Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
File:                     ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft (raw, json)
Hash identifier:          HV1C3ByVGWYyftDX7yEqkY2rGWpRP03+qJ9jr8KRGes=
Subject key identifier:   5C:BF:3D:13:AA:2D:6D:A2:78:4A:F5:F4:09:59:05:8D:47:55:E2:7B
Authority key identifier: CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E
Certificate issuer:       /CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
Certificate serial:       01962E2AEEA385755A61CD141621610796A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft
Manifest number:          0237
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 59CnxlbcT-ZaaTX2J23S31L7ijw.roa (hash: b+AnFw3X9M74fTji1fm9+zA2kxxckPu0ywAdpSQ21NA=)
                          2: ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl (hash: I0180PFiO7McMQQNiMNFbZE2uy46Iq7qfnWDdWgyhiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ee:a3:85:75:5a:61:cd:14:16:21:61:07:96:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac24115a22c8d4121a4a06758aa869bd1c93a1e
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=5cbf3d13aa2d6da2784af5f40959058d4755e27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:99:ff:7c:e9:16:4c:15:0b:71:6c:80:66:
                    f1:bc:76:74:0f:c7:fd:4b:f4:cc:af:e3:41:5c:e2:
                    2c:ee:81:69:e7:cc:66:00:15:19:9e:f5:2e:f8:21:
                    24:16:f6:23:54:f6:52:63:7c:ee:67:e7:9f:f2:dc:
                    f0:f1:3c:6d:47:81:5a:0a:1f:5c:3e:09:8c:8d:9e:
                    a3:2f:1a:78:cb:d7:f1:88:9c:db:2a:a6:30:9c:f7:
                    9d:32:eb:bc:04:e2:19:46:78:50:93:25:79:3d:1e:
                    d1:75:e5:ff:ca:fc:8e:10:e9:23:5e:74:87:93:2e:
                    c5:21:ad:f7:1e:a1:31:37:9d:3e:54:76:46:0e:e2:
                    22:e4:95:9f:5b:a7:9e:1d:9a:65:ea:84:20:2e:ce:
                    54:da:99:a2:8c:b8:55:79:d7:0b:d4:32:ac:93:d4:
                    dc:f1:65:a4:70:a2:2a:f0:3a:3d:65:71:eb:ce:60:
                    32:70:41:5d:d3:2f:74:ff:3f:67:75:98:ba:ec:64:
                    0d:9c:7b:0c:89:5e:d9:6a:4c:45:dd:9e:9d:d5:4c:
                    a9:75:f6:55:9c:74:46:b4:9b:36:e1:ab:fe:9d:c0:
                    fd:fb:eb:0d:fd:25:53:80:37:fd:7c:c0:84:b0:92:
                    6c:b3:fb:7c:1a:71:b3:74:07:8c:f2:de:0f:50:60:
                    f6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BF:3D:13:AA:2D:6D:A2:78:4A:F5:F4:09:59:05:8D:47:55:E2:7B
            X509v3 Authority Key Identifier:
                keyid:CA:C2:41:15:A2:2C:8D:41:21:A4:A0:67:58:AA:86:9B:D1:C9:3A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysJBFaIsjUEhpKBnWKqGm9HJOh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/3e9d99-610e-45b9-b749-58ca45f2eba8/1/ysJBFaIsjUEhpKBnWKqGm9HJOh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:82:4c:16:13:ee:59:b1:8b:ed:60:4e:62:67:d6:a9:9f:49:
         f7:32:2f:3a:f1:55:09:49:1a:6b:9c:5b:fc:63:f5:1b:bc:bf:
         2b:85:f3:06:f1:52:b8:55:3e:1c:68:db:ba:ff:53:90:c1:9b:
         8b:a7:ef:3e:e2:c2:9c:8b:a8:09:4d:a0:d1:87:6c:d1:64:10:
         0a:d5:05:7d:c8:57:35:5f:36:e3:ad:66:8b:d4:3d:82:cb:a4:
         56:5b:9c:5f:c3:55:32:c7:48:c7:36:64:ef:51:18:f7:cc:d6:
         4a:c7:0e:b8:95:c1:d1:d3:05:25:23:e9:8b:64:39:27:16:15:
         3e:ef:a2:11:98:f3:bd:62:25:3b:5a:f3:59:a1:d0:93:f6:e9:
         6e:c7:ce:be:97:53:83:c5:9e:a9:81:06:5c:bc:62:93:6c:aa:
         7f:e0:ee:30:5c:16:b7:7e:e1:ee:37:30:81:6e:d4:77:35:80:
         9c:0c:3f:80:be:00:6c:17:6c:83:96:88:ec:df:11:c7:c7:ad:
         a6:50:86:3f:de:88:30:b3:ea:05:1a:21:a4:55:5b:9d:99:e0:
         34:36:b9:66:0e:2d:8f:b4:08:82:8d:76:0a:4b:36:1d:75:f5:
         b5:00:36:a1:2b:0e:e9:63:20:82:77:36:7a:30:34:f6:a4:3b:
         74:cf:db:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu6jhXVaYc0UFiFhB5anMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzI0MTE1YTIyYzhkNDEyMWE0YTA2NzU4YWE4NjliZDFj
OTNhMWUwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
Eyg1Y2JmM2QxM2FhMmQ2ZGEyNzg0YWY1ZjQwOTU5MDU4ZDQ3NTVlMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArveZ/3zpFkwVC3FsgGbxvHZ0D8f9
S/TMr+NBXOIs7oFp58xmABUZnvUu+CEkFvYjVPZSY3zuZ+ef8tzw8TxtR4FaCh9c
PgmMjZ6jLxp4y9fxiJzbKqYwnPedMuu8BOIZRnhQkyV5PR7RdeX/yvyOEOkjXnSH
ky7FIa33HqExN50+VHZGDuIi5JWfW6eeHZpl6oQgLs5U2pmijLhVedcL1DKsk9Tc
8WWkcKIq8Do9ZXHrzmAycEFd0y90/z9ndZi67GQNnHsMiV7ZakxF3Z6d1UypdfZV
nHRGtJs24av+ncD9++sN/SVTgDf9fMCEsJJss/t8GnGzdAeM8t4PUGD2mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy/PROqLW2ieEr19AlZBY1HVeJ7MB8GA1UdIwQY
MBaAFMrCQRWiLI1BIaSgZ1iqhpvRyToeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zZTlkOTktNjEwZS00NWI5LWI3NDkt
NThjYTQ1ZjJlYmE4LzEveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8zZTlkOTktNjEwZS00NWI5LWI3NDktNThjYTQ1ZjJlYmE4
LzEveXNKQkZhSXNqVUVocEtCbldLcUdtOUhKT2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoJMFhPu
WbGL7WBOYmfWqZ9J9zIvOvFVCUkaa5xb/GP1G7y/K4XzBvFSuFU+HGjbuv9TkMGb
i6fvPuLCnIuoCU2g0Yds0WQQCtUFfchXNV82461mi9Q9gsukVlucX8NVMsdIxzZk
71EY98zWSscOuJXB0dMFJSPpi2Q5JxYVPu+iEZjzvWIlO1rzWaHQk/bpbsfOvpdT
g8WeqYEGXLxik2yqf+DuMFwWt37h7jcwgW7UdzWAnAw/gL4AbBdsg5aI7N8Rx8et
plCGP96IMLPqBRohpFVbnZngNDa5Zg4tj7QIgo12Cks2HXX1tQA2oSsO6WMggnc2
ejA09qQ7dM/btg==
-----END CERTIFICATE-----