Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
File:                     ypzNgwt-AzCL9c8l5np_wr3glXw.mft (raw, json)
Hash identifier:          /rWox/NIZqQzq9w5E63Z2ETHCj9uGePetIFacXtczGk=
Subject key identifier:   96:01:BE:39:28:25:52:DB:ED:18:79:0B:C0:8D:74:14:40:52:B3:22
Authority key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Certificate issuer:       /CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Certificate serial:       0194BC73003DCDBC21F1D73A7EE2D917BB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
Manifest number:          09AF
Signing time:             Fri 31 Jan 2025 13:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:40 +0000
Files and hashes:         1: 1X-psqrhXoWJNm9AGHsWuX9CEYk.roa (hash: bW01QgSO3kxqUT/liNPe0TPUpwe3PqHFLx6Llohhsy8=)
                          2: 8nba-exF3ZHVESE2CvVjIKuU3UQ.roa (hash: jxvFl3q0Zgzzo4QwCA+FiBdsIMPCA+I2+5CHXaI0+OI=)
                          3: 9TUthn7ejeG64w7grptdSjUlXKE.roa (hash: 3zMhW3nOAp1r0OTqbhFRoTIwADRtT/jaE/n4cjhK3GE=)
                          4: PEXdMp-4CvfhDpAVQ0Pz3ECZAhk.roa (hash: qaoxZI1AadmU8INHwPbDVXQK737+Qj88K4LOCtSbEyg=)
                          5: SdnNzvJWNdkEM7juDvNhfhrEGDc.roa (hash: 0qmwkQqdueAwd/Pb8gkDQUZcdwTN3s2EY0Hkcyic/PY=)
                          6: e5Sy1VAry68r-4ha4VS5j2qDIh4.roa (hash: iAgJw0j0bHx4il0UO6E61c4MJfLKF0a3JiNbi25PF/w=)
                          7: uQpDv6_WpxIORk7MF0CkwlUdu-I.roa (hash: Y5wIpaLoJWPZkcJrf68AZMylVyk3XWqZktzm9naZ8+o=)
                          8: ypzNgwt-AzCL9c8l5np_wr3glXw.crl (hash: eJJl9Ijlc3g0gBKB34kPCC/deDl+ZxkTjLq8YPg5k9I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:00:3d:cd:bc:21:f1:d7:3a:7e:e2:d9:17:bb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
        Validity
            Not Before: Jan 31 13:00:40 2025 GMT
            Not After : Feb  1 13:00:40 2025 GMT
        Subject: CN=9601be39282552dbed18790bc08d74144052b322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:71:28:15:9a:58:f1:8c:13:d2:d0:c6:b4:
                    fa:c1:3c:99:e1:69:1f:1d:17:cf:96:cd:f9:63:96:
                    d6:40:82:a7:27:41:98:c8:79:75:be:68:57:26:e2:
                    cb:b1:7a:ab:ae:b2:3a:e7:36:59:f2:83:e9:f3:16:
                    b8:ec:da:ab:55:92:e3:c6:28:67:9f:32:aa:1e:e7:
                    52:af:cf:47:8f:2c:af:c9:ef:69:f4:1a:c6:ce:d8:
                    de:0e:7e:f0:96:5a:4b:b9:c1:14:80:ce:d6:07:ef:
                    dc:1a:2f:9b:23:50:ef:e7:a8:e5:69:b6:66:0e:0d:
                    50:09:55:dd:41:38:6f:8e:ea:53:23:b2:a1:c9:13:
                    00:8c:8b:5a:f3:0a:5e:6f:8d:30:07:c9:f7:5b:e5:
                    b3:42:eb:ee:23:22:07:43:87:c4:5c:b6:2b:bd:04:
                    c7:9c:70:40:d0:0b:0f:09:5c:e6:c0:f3:dd:9b:a0:
                    3b:b6:29:7d:8a:8c:d4:5b:18:32:3e:37:8f:84:83:
                    4a:e6:82:98:91:0b:1a:a0:56:d9:c2:e9:ee:54:28:
                    d6:e6:33:d8:ca:cb:c1:73:32:02:0a:eb:23:1d:bd:
                    19:70:e5:03:0c:77:19:9c:ca:0b:da:5f:63:1b:f9:
                    6e:51:b2:02:99:5f:0d:3e:58:51:15:4a:4b:18:1b:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:01:BE:39:28:25:52:DB:ED:18:79:0B:C0:8D:74:14:40:52:B3:22
            X509v3 Authority Key Identifier:
                keyid:CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:37:df:f7:26:05:21:f8:3f:06:6e:35:33:3b:0a:41:98:
         39:56:d6:a8:21:ab:f9:46:89:cc:29:0f:df:2a:37:c0:c2:bc:
         4e:32:b0:87:b0:25:de:fb:79:70:fd:88:62:e9:76:52:e6:7b:
         70:b5:0b:9e:21:9c:f3:b6:34:81:80:be:b2:12:fe:f9:26:27:
         e4:d0:1d:37:dd:58:62:2d:2d:fb:eb:24:ee:94:f8:1b:ad:39:
         02:29:ee:3e:4d:1c:16:26:fc:3f:54:74:69:45:fe:df:c9:a3:
         69:4c:12:f6:15:c8:ae:0d:76:9a:de:f6:28:80:2f:bf:41:c7:
         7c:09:6d:5e:14:34:e8:8f:ff:b4:b4:1c:93:ab:56:db:0f:26:
         58:d7:01:46:d5:f4:59:ef:28:43:06:35:3a:38:d3:f5:64:94:
         2e:59:74:6c:11:8c:04:a8:99:9f:8d:ba:90:f8:29:7c:76:6c:
         41:7f:f2:97:73:41:d4:a8:ed:be:5d:21:05:96:41:f3:74:cc:
         d9:a6:f7:5c:51:8a:91:97:2e:eb:b0:65:37:af:3a:17:d5:1c:
         fb:5d:51:ff:2c:35:5f:22:85:8d:d9:7f:0e:1f:3c:f8:9b:a6:
         f0:4d:c4:85:6b:83:36:57:5b:fa:bc:c0:76:41:0c:fd:7d:4a:
         c2:80:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----