Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File:                     y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier:          8JReB6ipqsFjnVuEDkzqbF/J9YC2qyZRPWj8++uZzvk=
Subject key identifier:   B7:C4:00:46:42:99:72:18:C5:67:C4:88:78:2A:6A:05:08:57:44:F6
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer:       /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial:       01962F3D5BB06AD20831F4EEEA02AE8543AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number:          11F7
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: mj2SP2YUf8OOW3PWyfsSenlnbcQ.roa (hash: 7rYL22HIBA9YP5PrLL9E5bTyxJEJdAa2DC73cuHwaP4=)
                          2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: U4mhaUicfVrUIh4Z9+oJGdSvgKaWwVg8lzRPw/KWnCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5b:b0:6a:d2:08:31:f4:ee:ea:02:ae:85:43:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=b7c4004642997218c567c488782a6a05085744f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:32:d9:2b:88:6a:aa:3f:7e:4d:ac:43:f0:
                    97:8d:e7:5f:c9:10:23:0a:13:a3:2c:0c:30:8f:93:
                    42:2d:d6:78:d3:d1:b7:dc:ca:de:4b:15:8e:b2:1b:
                    cd:2c:0d:46:3b:9d:82:b3:6a:89:12:af:61:c4:85:
                    f7:77:e6:1c:e2:9a:26:0f:59:49:c3:45:c8:1a:2f:
                    0f:53:1c:bc:25:77:88:83:3c:3a:dd:74:f0:9f:9c:
                    21:77:0e:10:92:f4:3c:5b:76:ff:2d:65:0a:d7:c7:
                    85:be:0a:42:9d:7e:e6:7c:d1:6c:21:b1:1d:75:28:
                    f1:47:c0:86:40:ee:5f:0c:24:f9:c8:6e:2e:7e:06:
                    6f:bd:84:00:b3:8c:16:60:9e:8d:47:9a:8f:67:1f:
                    a5:7d:40:d2:25:67:dd:2c:f8:6c:25:52:61:28:32:
                    a4:b0:36:89:4e:46:80:44:9b:79:98:18:33:47:64:
                    a8:cf:e3:a9:c5:39:e5:8e:24:4b:62:ce:27:b8:c4:
                    ac:86:19:72:9c:19:f2:16:2a:5c:dd:d1:11:57:17:
                    56:1e:e6:db:8f:99:2e:80:f0:4d:b1:24:86:17:b9:
                    b9:1d:38:59:a4:9c:be:c2:62:03:9c:5f:93:8a:b5:
                    d2:55:e5:98:2d:c6:5b:eb:27:1b:70:e5:49:0d:5e:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:00:46:42:99:72:18:C5:67:C4:88:78:2A:6A:05:08:57:44:F6
            X509v3 Authority Key Identifier:
                keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:69:3c:98:58:9d:38:17:83:a7:ca:90:23:fd:24:82:03:85:
         99:c6:4a:92:77:70:cd:da:7b:9e:d9:92:bc:96:20:81:cc:1e:
         d2:31:06:54:65:fa:81:26:3b:e8:d6:bc:71:7e:c7:77:4a:d9:
         62:86:c5:83:11:21:83:5d:82:96:2d:84:d5:29:c4:5e:c0:f6:
         65:bb:c1:a7:6f:ac:60:cb:a0:46:82:85:51:f7:f5:36:da:4a:
         66:67:24:6e:c7:91:57:85:c5:f6:dd:42:82:cf:86:3a:f6:d2:
         7a:da:c1:95:98:4d:c7:f4:55:cb:55:29:fc:67:1d:4a:a0:df:
         b3:bd:a8:0f:00:57:f3:29:04:9d:9b:06:fa:af:57:d7:76:20:
         a9:f7:56:a7:aa:05:36:c8:1d:c1:7d:c9:ff:f6:97:d9:e9:79:
         06:10:70:60:2c:53:0b:cd:47:6c:9a:be:4f:a5:20:ec:50:7a:
         4d:96:27:8a:fe:dc:40:5a:fc:a7:ec:a7:ab:eb:c4:f6:bb:6f:
         31:4f:47:1c:9c:20:01:29:3a:ee:37:2e:6e:72:36:40:8a:0d:
         d7:bd:04:f8:4c:4f:98:a8:0f:95:19:ec:c0:67:8f:c9:22:73:
         be:dc:a4:67:a8:e5:07:2a:42:94:d7:fd:73:82:92:e6:63:66:
         eb:0a:58:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----