Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File:                     ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier:          J2K8LxXa1sHTqoF2f5G/PE/2MnVKAynGqnYAJxlycPA=
Subject key identifier:   A8:22:5E:6C:6F:24:C7:FA:B0:AD:41:FC:87:1B:F1:32:7D:5E:F5:30
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer:       /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial:       01962F071C6500977BCC49F59344CEF49771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
                          2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
                          3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: UaEpmrJS3X6JpPREZywmRBDQpjGz+2T7obFCnrjQD4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:65:00:97:7b:cc:49:f5:93:44:ce:f4:97:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=a8225e6c6f24c7fab0ad41fc871bf1327d5ef530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:27:49:38:8a:3e:ff:a2:b4:47:0d:9c:ca:
                    60:76:e7:9b:db:82:c9:a2:3f:3e:24:95:f0:6a:81:
                    38:28:95:c5:b1:fb:70:b3:66:32:b4:0b:63:c6:13:
                    d0:a7:e4:f5:5b:50:77:da:52:c6:c6:c2:66:a3:be:
                    2a:cb:5f:1f:d9:29:d9:ca:af:56:09:47:f0:7c:2d:
                    df:8e:ad:b1:8c:b5:f7:c6:7f:2a:2c:e6:cf:4d:cf:
                    c5:95:c3:73:25:98:87:2e:fb:fd:a2:d3:ad:45:96:
                    c1:d6:e5:92:fa:0e:58:a5:76:6c:c9:5a:b8:ed:6e:
                    09:f0:8e:ee:f5:f3:36:0b:46:3f:d2:62:7c:ec:38:
                    df:da:52:c5:b1:7e:d8:f3:f4:9a:6d:08:c6:9d:ef:
                    28:47:cf:29:11:81:b9:59:48:40:99:0c:04:dc:d3:
                    b4:0e:08:61:c2:1a:71:a2:2f:61:19:da:e1:db:0a:
                    f2:bc:50:34:63:c8:58:e5:f5:92:5d:38:38:2d:39:
                    ce:1b:aa:c2:9d:02:25:05:c2:44:04:40:14:18:29:
                    87:68:f8:33:98:e1:4e:69:a8:ea:3a:aa:87:23:56:
                    20:e5:13:d9:bc:cf:0d:2b:3b:41:05:56:c4:7a:5c:
                    fc:94:6c:7a:d0:dc:18:5f:9c:33:b5:52:bd:87:a0:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:5E:6C:6F:24:C7:FA:B0:AD:41:FC:87:1B:F1:32:7D:5E:F5:30
            X509v3 Authority Key Identifier:
                keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:c5:f3:8a:d0:34:6a:25:a0:be:53:6b:98:e4:6b:d8:75:
         79:7b:3e:d1:f5:09:eb:cb:d8:6b:97:a8:34:ea:1c:e3:38:52:
         9e:7d:f1:5d:0c:ca:84:74:2a:ad:4a:0a:d0:34:ca:10:ca:ea:
         b9:d2:00:9e:1a:df:51:29:a9:3b:2e:4f:0f:e7:1f:e0:7c:75:
         37:f1:42:ee:ba:09:c8:5e:da:80:1a:b4:a0:67:60:59:43:11:
         c2:f1:aa:a3:3c:3e:af:6b:ba:e4:9e:73:1d:84:0d:1c:96:91:
         2c:da:70:47:2b:dc:bb:04:55:90:81:c2:c0:49:84:85:ae:c7:
         37:3e:75:20:77:dd:a3:0d:d2:92:ed:93:0e:f4:3a:4c:de:22:
         87:6d:4e:e9:48:4e:ee:ad:ec:ed:67:da:77:7b:0d:bd:04:41:
         fc:d8:8c:b2:73:5a:4c:ab:30:f4:51:1a:9a:82:af:2f:83:12:
         56:04:d9:61:f0:8b:c2:5e:01:04:b3:f6:20:1d:d3:89:47:ad:
         3c:dc:af:df:0e:ef:d6:94:11:be:a8:f3:b8:49:a2:27:b9:c9:
         a4:01:e7:ee:94:ab:c3:90:1f:c4:99:e3:6a:af:a9:bd:6b:91:
         fd:c6:31:c0:94:35:97:f2:d2:f7:d6:64:c6:a0:0a:d8:7e:e4:
         c3:b8:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----