Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          8qfG023SM2TQBMfMpCkl3E276XwKkk9/5EdE8EAJjl8=
Subject key identifier:   CB:41:3E:20:E1:74:AD:24:EB:B9:0E:04:47:95:72:3A:28:EA:59:C2
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       01962E2B489CBF91728D5D0EC6D4136B2AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
                          2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
                          3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: G69iRdUe0geRIDkNfsQkXmcdwvKIvaMq98pCDryQ+ic=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:9c:bf:91:72:8d:5d:0e:c6:d4:13:6b:2a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=cb413e20e174ad24ebb90e044795723a28ea59c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:70:80:84:c7:a3:54:e0:11:b9:f6:db:66:
                    e2:f4:03:a2:0c:45:2f:6c:dc:ab:3c:f3:82:37:9f:
                    e0:76:4f:51:48:6c:7a:97:f9:59:7f:af:30:09:af:
                    78:e4:5e:42:86:84:54:aa:9c:d3:cb:10:df:03:61:
                    6e:46:38:8e:41:32:cf:88:e5:6c:5e:9a:15:ea:70:
                    d6:9f:c5:ec:40:a6:d0:b3:b5:93:86:33:65:e9:28:
                    07:89:9d:72:ca:1c:ff:eb:7e:07:8d:7f:b0:4a:c9:
                    0d:dd:77:c9:ce:83:e7:14:7d:87:f1:da:8f:6d:75:
                    5c:98:46:c0:02:a3:31:44:bb:92:32:e2:08:9a:8c:
                    d8:62:c8:f2:25:84:35:b4:2d:42:3e:6c:42:50:42:
                    83:8c:ce:fb:d0:9f:fa:47:71:bf:d0:4c:0b:d3:74:
                    ef:9b:cb:10:97:1a:52:83:1d:92:c9:eb:c5:65:26:
                    8e:86:1d:fc:bc:a8:37:d0:07:ec:75:f0:14:f0:4c:
                    cf:85:36:6c:fa:21:46:76:1f:df:ac:23:4c:63:ed:
                    0c:0d:e8:e5:49:d3:29:aa:43:64:92:cb:32:80:84:
                    95:2c:8a:22:f1:3b:e9:b1:ad:cb:13:01:17:e7:35:
                    6f:80:c8:2a:80:2b:5c:c4:62:7f:5d:a3:56:54:4a:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:41:3E:20:E1:74:AD:24:EB:B9:0E:04:47:95:72:3A:28:EA:59:C2
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:13:d6:4c:ac:e4:53:ea:65:d4:d2:ae:55:9c:7c:fd:d6:db:
         4f:3d:b8:4e:27:28:47:89:06:b5:6f:da:d5:5a:b3:ab:92:b8:
         40:63:b2:12:a2:5b:80:7b:a0:d9:29:d2:f7:db:65:a8:97:10:
         fe:86:b3:df:ca:02:4f:63:c5:53:b1:8e:cd:75:bc:56:e9:0b:
         45:b9:8f:d4:07:7b:e3:b6:f8:1c:8f:4a:3c:31:43:a6:b9:1e:
         14:5a:01:a2:b4:9e:63:84:0c:3d:70:f2:71:74:74:49:5f:1d:
         8e:49:a7:8a:3d:87:db:8d:05:6f:65:69:70:ed:2e:6d:2d:82:
         4a:e3:bf:1d:4e:20:24:fe:e4:02:c4:d1:76:b7:32:7a:50:3c:
         e6:32:bd:81:d8:b3:a4:b6:18:55:3d:f9:cc:ba:fa:cb:d4:de:
         a4:6f:d7:15:57:d4:04:5b:62:84:3f:e0:21:6a:94:13:2a:86:
         d4:94:f6:bb:5e:4c:fb:12:64:60:95:d2:42:a7:ab:ab:76:ac:
         16:08:61:8f:42:e2:84:53:23:9e:cd:a2:38:ed:9f:a7:c8:1c:
         36:cb:50:e4:2c:da:c1:ac:fb:90:2b:48:b3:dc:c5:bb:a6:75:
         5a:b6:2b:d7:d6:32:2c:23:df:a0:e7:0e:e2:f3:7f:fc:d8:1d:
         48:aa:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----