Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
File:                     RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json)
Hash identifier:          pE1V2B06savKudOz7Q7PnULUwoUmuvtaE3qTavlTERE=
Subject key identifier:   62:C5:82:A1:B6:D0:6D:BC:A0:AA:E2:55:36:94:E9:4C:A0:CA:9B:6E
Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA
Certificate issuer:       /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
Certificate serial:       01962E61CB2B79EC39DC1A73E68D9D43AA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft
Manifest number:          067D
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=)
                          2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: tR4DiB5LSPFIHDurK/Q6ao4wIhBlgi26ts05OSTbMJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:2b:79:ec:39:dc:1a:73:e6:8d:9d:43:aa:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=62c582a1b6d06dbca0aae2553694e94ca0ca9b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cd:35:1f:7a:dd:3b:0b:20:0d:12:bb:6e:a5:
                    34:29:d1:45:29:49:5e:96:4d:09:50:a8:0c:ec:a7:
                    77:e2:fd:4c:52:c9:af:75:fa:a6:ed:60:aa:47:53:
                    a2:48:4a:93:f7:01:90:6f:dc:4a:ca:a4:2a:cb:43:
                    e7:7a:19:5a:77:1b:8b:78:0c:50:2c:13:40:b4:4c:
                    56:65:f1:44:2d:55:ee:f8:6f:5a:cb:fb:34:74:f0:
                    12:fa:51:a9:ab:cd:3f:ff:f1:33:8c:53:e4:7e:99:
                    3f:88:6e:1b:e2:b8:e1:52:cd:57:5a:c1:6b:34:05:
                    9b:ee:8d:21:6f:31:e6:7b:e8:46:07:58:e0:21:4d:
                    33:11:b1:6f:c6:12:24:ea:09:39:e3:18:1f:d2:4e:
                    ab:32:2e:0f:0a:22:d3:20:56:0c:f2:b9:17:67:90:
                    4b:2f:6d:98:af:7e:a9:6e:41:4b:54:2e:56:39:60:
                    8b:f0:fb:fc:6d:ee:c4:d2:5e:0f:cc:50:11:7d:91:
                    eb:33:95:dc:54:55:e1:f0:f4:ab:ee:20:29:a0:57:
                    1b:8c:95:1e:04:e1:44:08:f1:55:31:3d:1e:2b:5a:
                    15:a9:ee:fc:d8:89:7d:29:9c:28:e7:3f:d4:83:45:
                    3e:85:8c:2c:87:6e:f0:5e:2f:7f:8f:09:d8:0a:41:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C5:82:A1:B6:D0:6D:BC:A0:AA:E2:55:36:94:E9:4C:A0:CA:9B:6E
            X509v3 Authority Key Identifier:
                keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:d4:13:fb:25:a5:81:3c:96:35:d5:32:e4:d8:4f:19:e3:
         ec:5e:6f:04:1c:ee:9d:58:72:4c:f8:2a:61:49:70:2b:31:99:
         c3:c0:f9:2c:0b:5c:12:d2:84:1e:21:b8:2b:c2:91:40:5c:13:
         ef:a2:dd:c8:99:77:ab:82:b8:15:79:cb:56:08:f7:a5:30:c9:
         4b:a6:04:75:1c:d8:14:2e:8d:e3:89:7f:fc:59:94:97:f3:80:
         71:45:25:a9:86:6d:b5:2d:2d:81:92:66:85:a2:7e:50:a0:0b:
         45:a1:25:79:79:72:8e:c2:4a:95:66:30:82:32:db:e0:31:e1:
         d2:cf:38:5e:5f:f3:ed:32:33:37:d6:ec:fd:bb:bd:56:ae:57:
         e4:c4:ae:3b:09:ce:42:2a:22:fe:4b:22:f4:a1:c9:ab:a1:0b:
         a3:77:29:a2:37:f6:34:db:4e:9b:86:a6:15:db:d4:60:8e:22:
         c7:e2:0b:6f:fa:9a:63:2a:06:71:03:e9:15:1b:ca:73:bc:b6:
         30:1a:31:3a:e5:0e:d9:89:d9:c7:f9:c4:3c:81:9b:e4:ae:2c:
         f3:87:87:a0:ee:cd:9b:0d:be:b2:2e:40:ce:90:5a:cb:40:82:
         1c:ae:00:c2:9f:5b:31:5a:54:59:36:7f:92:63:bb:4f:cf:ad:
         f9:22:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----