Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File:                     yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier:          XPNSxBTgJhJpi1ex7WRKcgagxY3TRKX7hxtu/lYf6BY=
Subject key identifier:   26:6D:A1:1E:81:93:AC:5B:20:1C:DB:E8:5C:E4:B4:CE:34:86:F6:8A
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer:       /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial:       01962E61C8487C28719B9FB62D7ACA56D43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number:          0D98
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: 9hbofTa8wmBhXG-prhgMHzrh8LQ.roa (hash: oj+TVOa3IXAijydn5VPy/DSH3tXPUY065JYAspyYspE=)
                          2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: n+YuKoMwbaMnv9cuHOs2ypKGMdNke1Wo/6oVS433BY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c8:48:7c:28:71:9b:9f:b6:2d:7a:ca:56:d4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=266da11e8193ac5b201cdbe85ce4b4ce3486f68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:43:fe:fe:a1:2b:81:e7:c2:e3:6c:c9:02:
                    bf:a8:3d:6e:e4:fc:d4:a3:d3:88:13:f1:a9:8b:90:
                    6b:d8:f8:d0:c7:fe:48:5a:c9:17:49:a1:ef:9f:50:
                    19:40:38:04:5f:58:5c:09:b9:a9:20:7a:f0:3a:97:
                    49:ec:e4:04:48:fa:1d:98:31:92:e0:ee:da:c3:f4:
                    96:f0:0e:02:3e:ad:65:02:e1:3e:ff:84:22:d9:e2:
                    2e:48:f2:db:4a:2c:52:be:a9:12:a1:a4:00:58:6f:
                    be:c1:26:5f:f3:f5:73:29:80:4f:4e:02:d0:17:9b:
                    2b:e3:91:96:59:2b:5d:05:e9:aa:20:ae:b2:5e:7e:
                    92:1a:62:66:f0:62:03:d5:87:72:9e:08:c6:bc:f4:
                    52:b2:81:51:18:f8:04:ff:d9:1b:7a:a2:1b:a7:28:
                    c0:55:b7:a1:10:fd:7e:7b:ce:b3:45:a2:44:f3:c5:
                    63:2b:da:c1:1d:98:97:7f:2f:1d:bb:67:2c:fa:c3:
                    8a:ec:43:16:79:de:51:8f:ad:3b:f1:dc:df:51:43:
                    01:39:63:d5:0f:ae:00:b0:7a:0f:bf:a4:ff:d1:1e:
                    f9:40:d2:11:6d:84:d6:f3:03:2e:fa:a9:30:07:06:
                    77:e3:1a:6f:36:cd:5b:e3:1c:85:b1:4f:8e:e5:87:
                    5f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6D:A1:1E:81:93:AC:5B:20:1C:DB:E8:5C:E4:B4:CE:34:86:F6:8A
            X509v3 Authority Key Identifier:
                keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a8:72:ff:90:85:62:b5:a3:6e:36:1c:06:aa:a7:46:44:1f:
         07:cf:67:aa:e1:48:5c:e9:59:83:52:83:1f:69:e0:1b:cf:39:
         25:71:a7:67:28:7c:74:94:3d:74:90:8d:40:61:1c:31:30:91:
         ff:f2:2f:4b:b8:7f:d4:73:2a:47:2a:37:3c:2e:66:84:31:cf:
         e1:b2:92:d8:44:a1:73:a0:f0:c2:0a:ca:b9:94:5f:71:ea:02:
         4e:86:87:af:c2:94:3a:c8:e8:be:f7:87:5a:cf:ff:5b:e8:ce:
         40:ef:25:03:3b:ca:5c:3e:12:b5:8f:80:d7:59:99:c8:c2:c9:
         05:55:8d:59:0e:75:28:50:ad:e5:5c:f8:f9:53:49:a1:40:57:
         19:30:3e:9e:0c:11:7e:73:d7:f6:bd:1a:e0:75:67:78:9c:90:
         8f:2b:b6:b0:c0:89:b9:c9:dd:ef:43:b4:8b:d3:08:f4:6e:6e:
         c2:fe:32:1b:e7:ff:35:6b:b8:f4:d4:3f:42:59:e9:da:aa:31:
         70:22:c7:37:58:2b:d4:cc:68:1c:14:45:0a:4f:a8:b6:f1:75:
         4b:0f:96:b8:09:01:e6:13:e3:e3:5c:d1:75:f8:1b:89:c5:d0:
         a4:ac:ec:c5:da:1e:a3:16:de:69:ae:af:66:82:25:d6:10:31:
         f9:e3:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----