Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
File:                     yudPzOQZM_QnxTfTZdXnYdJlXrY.mft (raw, json)
Hash identifier:          FWoLi3D/Evv7yCGZlDWK5DyqRRQF1sQGxCr7EpWhNp8=
Subject key identifier:   36:0C:45:A6:01:35:DD:91:A4:33:CA:E0:DC:48:96:42:56:E8:E5:0B
Authority key identifier: CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6
Certificate issuer:       /CN=cae74fcce41933f427c537d365d5e761d2655eb6
Certificate serial:       01962ECFB13608C94B667F3BD14944709F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft
Manifest number:          0C23
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: y7pqrIfOM4grpXfLN2-wf1fCTBM.roa (hash: v2U5GSWu/G3ebOQx0tbHDGLoLjB8X7C4XKiRyj7FSr0=)
                          2: yudPzOQZM_QnxTfTZdXnYdJlXrY.crl (hash: R2uDlkrI612G0vLhnJEvdpJf9H3kVn6LHdRTEorp9zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:36:08:c9:4b:66:7f:3b:d1:49:44:70:9f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae74fcce41933f427c537d365d5e761d2655eb6
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=360c45a60135dd91a433cae0dc48964256e8e50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:39:79:0b:47:50:ab:e8:a6:a7:57:c0:e0:
                    0c:17:16:61:71:14:77:fd:d8:d6:da:4a:af:ac:81:
                    e5:d8:0a:75:51:23:3c:b5:ad:33:c2:4e:4b:83:d4:
                    63:99:f2:82:66:1b:c1:bb:e7:d8:dd:af:98:a3:05:
                    8a:12:77:a8:14:6a:96:47:57:43:e4:00:db:d7:7f:
                    fd:21:19:6f:45:b0:ec:27:a9:ad:1d:59:60:37:60:
                    96:d3:b4:14:48:d6:78:56:b5:09:9b:37:0b:71:0f:
                    07:ad:51:3e:26:13:3f:23:e7:cc:c3:0d:ef:08:c6:
                    57:61:36:b6:f0:9e:18:07:43:f5:03:fd:62:d4:6b:
                    bd:4b:e0:03:31:0f:92:58:ee:50:a8:4c:74:3b:38:
                    f9:d8:23:3e:34:b9:e5:b5:3f:eb:0f:79:c4:6c:3b:
                    ec:30:20:70:e5:9a:8c:11:de:ce:c7:aa:4d:a1:8b:
                    52:c4:40:43:8e:0f:80:12:49:76:da:70:c7:c3:9a:
                    a2:f0:38:4a:86:ee:64:57:d9:3c:5c:b0:80:3e:46:
                    a0:63:4e:ad:5d:19:6f:d1:da:b6:b6:49:98:1c:49:
                    6e:07:39:70:cd:ae:b0:25:45:cf:c6:95:fd:df:55:
                    e4:0b:ad:3e:fc:5c:a9:8e:e1:92:ba:0e:05:a3:02:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:45:A6:01:35:DD:91:A4:33:CA:E0:DC:48:96:42:56:E8:E5:0B
            X509v3 Authority Key Identifier:
                keyid:CA:E7:4F:CC:E4:19:33:F4:27:C5:37:D3:65:D5:E7:61:D2:65:5E:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yudPzOQZM_QnxTfTZdXnYdJlXrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7d0ba2-97f5-420b-8dc0-c35410b5b691/1/yudPzOQZM_QnxTfTZdXnYdJlXrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:37:da:8a:f0:a9:73:ed:31:55:84:f6:d3:1d:8c:e7:fc:36:
         1e:b1:2f:21:e5:cb:bf:a1:ea:e9:b1:9a:55:52:dd:90:74:1b:
         c8:ae:09:38:8b:14:5c:c7:65:cf:de:dd:b9:16:8a:f4:67:84:
         76:5a:f0:95:99:c9:a7:cb:8c:df:f0:8d:78:91:fa:b4:e9:33:
         12:8e:1f:33:cb:f5:3e:85:6f:06:ff:d4:e6:55:d2:14:b3:f5:
         f7:bb:2c:77:74:f5:d1:be:2f:aa:a4:c8:9d:9d:60:ed:f7:77:
         d4:61:17:5f:1f:97:44:0b:ed:79:77:42:b1:c8:35:dd:4d:ae:
         f1:a7:70:2f:1a:c5:f0:2c:90:ab:e7:2b:5b:e5:11:7d:d7:d1:
         62:66:14:f2:63:b6:a6:63:37:af:8c:e9:dd:81:dd:af:87:42:
         76:d2:d8:2c:a1:9b:89:a8:53:17:45:d0:25:38:17:62:45:a0:
         39:39:8b:b4:44:27:83:5f:8d:9d:65:cd:5d:9d:6b:08:54:9d:
         ca:f8:0a:77:9f:06:71:f6:08:aa:b5:72:87:2f:01:cd:88:8a:
         e4:2e:29:e8:da:9a:e8:a5:b9:cd:47:21:ca:35:92:cb:8a:1a:
         85:65:1f:77:c9:af:05:13:dd:79:ee:f0:e9:1b:b8:85:6d:0f:
         40:24:b0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----