Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File:                     yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier:          aNYPiHoqYiBgxEwJKj0dBhyINJLdY+FxV7toLvtTww8=
Subject key identifier:   A9:57:FB:44:C0:FD:32:F9:CC:B7:A1:5B:A5:CB:0E:1D:D1:64:A8:4E
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       01962FAB4F8042EA87F2A2C267ABC58D2F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number:          11D2
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: qaAnyBes9jUnUhuZgA6_0wh2Utk.roa (hash: SqePUXPFn7aMkbwwWNRWIjpMhjMen/HlDEhNyjcwe8Q=)
                          2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: Mzfw47a+mlC5D5wnrQ7Dn4iIFOJ29XfG966V9TxlNCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4f:80:42:ea:87:f2:a2:c2:67:ab:c5:8d:2f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=a957fb44c0fd32f9ccb7a15ba5cb0e1dd164a84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e1:5e:da:09:da:67:54:6a:70:ef:00:2e:c2:
                    6a:10:ed:ee:27:f2:5b:45:b9:55:1d:3e:5c:90:e4:
                    f0:f0:bc:42:dc:fb:dc:f5:44:16:32:fb:13:d4:3e:
                    9d:a2:d1:b5:cb:74:3b:62:b7:55:2f:80:d7:67:15:
                    ce:e8:bc:bd:27:30:fb:43:80:c0:83:07:cd:c4:3e:
                    c5:aa:c8:ae:af:f2:21:c7:73:7a:9a:c1:34:48:a3:
                    a3:10:f9:8c:6f:b9:73:15:dc:7a:71:f5:b2:e6:0e:
                    c7:e9:20:28:d5:c5:29:cf:99:a7:c9:78:50:d7:c7:
                    8e:a4:3c:4a:d6:31:8b:fe:df:0e:88:9d:cc:4d:c0:
                    60:b9:aa:fb:db:98:66:58:a3:19:5e:6c:0b:84:58:
                    13:dd:4a:b4:ec:54:73:f6:68:89:68:5e:06:4e:c8:
                    96:4b:3c:c2:58:69:0a:01:db:71:19:3e:b3:e6:d5:
                    b4:56:74:bd:57:90:f0:05:b2:22:0b:14:5c:f7:76:
                    c7:3f:ba:01:d2:64:41:65:49:9e:a9:46:da:d4:d4:
                    2a:04:d5:dd:97:d0:00:19:97:93:77:c3:83:4d:4f:
                    c5:e4:e7:81:d0:bb:6b:c2:39:76:81:09:21:e9:2d:
                    2c:e6:21:44:d8:8c:e6:b3:61:fc:1d:07:ed:b8:fb:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:57:FB:44:C0:FD:32:F9:CC:B7:A1:5B:A5:CB:0E:1D:D1:64:A8:4E
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:70:e5:f4:e9:c9:25:22:21:9e:cd:71:82:b4:3e:82:78:13:
         84:af:f3:be:d6:44:d9:5b:67:c7:0b:87:67:1e:05:9b:b1:5a:
         ac:d0:24:bb:f0:7a:57:d9:d9:df:f7:ac:e3:59:fe:bc:0e:ec:
         c6:0f:09:b9:e5:9e:a6:9b:5e:af:c9:40:cb:f3:33:77:65:be:
         f6:c6:dc:e5:c9:ac:3a:23:c8:93:56:a3:d5:79:3a:dd:5b:c9:
         10:03:17:2f:98:d4:50:66:8f:3f:70:5a:5d:d8:71:93:d8:ec:
         40:d4:88:fc:fe:49:49:b1:9e:3d:8a:08:4c:89:83:9c:11:c5:
         db:de:84:74:50:f1:e4:51:52:f7:c2:cf:38:43:61:db:f8:4e:
         da:d6:dd:98:44:40:0f:30:0b:12:e2:09:60:74:11:14:bc:9a:
         9a:ef:59:59:18:48:b4:7d:73:69:7b:81:96:c7:64:bb:96:74:
         95:65:32:67:3e:94:23:a6:eb:b7:a6:6f:e7:cc:f5:23:51:15:
         6b:2f:19:a2:a4:db:da:d2:fe:ba:b6:3d:a0:06:88:0e:7d:af:
         0e:73:8c:2d:0b:c0:f5:f0:99:2a:47:36:3e:cd:a8:62:c2:51:
         7c:a6:65:4f:86:30:fb:1e:41:5e:1f:3f:64:65:72:80:f9:f1:
         5f:a3:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----