Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
File:                     YEBzL9vKpSkA2yRiB1v07xUVlpU.mft (raw, json)
Hash identifier:          xjEdOEZTlkz15eCo+aJJzzTAUafM5BzjsIUbS27kwoI=
Subject key identifier:   E3:0E:00:7D:83:F6:EE:53:9E:8B:22:B7:9C:1F:96:6D:07:E1:CA:B1
Authority key identifier: 60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95
Certificate issuer:       /CN=6040732fdbcaa52900db2462075bf4ef15159695
Certificate serial:       01962E2B200DE9DD8004242C29B5229F52A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft
Manifest number:          039A
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 2zI93eWS4MAq1q_HzWCmHMK0vvc.roa (hash: OPrS0FrS6pSekQT7FXidaqihz4eIxPAHQ00wl3WWNU8=)
                          2: YEBzL9vKpSkA2yRiB1v07xUVlpU.crl (hash: o42sBn3NC+fl9ijdK77Kl4ssFbW51T6ty4PS57R+ZIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:20:0d:e9:dd:80:04:24:2c:29:b5:22:9f:52:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040732fdbcaa52900db2462075bf4ef15159695
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=e30e007d83f6ee539e8b22b79c1f966d07e1cab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:2e:00:f6:5b:12:a9:6d:69:af:17:8a:e5:
                    d3:96:e0:b3:37:39:69:3a:ba:df:ef:3a:53:b4:97:
                    44:40:0d:4a:2f:5d:89:71:28:55:99:6d:4f:cd:b9:
                    25:d4:f8:6a:fe:34:13:6f:93:06:1c:4b:ed:aa:64:
                    3f:3a:fb:6b:48:41:cf:e2:cc:19:a5:79:7f:c0:c4:
                    82:4b:a1:37:b3:71:be:5c:49:41:bb:7c:46:07:42:
                    5f:34:10:78:1b:7e:fc:79:cb:b7:a0:bd:d5:7e:c7:
                    1c:a5:42:71:7b:0f:8f:bb:08:af:00:1b:3b:90:27:
                    d3:b9:aa:15:8e:91:1e:c1:48:2a:d6:78:64:a8:56:
                    62:e3:a1:26:d0:cb:cc:f7:68:45:c9:64:c5:d4:e4:
                    3c:f7:84:e3:85:b1:39:66:d5:f0:45:48:9a:9f:0d:
                    5f:74:a4:33:e3:1c:f3:1b:b4:06:ce:71:79:45:78:
                    40:d7:8c:fb:0a:56:c9:68:c5:52:b8:45:06:5f:93:
                    33:d3:25:04:3a:05:5a:e6:c5:47:b1:e8:10:65:ce:
                    80:62:43:2d:f7:eb:9a:a7:de:a2:ec:9f:90:af:7a:
                    06:85:00:3c:64:d5:40:28:bc:85:2e:54:0d:6a:b5:
                    bd:77:49:00:ad:0f:cb:e4:15:1f:5b:5f:ae:49:59:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0E:00:7D:83:F6:EE:53:9E:8B:22:B7:9C:1F:96:6D:07:E1:CA:B1
            X509v3 Authority Key Identifier:
                keyid:60:40:73:2F:DB:CA:A5:29:00:DB:24:62:07:5B:F4:EF:15:15:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEBzL9vKpSkA2yRiB1v07xUVlpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5676a3-9c39-4db0-951e-d2b6982bc484/1/YEBzL9vKpSkA2yRiB1v07xUVlpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:14:65:4e:db:a0:bf:87:31:a1:a1:8d:80:e0:48:97:5a:
         6d:13:2a:bb:f4:1f:e1:5a:10:ba:b5:16:23:0d:0b:96:de:0d:
         fc:0d:de:5b:7d:66:27:26:60:72:99:a0:fd:25:be:e5:2f:4a:
         64:59:45:ee:b0:6d:7c:1c:1a:3b:d6:e5:8f:81:9c:64:2e:c2:
         aa:90:0b:6c:eb:e4:a1:4f:a8:16:93:78:70:26:70:26:ad:ba:
         50:d7:27:6d:b3:6c:2a:ce:f6:7e:a5:a3:a9:a2:00:ee:86:ab:
         a6:82:61:a5:bf:c0:b5:cf:8d:a3:fd:2a:a1:49:e9:ea:d6:13:
         b9:11:05:3e:91:42:73:62:22:49:48:5b:57:e6:65:e8:35:cc:
         bb:b0:6f:62:94:20:b6:16:39:ee:7e:a9:bf:95:ec:03:03:04:
         61:11:5a:86:e9:a4:b5:db:b4:aa:7d:0c:63:73:05:57:01:3f:
         a1:81:bc:de:b9:7c:80:62:cf:7b:38:e5:81:f6:3b:8a:de:53:
         e1:b6:1a:bc:da:75:31:b5:29:77:2a:08:12:f5:e6:ac:3a:bc:
         6d:e9:aa:dc:2f:62:ec:fd:20:ed:59:c2:f3:fc:5d:b8:7d:d2:
         3a:55:f9:1e:c6:bd:98:b2:dc:a9:d8:f1:75:ed:28:a9:cf:c9:
         21:23:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----