Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
File:                     yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft (raw, json)
Hash identifier:          qUui7Y0/zv2W4aoiC4lDQ/Bw/eihhnchrSGjxSgCEPY=
Subject key identifier:   15:6D:11:DB:FF:12:B1:81:D8:84:56:77:FF:0D:04:82:29:9F:6E:C6
Authority key identifier: C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5
Certificate issuer:       /CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
Certificate serial:       01962DF39C42E164B4EA82FF84B19AA1ECA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft
Manifest number:          ED
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: llQmZ7ox31md1xrVsOBux0Zjo94.roa (hash: zilK3SjPa7if6qVjP4zB4BrLdTd+JnUFnl8CYZtGV0I=)
                          2: yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl (hash: WK1ngcdFouIi8EvwfbA2lkbx1dLavJBpGNqnXR00jF0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:42:e1:64:b4:ea:82:ff:84:b1:9a:a1:ec:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c6892a68ce50a186c0d60cd5c9e4c988ce16c5
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=156d11dbff12b181d8845677ff0d0482299f6ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:ed:bf:19:0c:4b:83:22:fd:07:d5:db:89:
                    7c:36:c8:16:e7:56:5b:a6:89:28:a5:f1:8b:ba:a3:
                    a8:a6:27:c4:21:fb:66:d8:ef:66:b2:6b:b0:82:5f:
                    15:4a:6e:a2:75:e1:60:26:94:cd:ba:8f:73:fc:c1:
                    7b:d4:92:76:cd:73:fb:50:2d:58:fb:2e:4d:c0:11:
                    ce:31:76:91:1e:4d:90:08:1d:fc:99:85:3b:25:45:
                    e4:25:16:a1:22:4e:cc:62:2d:a1:26:62:15:84:d6:
                    ca:31:79:16:a8:0b:47:0a:3c:98:05:4c:74:f8:97:
                    2f:69:a6:4c:4d:1f:c8:13:8e:b9:99:0c:38:bc:dd:
                    35:f3:79:3d:82:08:e4:a3:97:b1:91:46:55:29:b0:
                    a1:63:d0:03:5a:3d:49:b0:7f:cb:a4:9c:7f:57:b5:
                    cb:da:6c:c5:87:b4:fe:46:e0:3d:e0:c1:3b:ec:81:
                    26:f9:f1:0d:3e:f0:62:0c:89:9b:e9:09:34:93:d7:
                    9c:4a:5a:33:6e:6e:66:6a:f5:66:a4:85:11:af:5d:
                    12:d1:60:e6:c7:03:b9:da:69:db:b0:b8:19:31:b2:
                    a3:4b:9a:28:8a:b8:d7:d6:c6:60:19:0f:b3:5b:62:
                    fd:6d:e1:79:d3:8f:25:f2:a9:49:5c:1c:18:8e:c2:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6D:11:DB:FF:12:B1:81:D8:84:56:77:FF:0D:04:82:29:9F:6E:C6
            X509v3 Authority Key Identifier:
                keyid:C8:C6:89:2A:68:CE:50:A1:86:C0:D6:0C:D5:C9:E4:C9:88:CE:16:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMaJKmjOUKGGwNYM1cnkyYjOFsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ff5ffc-22ff-46a1-8d2b-d34d120287d3/1/yMaJKmjOUKGGwNYM1cnkyYjOFsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8e:dc:f8:98:1f:47:b6:d4:ca:64:e4:8f:39:f4:6a:bb:6d:
         59:36:f8:87:2c:d5:f3:a9:ab:ce:5d:88:f0:31:96:2e:96:3f:
         2b:75:c0:6e:ff:08:07:45:55:cd:a3:21:ef:54:57:38:20:b3:
         da:4f:f6:30:75:6e:59:98:6e:39:96:29:32:b6:21:b3:cc:88:
         bc:f2:b6:a9:c8:58:96:13:17:77:7d:83:43:41:48:b3:30:be:
         3b:0f:65:2a:c0:ea:bf:f8:f8:44:5b:eb:d3:1f:39:58:29:6f:
         df:a5:5d:57:93:4e:36:e9:d1:3f:bd:d8:a6:e2:bc:a8:b3:39:
         8d:26:26:d7:f2:36:59:8b:67:67:27:d6:7e:53:20:68:56:69:
         e9:a4:19:53:57:be:b8:e4:c7:9e:73:9c:75:27:b7:2f:e0:a8:
         43:52:f8:55:e0:63:fb:47:bb:80:4f:6d:58:cf:d2:41:23:f1:
         21:01:5c:ab:b1:aa:f2:99:55:87:40:fa:36:cd:a4:1b:e1:8b:
         77:d6:06:e7:09:97:ff:7b:40:f3:e0:3c:4b:e0:0e:4c:61:cf:
         49:8a:12:f3:cf:7c:06:91:12:2d:4f:ea:0b:b5:78:c7:64:69:
         14:5e:41:df:c2:c0:28:f4:17:ea:b4:d2:cb:62:b3:25:be:2a:
         16:bc:d7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----