Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File:                     0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier:          cVZf0VbufFVfD91OvXZLJNjQhvSUhTbE52r/AkY3Q+k=
Subject key identifier:   6B:DF:CA:17:FD:F1:F6:CA:8E:25:77:4F:67:3D:73:76:C1:17:A7:0D
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer:       /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial:       01962F3D41CCCE838D526CAF80BE84B4B703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: woW24y5xkt2a9OLEV6ucm7yIJhOlFQPWkoiaF/BToWM=)
                          2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
                          3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
                          4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:41:cc:ce:83:8d:52:6c:af:80:be:84:b4:b7:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=6bdfca17fdf1f6ca8e25774f673d7376c117a70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:99:b5:c8:38:3a:86:6c:1c:71:b6:dd:dd:1d:
                    de:72:73:ee:45:2f:3f:36:1b:58:c3:ea:05:ba:db:
                    dd:a4:45:03:1e:a6:af:b7:4b:da:0e:a9:4c:64:28:
                    c9:ee:f7:c8:98:08:37:ec:92:b2:53:69:b1:74:4c:
                    32:e5:3d:19:7b:eb:c7:6d:4a:10:b2:7e:6f:c6:14:
                    a6:88:c1:fa:57:42:2c:89:2d:9f:f8:d6:89:56:94:
                    fb:de:03:3c:05:dc:9d:c3:98:36:f0:c8:8d:85:45:
                    23:cc:c5:7b:b0:84:f3:33:9c:84:f9:bb:74:f4:d6:
                    84:e8:2a:b5:d3:06:c9:4f:c5:b2:4a:ba:4e:de:c7:
                    d9:4c:a9:40:c9:73:1f:aa:92:ec:b8:79:bd:66:5f:
                    f2:6c:bc:55:2f:14:af:8c:e3:f6:db:5b:33:f6:9b:
                    1e:f9:e2:05:32:ce:9d:eb:be:af:a6:d9:d7:47:73:
                    6a:5b:8c:6d:fc:a8:65:cf:9b:ca:5e:1e:2e:ac:bb:
                    bd:fe:a2:86:e3:be:7a:51:0f:34:0c:08:15:29:57:
                    80:4f:49:1a:bd:2a:42:2b:88:08:5e:78:c4:60:8d:
                    6b:83:c4:c2:4b:ed:93:30:bd:77:52:a2:6f:91:de:
                    e0:42:7f:3e:4d:0f:77:04:f9:e5:5e:3e:0e:ef:ad:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DF:CA:17:FD:F1:F6:CA:8E:25:77:4F:67:3D:73:76:C1:17:A7:0D
            X509v3 Authority Key Identifier:
                keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:96:be:6d:32:f4:84:f9:0e:e9:f2:61:37:66:1c:28:20:f3:
         c4:ab:79:c5:b8:af:18:59:b0:3f:9a:23:6a:e4:73:fd:94:75:
         8b:b3:39:d8:79:21:82:52:b3:36:40:46:43:68:b8:b6:64:32:
         f0:5e:8c:3b:e4:96:7d:3d:1a:d3:ac:6b:a6:b7:6f:3a:8b:5a:
         b1:eb:65:1c:b0:7c:4f:18:07:c9:bf:e6:8f:14:92:16:69:58:
         05:c1:e3:30:59:8c:7d:eb:27:06:bb:01:04:8d:c3:2b:e8:3b:
         6d:6c:ad:e7:f7:a7:93:78:e8:fa:30:49:98:ca:7a:2d:72:c1:
         7d:ee:28:44:0c:c6:74:d1:e4:71:98:27:56:76:3f:58:b5:4a:
         6c:83:36:61:ec:2b:58:83:a7:21:8e:12:6b:a1:10:37:df:e0:
         c3:5a:22:78:6b:6f:5a:45:da:29:fd:83:03:32:45:c8:3c:47:
         c4:55:d8:a3:0b:93:ac:a9:25:dd:76:22:a7:f9:26:90:a2:e2:
         5d:12:ad:fd:25:ba:97:c0:d3:02:33:4f:12:47:93:1a:b8:85:
         e9:78:27:23:4b:c9:f5:41:af:28:87:b7:d6:7e:02:dc:40:2c:
         c9:ef:01:29:97:6b:bb:72:38:08:83:01:34:00:a6:9a:ac:de:
         7f:82:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----