Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File:                     Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier:          xIplG0djwD/dqOO49Cv6bEWSB5QggkJtiTZZUbIL6TA=
Subject key identifier:   34:C6:49:F8:3B:5E:B2:79:E0:9B:B6:FE:11:FB:E0:52:49:79:D5:55
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer:       /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial:       01962ECF7FB44489E205E3DBC8FDA97A49A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number:          0B6E
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 1c8AtbAMfHlASe1nRmNmVLi-IPE.roa (hash: Yc6B/ACFRjBHZdeDucnbU591dd3oO9WG4VeSfIdJAWg=)
                          2: B-YGSnw6mlzmsy9e1WdnYiYl8uA.roa (hash: dqAKP/dgHYPVRyqQIAqMlRLtWiN+IpM+mjudxWdaulM=)
                          3: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: N8xSB72N4GTCFq1zaIMlNMk2M9EFKI7kOfqMMN4vhmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:b4:44:89:e2:05:e3:db:c8:fd:a9:7a:49:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=34c649f83b5eb279e09bb6fe11fbe0524979d555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:fb:9d:d4:ac:c2:88:37:6b:96:b9:d3:f3:
                    65:f8:b7:8d:2d:8d:21:71:2c:5a:31:2a:58:07:11:
                    05:bf:3b:17:04:ad:e4:84:1d:53:55:8f:69:72:34:
                    06:db:1c:a6:0c:5d:ff:4e:20:59:02:40:97:5e:ec:
                    0a:43:72:44:2f:a9:ac:83:0d:4f:af:63:8d:83:7b:
                    42:2c:e7:0f:11:66:76:f9:fc:84:ac:06:f7:9b:84:
                    7a:e7:08:4b:67:d1:31:fb:26:a5:72:5d:d4:75:2e:
                    dc:9e:48:fb:f0:24:13:93:39:a6:69:85:63:19:aa:
                    03:39:69:58:d0:d3:12:72:91:94:a5:7d:5c:33:b5:
                    16:24:d1:14:1e:8f:f9:ce:5d:33:7b:3b:2f:2a:40:
                    cd:6e:71:b2:1c:3c:a8:68:6f:91:2b:24:3c:13:9a:
                    7b:20:64:c1:96:2f:38:0a:11:1d:c8:2e:90:15:26:
                    cd:ea:81:cf:62:f6:ef:88:ed:3d:17:7b:6d:72:01:
                    3f:ca:9a:76:ea:d0:47:dd:fa:19:89:a0:89:dc:45:
                    92:2e:c4:80:fa:50:be:fc:96:27:b5:b0:38:17:be:
                    a1:42:7a:90:93:af:fb:27:1a:3d:69:1c:5c:58:88:
                    05:f9:5e:c8:84:2f:be:ec:1a:e2:a0:68:2f:55:eb:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:49:F8:3B:5E:B2:79:E0:9B:B6:FE:11:FB:E0:52:49:79:D5:55
            X509v3 Authority Key Identifier:
                keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:e2:8c:4b:3f:32:cd:71:1d:87:f3:b4:b1:36:81:3e:b7:
         d0:7a:24:a4:80:c4:7f:69:8e:6e:98:e7:8a:ce:11:b3:74:cc:
         38:ef:ad:8c:9d:b8:f0:34:69:a8:78:0a:27:52:46:27:1f:b8:
         4f:19:5c:73:38:13:8e:1f:79:02:56:f6:d6:5e:9b:39:e8:59:
         8d:98:7a:b9:5f:60:fa:1c:c6:57:6c:26:3e:0f:1f:38:f4:bd:
         85:db:f4:38:c6:7f:f8:54:00:8d:76:69:de:d2:e2:2a:a4:10:
         55:dc:11:a3:26:03:ce:a5:2e:73:9c:b4:d4:07:ac:2b:4e:d4:
         43:f9:a5:95:cf:79:58:87:5d:ae:67:5a:6a:08:44:e7:a7:25:
         2f:2d:d9:42:22:24:43:af:03:67:b5:37:d2:15:4c:93:83:04:
         bc:03:a4:60:2d:3d:fc:c8:83:ea:d4:92:f6:0c:4a:fd:ad:a8:
         70:8f:b0:7d:25:17:71:50:cf:a7:44:ab:a1:4e:9b:9e:4f:26:
         07:78:6e:19:6c:8d:a3:ef:6f:ef:ef:87:34:5d:ab:60:d8:7e:
         1f:cd:fc:9d:33:65:12:10:e3:94:92:db:ac:2a:b4:71:4f:ec:
         c2:59:da:68:62:ab:2e:8c:55:fa:08:c9:ff:d8:d8:bd:67:09:
         12:4e:68:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----