Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
File:                     yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft (raw, json)
Hash identifier:          xjm9qaosleqX+4QvJsNfPRQ3KZk2HbkcVeHb7///Gwc=
Subject key identifier:   8D:8C:1C:91:F9:AA:10:D5:1D:8B:FA:C4:C6:04:E0:53:CB:C3:BB:79
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Certificate issuer:       /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial:       01962F3D91FCE7982E4885B412226FB78386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft
Manifest number:          0C1F
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: nbnIAVJNAnZgU5AVCE_qus_GC7w.roa (hash: kRfWet6eSf4dnBlKBrx1NbKgX3QvN7s8AHAHv5b5NzM=)
                          2: yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl (hash: /Ixq+uJ9cHKvbc/tOs7YduEzfK4xhVIxNvGvTcQd9oI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:91:fc:e7:98:2e:48:85:b4:12:22:6f:b7:83:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=8d8c1c91f9aa10d51d8bfac4c604e053cbc3bb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:2d:5f:35:43:31:28:4f:73:4d:32:d0:6a:
                    c3:8a:d5:05:f7:5f:14:b3:30:f6:1d:49:47:03:fb:
                    ce:02:48:2c:2a:6b:d5:ba:56:3e:ea:48:58:24:70:
                    3b:82:58:c9:f8:74:e8:aa:af:11:b8:a9:20:37:f8:
                    1a:be:c8:95:9f:6b:7c:78:fd:db:c1:8a:30:73:e2:
                    79:61:08:07:e3:c9:fb:0e:db:8d:43:13:d7:02:17:
                    7a:75:77:fd:d9:a8:82:ee:a9:47:76:80:e8:0f:26:
                    a0:4c:da:c1:23:a3:08:fb:d5:95:7f:2f:e1:2d:17:
                    53:9d:da:ad:63:45:83:01:d5:ed:2f:14:d6:b8:11:
                    c2:cc:32:a3:2d:4b:a9:e5:df:96:d1:1a:08:20:78:
                    93:b5:45:4b:fe:c5:3a:57:05:ae:b2:33:de:47:41:
                    3f:c2:38:09:d1:e4:5c:93:ad:a4:63:aa:f4:56:32:
                    f7:6e:5b:03:78:d6:41:77:83:da:7c:1d:60:75:d9:
                    ae:f2:d2:33:ed:4e:c6:cc:cc:2b:71:16:60:af:5b:
                    c9:29:21:c3:1b:78:7f:98:f9:2b:6e:32:b8:f1:cd:
                    a3:65:3d:68:c8:22:c9:73:e1:c8:7a:cf:54:ce:a3:
                    ae:e1:cb:fe:1d:5a:2a:71:89:a3:6b:01:f4:17:94:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8C:1C:91:F9:AA:10:D5:1D:8B:FA:C4:C6:04:E0:53:CB:C3:BB:79
            X509v3 Authority Key Identifier:
                keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:12:71:f4:26:47:f5:34:13:1e:75:af:95:2c:f5:b2:51:
         f9:62:7c:02:56:34:82:6d:39:2e:04:99:62:eb:ee:58:65:b3:
         1b:71:0d:b9:00:6e:69:05:3b:b4:8c:26:dc:06:c8:c3:a0:d9:
         91:0a:ca:6e:37:08:f6:b0:70:80:e3:07:09:69:a3:f9:f1:dc:
         6a:09:84:c8:a2:7b:d4:b8:81:ba:9b:c5:6f:ae:ef:87:12:66:
         02:2c:9f:03:b2:3e:62:f0:f4:58:5e:0d:86:09:62:9d:f6:de:
         0a:39:b8:72:8a:87:5e:d5:73:74:79:ec:e5:61:93:0e:ac:84:
         a1:18:8c:41:75:22:8d:e4:bc:72:f8:77:31:cf:9c:9c:14:23:
         0a:13:72:e1:a3:be:22:7c:eb:74:7a:8e:19:05:51:a5:ff:44:
         8c:c1:c5:45:76:e0:f7:46:b2:76:2b:31:b1:10:b0:10:e9:ed:
         c9:cd:ff:3f:cd:6a:67:ec:4d:a0:0c:40:91:1a:99:68:7b:24:
         6c:54:10:fa:44:96:95:ae:5b:ae:ea:63:08:be:65:e4:cc:65:
         2d:35:d1:85:44:09:b7:d7:9a:85:31:4f:78:5f:ac:a1:5e:20:
         54:fa:b2:11:9e:c1:ce:cc:16:70:cc:50:85:fd:7b:42:88:2d:
         46:07:cb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----