2:95:6e:3a:65:09:f7:
         48:e1:82:d9:90:0d:7f:c6:34:cd:c0:12:39:90:96:c8:66:d4:
         fe:70:31:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----