Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
File:                     yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft (raw, json)
Hash identifier:          Zy8bFQjgn0O14ssGmxSGzJh0lWBxNtYPodnsfpTVpQU=
Subject key identifier:   D4:26:BD:6C:DA:04:AD:4E:0A:84:FB:BA:C7:CB:96:79:74:7A:78:A8
Authority key identifier: C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77
Certificate issuer:       /CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
Certificate serial:       01962E2B403A8C3CAE8615EA3BF77514E4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft
Manifest number:          0B76
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: _Z27vdbVNx1AkVs4_tUBUqOLYnE.roa (hash: GcXnOCS0CtBJVhbx+3s+RdmGrB9WpH4rUku+ZZjo1A8=)
                          2: yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl (hash: wSROuzVE7HkcIttBlOjxLQvlDtCqxqeJWiNMBQSvjlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:40:3a:8c:3c:ae:86:15:ea:3b:f7:75:14:e4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84758053a0c4c6d5e003f3c869a89e4f2a9e177
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=d426bd6cda04ad4e0a84fbbac7cb9679747a78a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:b6:5a:25:21:b3:cf:93:24:0d:c9:97:3f:
                    88:5b:45:df:2b:f5:02:fc:82:c2:1f:df:51:bc:99:
                    c9:4d:a2:25:ca:cd:e0:8c:9a:06:f7:1d:3f:24:1e:
                    d8:3c:18:33:3f:08:e1:59:0f:d7:dc:f0:a9:21:c8:
                    84:c7:86:15:5b:de:36:64:55:d8:67:f7:cf:41:14:
                    5d:34:55:61:50:4f:c5:90:d5:5f:09:47:69:93:f8:
                    9e:82:73:9d:72:2f:c9:b9:ce:8c:cf:f4:6b:cd:27:
                    a3:63:3c:e4:30:a7:46:b0:f5:fa:fb:59:d1:6e:ab:
                    eb:a2:9c:bf:5d:3d:1c:db:21:a6:9b:ec:ad:78:71:
                    7f:b7:69:12:24:88:f1:80:b2:24:32:09:d4:fe:80:
                    6a:93:40:3a:73:16:80:7d:20:5d:ae:5d:88:ae:81:
                    19:e3:40:2d:a7:1a:a7:be:14:1f:81:42:89:1a:8e:
                    45:09:e1:1d:72:70:04:5f:d7:bc:61:8d:f8:e7:72:
                    52:0f:6b:c4:24:57:85:5a:21:e4:83:10:1f:9b:18:
                    5b:6c:88:4f:d4:59:dd:e7:ba:86:b5:fe:b2:3c:d5:
                    08:2b:9d:9d:03:b9:ec:f4:49:c3:ba:d0:be:63:1d:
                    b4:31:4d:0a:db:63:ad:62:a2:24:1c:2c:35:c5:e5:
                    ba:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:BD:6C:DA:04:AD:4E:0A:84:FB:BA:C7:CB:96:79:74:7A:78:A8
            X509v3 Authority Key Identifier:
                keyid:C8:47:58:05:3A:0C:4C:6D:5E:00:3F:3C:86:9A:89:E4:F2:A9:E1:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yEdYBToMTG1eAD88hpqJ5PKp4Xc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f08d9c-5ca9-4e53-97e3-9af2cb5dccf3/1/yEdYBToMTG1eAD88hpqJ5PKp4Xc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:13:1d:57:31:af:16:b4:f1:56:26:a0:4c:a0:14:7b:db:
         ae:51:0e:47:12:7e:47:90:11:72:71:93:d8:45:7d:a5:9f:75:
         df:ee:7c:8c:4a:cf:53:86:88:09:3d:6f:96:37:d3:15:ba:16:
         04:2a:72:29:ff:f5:9f:bc:f6:38:3e:5a:8c:11:c2:41:2d:48:
         78:d0:59:65:4b:d9:f4:1a:67:d0:62:a7:30:ed:2f:67:9f:1e:
         8b:d7:52:2b:4f:a2:55:39:1c:77:15:6f:bd:97:b3:3f:19:a4:
         e2:fe:61:19:f0:36:78:db:75:73:76:97:46:8a:0b:86:6d:0b:
         2b:4d:e1:9b:78:a2:94:a2:01:9f:de:87:69:67:be:d8:22:64:
         ee:37:0b:5a:86:75:b8:60:82:47:c1:6c:ae:6f:fd:8c:fd:51:
         39:ce:3e:6f:80:11:e6:b9:3e:ce:39:ab:cc:50:d1:0e:1b:51:
         7d:04:94:71:2e:74:1f:10:ff:64:5a:2c:df:59:bb:81:6d:cc:
         be:c0:49:00:e3:59:52:93:89:47:e0:5f:55:b9:ee:d1:5b:ea:
         09:7a:26:12:b6:9a:15:d0:fe:70:1b:5b:33:c1:45:fb:e5:7c:
         60:d2:3d:ba:62:99:ea:3c:49:00:82:3a:7d:b1:49:a0:cc:c8:
         f1:2c:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----