Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File:                     yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier:          ZiGDXfiCRAWLq6GdDV69HaV30MDkh/NA9WwyXeAFYX4=
Subject key identifier:   59:4C:4E:BB:CD:C7:FA:2D:EB:E9:07:55:1F:A9:D0:77:DD:E2:F4:5B
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer:       /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial:       01962F06AA1F0DD00DD357C73FB4EDA322D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number:          0157
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
                          2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
                          3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
                          4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: J9KuDMgscztpORAkEEu4IEFcjj5slmCQPvTGKJMt85Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:aa:1f:0d:d0:0d:d3:57:c7:3f:b4:ed:a3:22:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=594c4ebbcdc7fa2debe907551fa9d077dde2f45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:a3:9c:da:07:6d:99:80:b9:b9:3a:35:f2:
                    73:4d:af:a6:64:e1:5e:ec:eb:63:d1:9f:cf:94:96:
                    67:b7:85:5a:1c:54:30:bd:a3:f5:90:a1:7f:f7:48:
                    42:44:52:87:b3:22:0c:bf:4e:d9:c7:31:bf:77:17:
                    b3:40:36:7f:54:23:98:f5:4c:7a:52:28:c7:29:f1:
                    00:7b:5e:cd:3f:41:0e:b1:95:8b:99:a9:bd:75:99:
                    14:11:18:7c:78:70:5f:c5:63:3d:0c:6c:10:dc:0a:
                    02:79:25:07:c4:80:12:a8:3b:4e:8b:9c:39:80:86:
                    1f:ff:95:a5:86:32:b4:f0:72:d8:74:0e:ce:e8:d6:
                    77:03:c4:55:7a:d2:e0:cf:c1:98:d6:47:d9:47:68:
                    a4:26:0d:b9:f1:02:d7:ec:bd:2c:b4:74:43:ee:6a:
                    2a:a2:de:0f:52:0d:81:2b:6e:cd:8c:51:ce:52:5d:
                    ba:ce:93:22:e4:a9:75:98:23:45:b9:bd:54:54:99:
                    26:9b:05:75:2c:4d:32:cf:5a:96:21:68:9d:aa:90:
                    f6:fd:d6:f0:2a:d9:81:70:ca:e1:42:2c:68:21:a0:
                    88:cb:f2:a4:70:4b:3a:ca:36:e5:1a:f6:98:3e:85:
                    fa:ea:4a:ee:37:04:9b:29:03:f6:a0:5f:b5:f7:1e:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:4E:BB:CD:C7:FA:2D:EB:E9:07:55:1F:A9:D0:77:DD:E2:F4:5B
            X509v3 Authority Key Identifier:
                keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:4c:69:35:4e:a6:b9:1e:ba:81:09:87:12:1b:c5:8a:57:d8:
         67:11:0c:01:ec:3c:4f:27:b1:15:5a:89:42:53:7a:af:ed:0b:
         a9:ed:67:32:95:ab:9a:f1:6b:7b:f7:d4:f6:fe:56:c4:96:69:
         ea:dd:d4:d9:58:9a:ed:1d:f3:18:e3:80:c0:2c:57:47:fb:ff:
         4a:aa:83:ba:f0:fc:08:8d:2d:9e:6c:1a:13:96:d2:ec:7a:37:
         23:83:64:54:21:9e:bf:cc:4e:5e:99:8a:29:0f:39:30:ba:76:
         96:7a:85:21:b9:6f:ff:e9:68:bc:9f:73:08:5a:d4:09:92:94:
         00:87:56:cc:92:35:06:10:e0:11:56:d6:84:d9:8b:c7:10:7a:
         81:d9:9f:06:a2:c3:c4:c6:40:06:80:5a:05:59:68:c5:0f:6c:
         1f:ad:cc:a7:4d:8a:e5:45:88:8b:03:d9:56:7c:a7:fb:2b:d0:
         93:04:33:39:6f:12:97:ef:ff:dd:b3:74:8d:c6:dd:08:72:a3:
         11:d5:4b:3c:bb:c6:5d:69:9b:1c:6e:2b:1c:e4:a9:b0:f5:b9:
         00:df:42:a9:f3:bd:91:a3:07:fe:cb:43:b6:a7:f7:09:da:9a:
         94:03:72:70:df:ac:50:e9:23:a0:bd:56:be:e2:77:de:72:04:
         c2:c8:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----