Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
File:                     dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json)
Hash identifier:          dxLnxVfcp+R6f03IXbbxR/IO430Z+vO9JMDh0mnEEzw=
Subject key identifier:   1C:E8:C9:3F:5D:C8:3B:78:EF:27:20:33:E7:B8:6C:AC:F5:F4:6F:F1
Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC
Certificate issuer:       /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
Certificate serial:       01962E993EB384FFCF1A1FC2C8A77BE35BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=)
                          2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: Brlpa7NL1JNh+3QyRK67hHjz+RYGdIOe71jK/A298Zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:b3:84:ff:cf:1a:1f:c2:c8:a7:7b:e3:5b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=1ce8c93f5dc83b78ef272033e7b86cacf5f46ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:1d:64:74:62:fb:09:6b:d2:9b:d2:37:fd:
                    bc:b7:c9:04:5b:e0:bf:1e:9c:5c:73:5f:2a:97:bb:
                    d8:1d:33:11:23:cb:f5:83:ce:ee:83:5a:19:44:9c:
                    8a:53:71:4f:aa:ff:46:b9:98:c3:1e:91:e1:1c:d1:
                    fd:d4:72:8a:02:50:c8:dd:67:e2:d4:d1:03:18:b2:
                    78:08:a6:fd:d9:3b:8a:f5:40:25:0a:60:29:fc:f4:
                    3c:1a:bd:f4:ff:86:b6:8c:e7:a6:ec:3d:7a:3b:7f:
                    aa:c5:93:09:7c:8c:a6:46:09:d0:6c:a0:9b:16:7d:
                    7d:f4:3e:f3:64:19:31:99:6f:8e:4e:23:cf:7e:9f:
                    3b:b0:4e:ec:6a:9e:4b:14:9a:0f:56:19:cd:3a:3c:
                    28:8a:39:94:d3:67:2a:6a:15:2c:2c:86:86:0b:d7:
                    c8:a2:8f:fa:f1:65:fe:86:9d:63:6b:ca:ba:d6:50:
                    57:a5:99:2a:fc:1f:83:84:b8:67:8a:0c:80:5f:e1:
                    03:58:bd:81:a6:ec:a2:0d:92:4f:d4:31:53:38:8b:
                    8b:39:9c:09:71:55:14:d0:05:72:ce:47:41:7b:4c:
                    7f:0d:d4:da:f8:81:d5:ec:f6:52:9c:db:f3:35:39:
                    9c:31:17:46:71:c1:4a:2c:6d:e0:31:fc:a6:ed:ce:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E8:C9:3F:5D:C8:3B:78:EF:27:20:33:E7:B8:6C:AC:F5:F4:6F:F1
            X509v3 Authority Key Identifier:
                keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d3:5e:8e:66:dd:7b:96:59:8b:51:41:4f:79:39:42:37:fa:
         b0:eb:ac:e7:eb:1c:dc:3c:58:50:e5:67:80:ea:33:f6:9e:f0:
         17:12:a7:fd:da:39:6d:55:db:74:da:e9:e0:2e:23:41:8e:57:
         74:c8:14:7b:25:d4:16:cb:61:fb:2c:e8:66:ff:6f:02:64:d7:
         74:95:60:82:25:f0:2e:3e:79:6c:e0:ab:2f:58:46:86:1e:64:
         19:cf:e5:1f:02:d1:17:a1:23:d9:3e:d6:e0:3f:06:c0:a8:1c:
         f6:67:0f:ac:56:d8:55:62:d6:54:85:bf:8e:1d:90:db:14:c6:
         1a:68:0f:9a:d9:18:b9:de:2c:39:41:4e:3d:c3:44:b3:1e:17:
         bd:54:66:ed:db:97:2e:f0:97:64:f5:a8:4a:5b:94:2b:c4:0c:
         8e:2c:11:3d:fc:79:85:e6:65:04:fa:c1:e6:2e:6f:65:b3:0c:
         69:cc:21:f6:9b:7f:e3:9c:da:57:e8:37:2b:87:a0:47:97:6c:
         95:47:a9:19:79:e6:c6:ff:8e:d7:f1:7c:ad:f9:4f:e2:78:b9:
         87:84:32:22:ab:31:da:00:83:c6:df:90:35:15:6c:1f:a6:86:
         30:e5:10:13:22:af:de:3b:a2:a3:8a:3b:d2:86:b9:5b:63:d4:
         ab:b1:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----