Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File:                     yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier:          xwkAXDsubsRcwyxiLscO2t7Qm+taNACD/9Ky5IL/0E0=
Subject key identifier:   1C:A6:66:10:9E:A3:58:51:A6:9C:E0:53:69:03:6E:DE:F9:90:45:AB
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer:       /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial:       01962E994F45EAF4440877866029EACCCD57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: 4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (hash: 9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=)
                          2: 7t39UO78LeFsKwD7CJstzTknIXs.roa (hash: QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=)
                          3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: UKsS6667DtI68lYZEoXDkoSRL8qi8yRjd4v0tZmUnFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4f:45:ea:f4:44:08:77:86:60:29:ea:cc:cd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=1ca666109ea35851a69ce05369036edef99045ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:08:5c:f1:64:2c:91:06:7e:c5:36:00:f6:
                    4f:a0:a0:b8:20:65:98:46:63:b2:72:9d:ff:e1:ad:
                    c4:e4:84:cf:86:f3:84:a4:79:49:99:a0:a5:78:53:
                    90:33:e8:86:ad:d6:47:50:64:7d:ad:77:54:48:4c:
                    8b:ef:03:ca:95:2f:17:5c:9d:dc:9d:6f:bd:82:ca:
                    2c:b3:81:ed:8b:d4:db:1c:ab:d0:c0:53:46:53:c0:
                    f2:d6:9d:57:dd:86:13:7d:ac:a7:76:44:c9:6a:6f:
                    38:8c:14:b3:96:8c:b2:19:a8:26:ba:08:31:05:e0:
                    5d:67:67:59:c4:54:9e:47:18:05:dd:3e:1d:96:fe:
                    73:74:9e:47:aa:49:0c:ef:f7:06:aa:33:98:27:69:
                    a5:f5:45:53:69:b2:4f:43:14:6c:1b:04:3c:73:c9:
                    e6:d9:8e:f4:a4:d9:bd:22:b9:31:73:fc:06:8d:26:
                    36:9b:d8:bd:54:ef:4a:38:89:7b:35:2e:8c:00:cc:
                    f8:66:74:5c:16:a1:97:10:54:a1:60:15:b3:01:df:
                    c7:3e:eb:ce:59:f9:48:ba:e2:d5:c8:34:14:00:c3:
                    e1:50:b7:73:1a:91:df:e8:32:8e:7e:06:13:49:97:
                    ea:ad:21:3e:12:e8:6c:7f:15:07:2d:01:7a:42:72:
                    90:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A6:66:10:9E:A3:58:51:A6:9C:E0:53:69:03:6E:DE:F9:90:45:AB
            X509v3 Authority Key Identifier:
                keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:58:b2:d0:3e:8f:4a:03:a1:ee:d0:f5:08:7f:6f:32:d8:c0:
         00:a1:78:8d:9b:ee:54:06:a4:5d:12:03:b9:81:e6:3e:b3:8b:
         68:3e:22:67:df:15:01:5f:15:cd:60:d2:be:f9:97:61:78:ae:
         46:12:fd:12:6c:b1:bf:44:e6:e5:e9:cc:39:46:9c:96:af:c3:
         08:f4:e8:64:cb:2f:ce:df:3a:16:5d:a0:e6:cc:2d:9c:29:6d:
         e3:52:70:22:ae:d0:1a:1b:ac:af:7e:27:54:37:68:c4:85:39:
         99:d5:df:04:07:3e:ec:51:05:f2:2d:18:86:85:8f:19:3a:23:
         47:04:90:38:2d:0d:35:7d:89:c1:90:1b:79:2a:56:26:ca:82:
         f9:dd:53:aa:7a:6f:67:28:6b:62:28:5b:a5:79:04:8c:ae:cd:
         26:cd:5f:17:cf:4f:41:78:96:a1:bb:0b:db:f3:af:37:1a:bc:
         0d:bb:a2:ae:88:9e:e9:86:49:fc:c2:94:51:43:97:a8:13:19:
         21:da:05:e5:d6:f7:e1:c7:5d:5a:5b:91:29:0c:f3:35:32:64:
         53:de:67:46:24:61:af:e3:fb:37:da:4c:03:5c:e3:dc:9f:66:
         f0:a4:90:c6:31:00:b4:02:28:b4:59:98:dc:88:7b:9d:f6:e3:
         ed:01:c1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----