Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
File:                     yyVzFrhB13Pct5reio8-clnxEqs.mft (raw, json)
Hash identifier:          Y8UdLQk/Wa6Fqr5FOhq1QN521ut8me8loUIYBqWYrvU=
Subject key identifier:   BA:F8:EE:3A:94:96:C0:98:76:A2:49:A9:97:86:DF:63:8D:31:44:47
Authority key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Certificate issuer:       /CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Certificate serial:       01962F3D835A777D4063DFBBABE725F8485E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
Manifest number:          0493
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: OD_06SfZ3_hheASbKyQTBpKLvXQ.roa (hash: ybCs4Tm+I7vGFeJISbNMcOaCuI5hMEk5Vs5Dolkyuw4=)
                          2: yyVzFrhB13Pct5reio8-clnxEqs.crl (hash: TpvXQtbshSbdeFFZuWP1aoMUep4HHQtFwhF5VZiaX9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:83:5a:77:7d:40:63:df:bb:ab:e7:25:f8:48:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=baf8ee3a9496c09876a249a99786df638d314447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:6e:68:ce:1c:14:a4:03:cf:0f:99:c8:1e:
                    0e:b8:8a:75:52:b3:a3:c8:37:61:2b:05:c3:3c:05:
                    98:07:da:3e:d3:d7:75:ea:e5:b1:3b:6a:2d:d4:25:
                    1d:d2:d6:f5:a3:50:27:2e:16:34:83:1b:bf:0e:b5:
                    41:3c:a4:f3:2f:02:67:01:04:f2:ba:70:cb:ac:46:
                    49:e2:a9:99:2a:11:4c:0a:c2:66:f0:60:a6:17:88:
                    d5:e6:8a:45:06:62:fc:67:8b:ee:8e:22:8c:33:7d:
                    82:52:e5:5a:03:34:b5:09:d2:e2:dc:e9:8e:8a:0d:
                    db:44:0d:3c:c8:7b:51:a0:33:42:93:39:22:a4:eb:
                    dc:de:9f:ed:9c:50:00:7e:99:40:ca:f0:54:7a:22:
                    3c:ef:96:9c:7b:88:02:78:06:95:18:51:f1:a4:ce:
                    d0:63:4b:ac:42:61:e8:30:35:3d:37:cc:bc:21:e9:
                    32:3a:e8:1c:8b:36:d8:5b:eb:e1:43:8f:05:a5:42:
                    62:ed:2b:f7:91:7a:ae:0d:44:03:79:a8:0c:66:94:
                    4d:95:ae:1f:85:98:f9:64:65:63:28:1f:4e:a6:99:
                    b3:df:a1:98:08:82:dc:e4:1c:f3:3a:cf:3b:ab:28:
                    15:68:17:d6:06:12:f5:cb:12:f3:16:50:21:64:f2:
                    60:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:EE:3A:94:96:C0:98:76:A2:49:A9:97:86:DF:63:8D:31:44:47
            X509v3 Authority Key Identifier:
                keyid:CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e6:23:c1:53:70:c7:15:fd:cc:47:cf:a3:1e:d2:39:9d:17:
         57:2a:fe:ea:04:4d:59:9a:76:d3:b0:da:9e:bb:79:0b:e0:9e:
         48:6e:0b:60:91:cb:ba:d2:ee:cf:22:85:97:bf:33:32:59:59:
         ef:1f:21:be:35:d0:9c:b3:64:79:24:39:41:d7:49:2d:f9:35:
         38:56:ae:7f:88:71:e7:64:b6:b7:70:bc:bc:6f:80:77:a1:02:
         d8:21:b6:e2:8e:9b:11:34:e7:07:da:63:87:4c:87:f1:e5:a0:
         2a:f7:92:40:40:88:03:de:69:bb:e1:cb:27:3f:01:b9:60:4b:
         e1:56:fa:bd:1d:48:12:4d:4a:83:45:a2:57:19:8b:b5:df:64:
         07:33:b0:1c:15:8c:6c:16:df:b5:d4:c4:58:72:34:f7:b9:54:
         8e:61:e1:5a:0f:5e:fd:d1:59:18:8a:a6:02:6f:0c:1b:ee:1d:
         a9:da:2e:11:d5:93:0a:1e:97:b4:90:7a:dc:63:20:b2:04:b3:
         51:9e:2f:40:ef:cf:04:d2:96:1d:f7:5a:39:c6:e6:09:6e:73:
         48:a9:31:94:1c:aa:ff:39:7e:f8:bf:ff:c5:e9:06:df:e0:5c:
         d4:f0:05:df:c5:90:b2:1f:72:80:4d:d1:ea:65:2f:2d:7c:55:
         0c:ff:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----