Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
File:                     Y4H3IILjEgadg9mvTzGc8K-ANkc.mft (raw, json)
Hash identifier:          7OWz8a8xavuFFnYXrzAbPahltzMVPpZsJYraZyIHBio=
Subject key identifier:   CA:E8:C1:2D:37:84:49:CF:34:32:AE:47:56:6D:E7:78:CD:F8:BC:70
Authority key identifier: 63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47
Certificate issuer:       /CN=6381f72082e312069d83d9af4f319cf0af803647
Certificate serial:       01962DF3A38CFAD7CCA79A6DADB20262C66D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: Y4H3IILjEgadg9mvTzGc8K-ANkc.crl (hash: aKSNnUMumhS47sk+MNEfJnZQd2yiU83p2fQQroIA4SA=)
                          2: dOaeIHruifCT3_Y-NZ9ouvbnhuc.roa (hash: PG+NsqO34TjeMURDoubqwQXu9F/XY0vJGA8jsdkgloo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:8c:fa:d7:cc:a7:9a:6d:ad:b2:02:62:c6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6381f72082e312069d83d9af4f319cf0af803647
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=cae8c12d378449cf3432ae47566de778cdf8bc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:fa:3b:82:3f:ff:2d:58:94:fa:c6:4c:92:
                    70:0e:f1:df:1e:27:cb:9b:b3:ae:e4:72:25:13:73:
                    34:97:d3:d4:12:28:f7:0d:37:d2:23:c4:56:32:e1:
                    b3:db:9d:5c:8a:93:e6:fb:4d:15:c7:2b:16:3b:80:
                    ab:d1:24:7a:d8:65:38:2c:af:78:9d:cb:ba:16:c4:
                    66:90:0f:03:2b:56:5d:6c:78:68:58:7d:91:ca:3b:
                    57:da:0e:fc:56:21:87:fa:f8:40:a6:33:26:f9:46:
                    f7:be:43:be:ea:60:56:54:a0:6e:a8:84:0e:3b:2d:
                    4b:16:2a:26:43:c7:2e:c1:fc:35:7c:d1:81:8d:77:
                    13:f6:fa:22:d3:57:2d:b2:14:69:5f:d6:95:7a:81:
                    17:a3:17:26:d6:df:85:3c:96:b4:b9:ac:1c:84:7e:
                    97:e2:b8:52:e5:9f:81:01:87:ee:2c:6a:80:2b:b1:
                    6f:23:2e:c1:fc:5a:79:99:13:39:02:09:a7:28:c3:
                    ab:bc:b0:48:22:e8:f5:14:d4:dd:8c:0b:10:27:84:
                    85:a2:3f:fb:42:73:98:7f:e6:a1:0e:70:fe:cd:16:
                    c3:aa:d5:7b:16:82:ca:7e:cf:8d:94:ed:ea:60:57:
                    eb:d6:d3:c2:24:62:fb:b6:eb:44:99:dc:b7:1f:36:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E8:C1:2D:37:84:49:CF:34:32:AE:47:56:6D:E7:78:CD:F8:BC:70
            X509v3 Authority Key Identifier:
                keyid:63:81:F7:20:82:E3:12:06:9D:83:D9:AF:4F:31:9C:F0:AF:80:36:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4H3IILjEgadg9mvTzGc8K-ANkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5ebc5d-8683-4c37-a050-20ef42c9bc38/1/Y4H3IILjEgadg9mvTzGc8K-ANkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:4b:37:17:2c:fe:fc:2d:30:a7:8f:d1:f4:85:f3:c8:74:
         86:b5:a7:5a:83:28:5e:e1:e7:44:65:09:d5:25:21:b9:62:fd:
         e2:d1:1a:90:69:4c:00:67:13:8a:fd:2b:81:d8:9d:03:f6:dd:
         ea:51:ea:d4:b7:19:16:a3:82:db:20:93:35:0b:69:6a:b3:33:
         78:7f:26:df:16:4a:68:18:c8:ae:7a:80:b9:03:17:fb:18:d0:
         95:fa:69:cb:18:5c:16:97:15:29:a3:1f:3b:37:cc:25:48:89:
         c0:72:94:55:ad:18:73:e2:8b:ca:0b:7d:04:26:b7:dc:d6:24:
         85:32:47:19:6f:78:19:5d:ac:9b:fc:35:0d:e7:7d:54:67:bb:
         d5:1e:66:97:5a:18:7f:b8:02:f8:f7:ac:e6:50:b6:7f:0b:5f:
         6d:8b:12:71:a0:fa:f5:a4:5c:4e:cc:b3:1e:4d:50:b8:db:1f:
         e7:c2:ce:bd:fd:16:a8:54:c7:32:a7:1d:fb:ad:5d:9f:dc:c7:
         16:62:d3:3e:3b:94:d7:0d:b0:e9:0e:d8:0b:40:99:9f:c4:ee:
         a2:13:42:75:e3:b9:b1:aa:61:f3:85:b1:f3:55:4b:85:12:50:
         f7:f3:b1:b3:16:a2:c6:4f:bd:cb:dd:8f:62:14:dc:55:42:d0:
         a3:d9:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----