Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File:                     ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier:          Df6GJQ5GMPrgVvPW6giVlQNQmtnDuKmZNrw6ddXEIrs=
Subject key identifier:   D1:E7:C5:71:6D:FB:93:F9:DF:46:6C:80:86:10:70:DD:E6:F2:A0:6D
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer:       /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial:       01962F066D48EDC1756D80D51194372AE01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: M6Kiusoj-vmcX-l1FvQ-whelTCY.roa (hash: PZnmBtue/4j7K73vwfKaOFXRKwScBqdnVIvN9DoCZyQ=)
                          2: Mq4KEjTO5-3eXlg2Z24LUeQDfPk.roa (hash: iw4ECgSPXnY1fZL4AMAR4ZlIFQjssIsKBQeuJNCApWM=)
                          3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: 7xmCU4byvNE0b0YhTMDUgnaWudvl2avPi8swzxhtGsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6d:48:ed:c1:75:6d:80:d5:11:94:37:2a:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=d1e7c5716dfb93f9df466c80861070dde6f2a06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:f1:5a:ea:6f:75:c9:cd:2d:af:4b:3e:7f:
                    b9:03:32:45:e7:d1:aa:c4:75:b2:89:38:f0:e1:f2:
                    ce:33:1a:f9:f3:ee:ad:01:b4:52:f8:19:06:96:06:
                    f7:ef:0a:e5:7a:a3:97:e4:41:29:fe:4b:3a:17:d5:
                    05:48:b8:dd:46:8f:99:92:7d:e3:cc:60:b5:67:11:
                    0d:76:2e:8c:67:95:44:2f:e5:73:9c:32:9c:4a:fe:
                    2e:bb:5b:5b:00:ef:93:49:cf:cf:46:64:9c:f1:fb:
                    86:fc:37:ab:53:1a:ad:45:af:e1:5b:30:99:6f:26:
                    ab:41:57:88:3a:42:7e:c0:36:c3:03:46:0d:0a:a4:
                    32:0e:1b:48:72:4c:c9:1e:ae:db:44:9f:28:4b:03:
                    60:cf:ba:00:47:18:51:15:48:63:86:9d:08:a1:42:
                    5e:80:3c:46:2e:0f:a6:11:77:42:73:7d:4f:74:e0:
                    44:40:b5:0a:d7:e4:81:04:b3:c8:2f:c2:15:32:aa:
                    d0:e6:c1:ae:c4:01:c0:a8:79:ba:2d:81:bd:ba:8b:
                    98:8c:0d:ea:00:fa:ae:0f:5c:0a:cb:46:b7:43:c2:
                    6c:60:f5:dc:18:ce:da:e6:d3:07:c8:9e:f5:06:a9:
                    b7:b6:9b:f7:f3:2f:6d:ef:ef:73:46:bc:df:43:f9:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E7:C5:71:6D:FB:93:F9:DF:46:6C:80:86:10:70:DD:E6:F2:A0:6D
            X509v3 Authority Key Identifier:
                keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:fb:88:1e:65:29:13:e9:a7:a5:60:e5:36:f5:5a:0a:1a:
         21:b0:0b:9c:86:d7:1c:63:1a:9f:18:54:ce:bb:f8:c3:5c:e2:
         5c:e1:45:4a:77:c8:d2:07:a7:f5:14:d9:b1:86:9e:24:d3:9b:
         63:ef:7f:c5:6a:a3:1c:d1:41:0f:06:78:dd:b2:c4:54:34:d7:
         ab:06:69:84:70:76:07:2c:a2:3b:16:7d:3f:0b:e3:81:cf:2a:
         72:29:ca:7f:04:d8:4e:28:14:f2:c3:6a:e8:bd:0f:2d:17:7e:
         9a:c9:32:15:2f:f6:c5:25:fe:27:92:2d:7c:77:e6:0d:0d:b2:
         bc:0f:a6:93:11:0c:6a:5b:7c:49:30:3a:25:2e:83:dd:92:e6:
         e3:c5:8a:e4:f9:97:3f:40:3a:6f:f2:fd:69:31:3f:d6:40:15:
         e8:8e:71:7a:e1:2d:ed:d0:6b:17:9d:fc:45:ea:26:7d:c7:dd:
         8a:b7:4e:56:75:6d:b5:f6:51:95:10:ca:73:fe:5a:e2:22:e2:
         a4:1d:4a:8e:5e:b3:8a:a8:2a:1b:3a:0d:b1:8d:22:7b:91:a1:
         b6:09:c6:b2:2a:b8:c1:e7:6a:b5:a6:cd:60:f8:a2:7b:3c:12:
         53:a4:a6:54:ba:3d:c5:a2:cf:30:bc:80:f3:2d:51:b6:18:df:
         59:03:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----