Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File:                     yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier:          1A7sIXkhzKuD+bY6WZ1eO6LWePZXpYmUBH72nq1oyQA=
Subject key identifier:   7D:BF:5B:DD:AA:0F:B3:C4:29:00:00:63:38:2A:FD:D2:02:3A:9E:A3
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer:       /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial:       01962F3D8F04515A8A5081F915FFCE347970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number:          118A
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: h-rZd3ShfaYedaYA6tLbzrX_MkU.roa (hash: 6iJffUIazxHr4GTAEcidCyRV9SNB9d9va8nX06PMskE=)
                          2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: uZ0VbfEN1i0jLcL+z+usMaEVHSwU9tSz+r9wRJk6Hes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:04:51:5a:8a:50:81:f9:15:ff:ce:34:79:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=7dbf5bddaa0fb3c429000063382afdd2023a9ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:60:63:e7:e8:ea:14:da:18:d2:91:2c:05:
                    43:ce:7b:00:b3:52:98:f9:ef:b5:b1:01:9f:7b:62:
                    56:b5:9c:82:2c:cc:d8:9c:42:8f:4d:36:d7:d0:d8:
                    ea:20:2d:90:3b:51:32:9a:41:3f:6d:f5:a8:83:9e:
                    1d:aa:98:5d:24:54:23:88:5f:25:da:53:76:da:ff:
                    e2:9c:a9:f2:d0:6c:db:ef:01:1d:3e:42:ba:5e:74:
                    7c:29:32:70:74:e3:ad:fc:65:81:1c:36:d7:0f:ac:
                    d1:f7:3e:bf:c6:db:e1:db:29:85:d6:14:50:6a:7f:
                    92:d9:d1:65:ba:f8:d8:03:8b:c6:68:ed:53:5b:18:
                    0a:ef:ea:f2:44:64:53:0f:a4:da:41:45:d5:94:ac:
                    ed:93:af:ab:65:db:0b:41:97:b8:7d:24:76:b0:7e:
                    b6:2e:f0:69:6a:5c:29:09:62:a8:4f:67:1b:59:01:
                    79:39:91:f7:d0:6a:1e:16:55:aa:94:50:c9:07:f6:
                    2a:fd:60:a8:9b:23:1c:95:10:7c:c0:7e:7c:4e:8e:
                    81:71:8d:20:e5:bd:c4:a8:dd:fb:16:92:e8:11:ed:
                    90:09:53:bb:87:d6:4d:32:ed:da:da:5b:d0:93:5c:
                    13:69:91:7f:ae:c1:ab:cf:fc:5d:8b:6a:fb:b9:d9:
                    46:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BF:5B:DD:AA:0F:B3:C4:29:00:00:63:38:2A:FD:D2:02:3A:9E:A3
            X509v3 Authority Key Identifier:
                keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:13:b8:e0:bb:2e:97:b1:1e:73:7c:9e:6a:49:64:fb:bc:
         5e:00:0b:cb:67:b6:87:ba:08:43:f7:ae:e4:a5:aa:b5:5e:f1:
         43:9b:5f:9b:9a:c3:f9:e7:bf:ca:3e:c8:67:2e:1b:0a:89:38:
         b1:67:58:6d:ea:88:73:b8:e0:cd:5d:6a:83:1d:cd:d1:12:31:
         5f:0a:58:4d:a0:91:fc:00:03:2b:e2:e0:c7:86:97:dc:55:6e:
         8b:98:70:e5:79:f5:b2:76:87:de:31:21:b0:a1:99:0f:73:de:
         45:d0:00:e0:85:9e:af:ee:d0:97:6f:ab:69:00:e9:a3:bf:73:
         73:75:ee:62:3c:dd:64:9d:58:75:9d:b6:44:57:ee:7b:37:15:
         03:ec:cb:47:fb:76:d6:e0:5d:e9:67:e9:99:93:87:a2:cd:23:
         6e:41:52:e1:47:42:f6:aa:07:8d:6c:f1:9a:fd:87:97:ad:ab:
         11:48:71:72:05:3b:41:51:60:20:99:7d:6e:59:2b:8f:01:77:
         cb:a0:24:94:ae:8c:5e:b2:27:22:69:cc:ad:a1:bd:90:6d:f5:
         d3:cc:47:7c:02:ac:51:ea:4d:de:0a:fc:c1:15:95:81:52:b8:
         3f:ef:f0:19:4d:0a:c1:09:f2:aa:f5:0a:dc:1a:0c:10:a7:8f:
         33:9b:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----