Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
File:                     c_yJAj6sdKsphWP5ndtx9vFflTg.mft (raw, json)
Hash identifier:          ZOHNOyBKU+IKvtsq3SRx/FrbUCNBMrhNNtgCQTJ7zWc=
Subject key identifier:   43:E0:8E:34:65:FB:E3:69:0B:E7:EE:33:BB:49:02:E5:EE:D4:CD:B5
Authority key identifier: 73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38
Certificate issuer:       /CN=73fc89023eac74ab298563f99ddb71f6f15f9538
Certificate serial:       01962FAB0EBC398C137444A3D55866F31170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft
Manifest number:          08FE
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: cS_oROlW9-wwbVo9EJJ4pl2eigE.roa (hash: JJRh33aNovJ8ixT1Vh+De6OT6uSujo/Saa2Iamwl/iI=)
                          2: c_yJAj6sdKsphWP5ndtx9vFflTg.crl (hash: K77nPQe6FGbKeNNJhubzU+3bc545KGD1Uc60uzQVG8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0e:bc:39:8c:13:74:44:a3:d5:58:66:f3:11:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fc89023eac74ab298563f99ddb71f6f15f9538
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=43e08e3465fbe3690be7ee33bb4902e5eed4cdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:ab:15:79:7b:88:b1:ac:d7:42:c9:4f:ff:
                    fe:8f:14:87:73:05:9a:bf:6c:bd:a1:4c:68:0b:c8:
                    cb:4a:6b:dc:d9:89:f6:6a:60:e5:2b:20:32:a0:10:
                    ff:23:8a:37:3a:1c:59:65:74:bb:1e:0c:94:c0:7c:
                    ec:0a:02:1f:40:f9:d5:c5:10:ac:78:73:ed:65:c7:
                    ac:d1:f9:11:3b:5f:e3:f0:83:66:9a:60:75:d4:bd:
                    56:19:26:4f:ba:b8:70:04:13:93:21:8a:41:03:06:
                    34:89:73:0d:0a:80:49:15:74:be:ed:9c:29:4b:63:
                    29:9a:ad:2c:39:3e:ec:6d:70:ad:23:ef:f7:c7:48:
                    ad:77:ea:4b:33:07:df:c6:f0:9d:d1:dc:c0:d8:37:
                    09:e8:10:27:fa:94:2d:95:c8:33:7d:d5:26:87:28:
                    48:b1:5c:a7:61:b5:bc:a9:90:a3:9b:37:2b:fa:67:
                    e6:32:e9:72:28:f5:ab:e1:41:00:63:13:83:8e:c7:
                    b4:d3:95:11:78:ba:26:f7:54:86:3f:7b:a5:f1:26:
                    c8:c5:9d:8d:43:9a:a8:0f:ec:c9:08:c9:c8:80:f2:
                    be:18:53:3a:94:23:d2:c3:da:2f:76:7e:ac:95:0f:
                    50:ec:f4:e6:5a:10:1a:36:b3:05:b5:45:0c:4e:ed:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:8E:34:65:FB:E3:69:0B:E7:EE:33:BB:49:02:E5:EE:D4:CD:B5
            X509v3 Authority Key Identifier:
                keyid:73:FC:89:02:3E:AC:74:AB:29:85:63:F9:9D:DB:71:F6:F1:5F:95:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_yJAj6sdKsphWP5ndtx9vFflTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/55303a-f225-4a3f-825f-5dcd82def84f/1/c_yJAj6sdKsphWP5ndtx9vFflTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:0a:86:0d:67:97:90:ae:c6:d3:c4:8c:cc:4e:d7:ea:1c:
         24:7e:f1:a9:40:d4:b5:25:13:cd:8b:7d:65:7a:41:d3:a7:2e:
         a9:16:12:2e:da:0f:e4:f3:e8:97:ec:fb:27:60:05:28:c7:9e:
         e5:20:1b:91:bf:91:46:f4:4b:29:39:f1:73:97:7b:e0:57:dc:
         e1:8c:b4:aa:b0:30:6c:d7:02:b9:66:74:f5:2b:e3:9d:e1:fb:
         db:05:fb:79:08:53:bd:60:19:c0:a1:25:d2:77:d5:cf:4e:33:
         fc:6f:47:7d:eb:fc:60:28:20:71:5b:88:89:43:cb:4c:3e:4f:
         8d:63:a3:65:59:8a:9a:7e:00:0e:41:43:fa:17:9b:33:e2:38:
         f4:ca:09:54:2f:81:6e:7a:f3:4b:75:cb:96:26:45:d7:aa:2e:
         bf:09:79:45:30:d6:39:50:19:de:6c:d6:66:52:29:49:1c:2e:
         c1:24:41:f4:2d:a7:68:ea:da:f7:e9:c7:cc:76:44:e1:4c:f0:
         c0:e4:de:5a:d2:f3:5e:f4:43:f7:0f:c6:7e:65:55:9a:28:13:
         fb:60:49:c9:73:d1:46:51:50:3c:15:eb:a2:a3:0d:8d:d3:f2:
         4a:82:f1:df:42:ba:fc:19:1f:59:20:99:c0:22:ea:ef:4f:31:
         dd:cf:7e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----