Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
File:                     yq7leeATIY9XE4ZBPixbK8JFqDY.mft (raw, json)
Hash identifier:          m4Yo201e/0GivZFpZNWBlPC6X97OF1HoNDhfi+r2eCg=
Subject key identifier:   6F:0A:2E:C1:7B:8E:5B:53:9F:E5:59:6A:E4:66:D0:CE:40:21:F3:6C
Authority key identifier: CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36
Certificate issuer:       /CN=caaee579e013218f571386413e2c5b2bc245a836
Certificate serial:       01962E2B34E614ADFD72B08D9C829EA3090A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft
Manifest number:          1231
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: GEnuOQleBBUDKJ-4Y-M3IyBH42g.roa (hash: OrN9ZjjDEjR1Mar15xKYXAUpkqA7O1AMRBJLOwwo76o=)
                          2: yq7leeATIY9XE4ZBPixbK8JFqDY.crl (hash: gFhQeIPoD5BOyxZyniP+f/6zF2Yog85h++b08W67VVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:34:e6:14:ad:fd:72:b0:8d:9c:82:9e:a3:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caaee579e013218f571386413e2c5b2bc245a836
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=6f0a2ec17b8e5b539fe5596ae466d0ce4021f36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:9c:a5:ae:cf:38:d3:dd:50:92:e5:e2:98:
                    33:fc:26:27:7e:1c:eb:42:a0:fe:7b:29:3f:33:d0:
                    d8:27:1b:06:ef:65:a6:5e:ae:de:3b:1d:61:2f:6e:
                    cf:bf:c2:73:32:d7:67:b9:e2:b7:60:70:4f:30:64:
                    0a:c1:2a:05:bd:2b:75:c6:64:a8:6f:8c:6b:2e:3f:
                    62:aa:c7:e3:e8:5d:37:bb:f6:2b:31:65:19:af:5d:
                    a2:ae:8c:69:46:f7:21:ec:eb:0a:43:ce:30:61:b9:
                    0e:49:68:d9:8a:db:16:f9:99:94:14:76:f8:f1:c7:
                    d8:3b:83:32:de:f9:c2:3d:5f:74:23:f8:b4:9f:84:
                    ff:5b:64:c2:f9:38:4b:c1:a4:c8:f3:89:51:6b:7c:
                    e6:87:43:cc:17:c8:d7:46:d9:fa:58:b4:bd:a2:14:
                    03:b4:1d:19:16:50:82:cb:eb:41:40:bb:33:c0:1e:
                    32:14:a0:da:5a:ca:c5:bd:4d:c0:b2:d8:c7:64:77:
                    9f:e7:9c:15:0b:c9:90:de:59:5d:22:9a:a4:a9:da:
                    1b:6e:24:bc:27:52:2c:23:54:57:20:09:f4:4b:1f:
                    aa:0b:b6:5c:8a:f5:f9:8c:76:ad:58:06:32:34:e9:
                    65:8e:0b:b1:55:a2:e4:95:68:33:4e:ea:92:f7:bc:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:2E:C1:7B:8E:5B:53:9F:E5:59:6A:E4:66:D0:CE:40:21:F3:6C
            X509v3 Authority Key Identifier:
                keyid:CA:AE:E5:79:E0:13:21:8F:57:13:86:41:3E:2C:5B:2B:C2:45:A8:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yq7leeATIY9XE4ZBPixbK8JFqDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/759874-e7f2-45fd-819d-a5d1148f25bd/1/yq7leeATIY9XE4ZBPixbK8JFqDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:90:80:34:92:ee:37:9f:dd:c4:a3:95:f8:70:4e:02:4e:c5:
         d0:51:f8:19:69:29:f7:03:8b:3f:b8:4b:bc:47:37:f6:2e:fb:
         b7:5e:1a:eb:b3:b1:3d:a3:96:c3:e0:fc:dd:af:41:6c:9b:8a:
         50:01:1c:17:2b:6e:cc:be:2b:c2:4e:df:7f:26:5b:63:d7:1c:
         df:30:22:55:4a:d6:d8:04:d7:32:a4:38:9f:de:80:ac:30:9c:
         33:dd:3f:24:db:7c:71:bc:ad:69:5e:74:26:c4:bf:ac:53:ed:
         4d:e8:76:3f:f4:44:b3:53:65:74:72:84:a8:c9:7a:62:49:c2:
         2a:3d:40:57:9f:17:99:ab:5d:2c:51:43:51:77:44:a0:a7:3f:
         10:90:85:7f:40:c0:d5:bb:c8:5f:aa:db:d0:6f:ba:28:ab:3a:
         67:19:94:38:af:09:f8:e6:36:cf:f3:e7:d8:09:02:20:c9:52:
         89:44:b4:56:a0:00:9d:39:2e:5b:37:e2:8f:67:9f:ee:ab:83:
         0f:30:81:9a:5d:08:1b:1f:66:87:af:46:2b:e9:b1:c8:7d:6e:
         62:1f:ab:54:38:25:c9:de:6a:cb:f2:bf:3a:09:35:56:8d:6b:
         16:8c:e4:05:cc:13:ba:b7:29:f0:9e:0a:76:69:dd:62:76:05:
         e6:e2:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----