Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File:                     yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier:          u2YzzKagQWzQIFZhXIUQGqPCr9j1XEvBGh41hZ01rfA=
Subject key identifier:   15:C9:E7:38:E9:FB:39:D8:68:50:E8:9D:88:DC:52:6E:25:1F:9D:55
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer:       /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial:       01962E9999DF166F58C3A4E7EF087F408F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (hash: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=)
                          2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: vCI6gMroBPM0E96FncQV+dUi0dDCFgqMIWqQfPp44do=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:99:df:16:6f:58:c3:a4:e7:ef:08:7f:40:8f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=15c9e738e9fb39d86850e89d88dc526e251f9d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:5d:94:37:bb:7d:50:b9:42:86:97:c5:3d:
                    70:87:0e:d2:1c:43:c7:b9:28:19:d9:2b:cf:71:12:
                    74:4c:4b:63:44:3b:c1:9d:d6:08:8f:11:9a:f5:ff:
                    64:1f:a6:a3:97:49:5c:cb:75:de:7b:5c:ec:7a:8b:
                    45:27:c7:67:bf:76:b4:34:87:24:6d:7e:2c:d1:e9:
                    89:34:2a:6c:81:09:df:cc:06:ba:b0:e0:41:d8:69:
                    0c:01:7d:9e:88:f3:67:6d:20:f0:0e:47:55:7d:0d:
                    95:2c:af:e7:74:18:a6:ff:ab:ad:42:a8:3d:43:95:
                    6c:d0:9c:86:7f:f1:f2:07:27:80:5d:b0:38:5a:fb:
                    08:ca:d0:40:54:3a:e8:57:0d:9a:4f:df:81:ff:d7:
                    d6:f6:7e:af:03:ed:3f:0a:bb:3d:e5:88:fc:4e:8f:
                    37:bb:bb:ef:21:2c:16:7b:0c:83:38:89:55:2c:d4:
                    51:23:ca:34:64:5b:00:79:54:ae:25:75:7f:d2:08:
                    d2:cd:16:c8:09:21:30:bf:1e:b0:f4:af:0c:21:89:
                    9a:4a:48:0f:42:78:86:69:07:e8:d7:2b:82:c5:db:
                    24:d5:0b:e8:97:51:90:1b:35:52:13:d2:00:02:e9:
                    c8:14:65:6d:cd:1b:94:00:72:2e:92:85:aa:1c:0f:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C9:E7:38:E9:FB:39:D8:68:50:E8:9D:88:DC:52:6E:25:1F:9D:55
            X509v3 Authority Key Identifier:
                keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e1:d7:8c:89:a0:bf:fa:83:35:59:c8:e3:70:59:23:77:50:
         d2:d8:c0:97:78:66:46:0a:d7:82:31:b9:21:50:f9:95:c5:29:
         eb:ee:29:c3:7d:02:56:c7:d1:a0:86:b2:10:4c:ba:e4:5f:e1:
         d3:df:5b:21:3a:46:f5:a0:a3:69:24:0a:cb:af:d8:3b:8d:2b:
         c3:10:d3:ea:ee:96:2e:71:7b:52:c9:53:17:13:6c:da:03:e9:
         d2:8e:dc:2b:c0:9e:1d:cd:19:92:18:14:44:c0:97:e3:bf:c1:
         93:a4:05:f6:55:10:34:fc:60:cc:64:89:ba:ef:43:9f:d9:8b:
         67:4c:8e:49:49:1b:35:66:d3:50:72:41:a7:7c:eb:86:15:62:
         5e:0f:aa:8e:b7:56:60:16:e1:86:cd:c5:6d:9d:ac:72:fd:8c:
         2e:cf:c5:bf:57:99:47:e4:1c:2b:8f:73:65:87:50:3b:aa:bc:
         9e:ae:06:0c:f2:88:5f:a8:33:53:27:f5:11:23:ec:e9:03:88:
         8e:cf:20:85:36:f1:8b:1c:60:bf:3a:ec:5b:da:26:4a:7a:42:
         86:a9:2d:a9:7e:64:94:06:83:be:01:f3:47:5c:1a:83:fa:3c:
         04:43:c4:26:fd:e6:54:8f:bb:8c:80:51:ee:6a:b2:3f:57:74:
         85:ee:67:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----