Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
File:                     yri42pzNTSYbcq2gNKCHVmWmRIc.mft (raw, json)
Hash identifier:          o5ZX8b0dIxemcVN9ZDfYTFZ5cXc74RCEUQsJyzSOoSU=
Subject key identifier:   94:15:D0:4B:2B:74:76:1F:70:77:F9:C9:5E:CC:BF:93:46:F8:E4:3D
Authority key identifier: CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87
Certificate issuer:       /CN=cab8b8da9ccd4d261b72ada034a0875665a64487
Certificate serial:       01962F3D786D2CEFF05882B26F2C557C8FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft
Manifest number:          142F
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: iv4w_q_Q0lB1UAUD7TgMR_xxyYA.roa (hash: fMZ0QGK6B5sX/J++IQoulADhQ3kbWhx95qL8TpCZZ84=)
                          2: yri42pzNTSYbcq2gNKCHVmWmRIc.crl (hash: V5hzxOwdI+7dLZcKO2ZQfSdieNlnq1yiCASD4fb3soc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:78:6d:2c:ef:f0:58:82:b2:6f:2c:55:7c:8f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cab8b8da9ccd4d261b72ada034a0875665a64487
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=9415d04b2b74761f7077f9c95eccbf9346f8e43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5d:2b:57:01:57:d2:e3:22:00:8f:0e:b8:ec:
                    c9:de:03:2f:42:93:12:44:2c:e0:8a:8a:f8:3f:9c:
                    99:9f:06:db:65:8f:b9:16:c5:0f:4b:d1:1a:42:8b:
                    8c:92:e0:84:8d:86:26:5c:94:a6:cf:d9:a8:6f:e1:
                    64:18:8e:29:33:5a:9e:8b:d2:58:d5:0e:02:70:2f:
                    83:49:26:87:ff:4c:23:b3:41:7d:fc:b5:4d:88:c5:
                    01:45:f5:76:d1:42:4f:3c:5d:70:e1:9c:d6:6b:e8:
                    06:10:7a:17:f8:7f:8e:01:07:33:30:6f:06:56:b1:
                    46:25:53:c6:36:d0:c7:d2:2f:ca:de:96:29:41:0b:
                    7d:2c:a3:a1:36:a9:36:8b:0f:d7:ce:4e:bf:cd:1f:
                    70:66:3a:6c:32:b0:0d:c8:e2:1b:6b:a2:55:49:96:
                    97:41:20:8e:32:57:0c:03:56:3d:89:d7:52:09:c2:
                    6c:02:65:9a:c6:e9:ef:6b:49:20:51:e3:78:52:e4:
                    c9:ca:7f:00:48:de:8c:69:ae:7d:9c:00:9a:a0:b9:
                    41:dc:d0:cb:74:53:5d:3f:8c:7f:6c:e7:07:ed:9b:
                    92:57:6f:60:df:8f:33:ae:c6:72:ab:ed:ee:f4:5d:
                    ff:04:d6:fa:e0:e9:ad:f4:4a:95:24:20:75:7c:20:
                    a3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:15:D0:4B:2B:74:76:1F:70:77:F9:C9:5E:CC:BF:93:46:F8:E4:3D
            X509v3 Authority Key Identifier:
                keyid:CA:B8:B8:DA:9C:CD:4D:26:1B:72:AD:A0:34:A0:87:56:65:A6:44:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yri42pzNTSYbcq2gNKCHVmWmRIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/db41c9-e8a0-4f90-a0d5-887509c4602a/1/yri42pzNTSYbcq2gNKCHVmWmRIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:2b:15:20:2c:c7:02:56:30:25:de:46:40:aa:80:7b:db:
         08:f8:aa:14:76:1d:ff:d5:55:c5:3a:41:0b:4c:aa:fa:73:9f:
         43:11:1b:9a:98:3b:b0:68:cd:2d:61:9b:08:61:af:90:1b:36:
         7f:2e:f4:8b:c5:1e:a2:d8:e4:18:e1:f7:50:ea:90:de:46:e0:
         3f:b3:58:c0:dc:74:ac:c3:ab:a6:5f:72:e2:e2:b9:26:2b:62:
         92:04:36:b3:09:4e:31:3f:bb:29:9c:1a:df:f5:1f:0c:99:e2:
         61:75:3d:d8:20:2c:23:f4:2b:c3:71:34:a3:5c:70:ad:55:dc:
         a5:e9:ef:84:24:27:3f:70:5f:20:f0:58:b0:32:ce:61:69:02:
         e7:3e:73:1e:e8:d1:a8:b8:90:4a:2a:fe:90:79:90:98:05:48:
         b9:bd:b1:c4:8d:0d:ec:5c:93:a1:49:0d:04:0b:3a:53:82:83:
         9d:f5:14:dc:b6:91:fb:01:83:54:78:9d:0b:20:e3:aa:7c:9f:
         ab:76:d2:07:2e:0a:26:c3:43:9c:78:aa:a9:99:6f:d1:93:99:
         59:93:e3:73:42:8c:30:01:d1:c9:35:3f:8d:6e:db:cf:4b:db:
         65:60:ab:b7:ca:d7:c4:4f:34:42:8b:fa:73:22:77:60:ef:d3:
         2a:a4:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----