Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
File:                     yj7NoA-sC_tjsoVD6itdXx5N9ss.mft (raw, json)
Hash identifier:          F4NrPok114f/Zo5zX94C95nUkRkyXF0CCWvTi6W+ZD4=
Subject key identifier:   DC:14:EE:76:D2:0B:21:66:81:FA:BF:37:57:69:86:1E:1C:EF:67:4E
Authority key identifier: CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB
Certificate issuer:       /CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
Certificate serial:       01962FAB255F5017F7A9A5B1FA182AF0E256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft
Manifest number:          E7
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: yj7NoA-sC_tjsoVD6itdXx5N9ss.crl (hash: GaRZ9ODmkiN8djHVAYxdo0bicB6ccYBg5Wn6Yv4sls4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:25:5f:50:17:f7:a9:a5:b1:fa:18:2a:f0:e2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3ecda00fac0bfb63b28543ea2b5d5f1e4df6cb
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=dc14ee76d20b216681fabf375769861e1cef674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:5b:0b:06:2e:00:e5:c1:19:3a:18:4b:b8:
                    80:82:a7:4e:01:99:a2:0a:a3:9e:2b:7a:8c:93:ee:
                    64:39:17:b7:dd:9b:02:9d:18:72:5e:ff:e9:15:ea:
                    5c:e3:26:9c:3a:8b:89:03:ad:6a:44:2a:2b:44:20:
                    90:61:e9:09:a2:54:d6:eb:32:23:66:cb:b8:ea:1f:
                    03:00:11:30:86:c3:39:4d:40:b6:c5:5f:1c:60:15:
                    6a:7e:d1:e3:86:4c:8d:23:a9:33:fb:8a:ae:51:d7:
                    57:8d:19:a5:42:41:6a:4c:8a:b5:c7:1a:8c:0a:6b:
                    66:c1:a9:c3:66:ea:21:47:1a:b6:3b:66:0e:a2:d0:
                    27:f5:ed:9f:17:69:c8:de:81:42:20:e8:cf:9a:eb:
                    5c:31:d7:4c:a0:9e:c6:4d:81:c7:c8:a6:5d:e1:05:
                    c8:f1:36:9e:e0:9c:ef:28:92:64:99:a9:de:74:6a:
                    e2:97:3b:9f:51:59:d1:28:c9:85:64:c7:2e:64:1f:
                    7a:d6:8b:37:f7:cf:72:f2:5e:d8:9d:cb:aa:84:49:
                    45:77:ec:b1:0d:0b:d5:85:a3:71:bf:3f:f7:2e:09:
                    d1:09:f9:94:4b:de:b1:d3:74:da:3b:92:81:d6:43:
                    66:d5:55:05:b5:dc:cb:b5:13:4d:ba:19:4a:fa:a6:
                    e9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:14:EE:76:D2:0B:21:66:81:FA:BF:37:57:69:86:1E:1C:EF:67:4E
            X509v3 Authority Key Identifier:
                keyid:CA:3E:CD:A0:0F:AC:0B:FB:63:B2:85:43:EA:2B:5D:5F:1E:4D:F6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yj7NoA-sC_tjsoVD6itdXx5N9ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/82eed1-d9d5-40d8-ba58-3f9960865d0f/1/yj7NoA-sC_tjsoVD6itdXx5N9ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:a8:8a:f7:4b:32:20:16:3a:f9:63:28:9c:8c:74:59:73:
         a6:26:64:67:85:f2:55:77:39:e8:c4:ff:b0:3c:89:78:33:1c:
         27:bf:7e:15:3e:8e:00:aa:47:bf:8d:58:83:1a:a5:94:ab:12:
         1e:97:e5:97:64:29:66:f5:38:0b:1a:aa:f6:9a:d7:9d:78:4f:
         00:d7:c5:ef:0c:c3:3c:bf:d8:ab:ba:93:8b:82:34:cd:d3:90:
         ee:73:09:c8:b2:ea:bb:c1:3c:90:71:ff:81:63:9b:d8:88:c9:
         aa:ad:bd:29:af:1d:69:ec:ba:84:11:f4:66:1f:8b:a7:b9:dc:
         94:24:a1:f9:02:36:40:c5:bb:2c:f0:67:00:e6:d2:4b:4c:a0:
         9b:9f:32:ae:56:79:3e:9a:67:4a:8d:95:9c:78:cd:c8:8e:3e:
         87:a2:d6:fd:8d:40:e1:53:d5:6b:30:6f:92:97:42:3e:25:18:
         f5:7c:3c:59:28:41:76:de:3b:eb:34:6c:48:2e:9e:ec:f3:4d:
         1c:71:f0:30:6e:de:1a:99:bc:ce:66:68:73:23:39:8d:95:6b:
         96:79:6f:b9:28:f8:aa:ff:bb:96:ed:7a:c3:ce:d2:79:9c:6c:
         24:fa:5f:77:83:b7:7a:76:21:26:2d:5f:98:a8:bb:81:d7:49:
         b5:7a:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----