Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
File:                     YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft (raw, json)
Hash identifier:          DLnp14eNdOV/8EZrgQ2jDVj/1oSdywZjZDyLV7erQI4=
Subject key identifier:   AD:C6:D7:DD:83:97:3B:EF:A9:00:A1:97:10:CE:CD:D0:62:C8:5A:A6
Authority key identifier: 61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88
Certificate issuer:       /CN=61658d5efa2a0a3c36c9239374258a98f7fda388
Certificate serial:       01962ECFAE3D3A77DBE59F11EF6EFAAC1AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft
Manifest number:          0C73
Signing time:             Sun 13 Apr 2025 11:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:24 +0000
Files and hashes:         1: YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl (hash: tGYhltCizq9lhibUroNsbBbmpawiquVLBAakkfbk3iU=)
                          2: dC8gOmayB-chyoQvohvN-0T41MI.roa (hash: CEU2++abo0F1b85LSOtJ8mERuDAvIcX+n86rAzfnRdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ae:3d:3a:77:db:e5:9f:11:ef:6e:fa:ac:1a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61658d5efa2a0a3c36c9239374258a98f7fda388
        Validity
            Not Before: Apr 13 11:01:24 2025 GMT
            Not After : Apr 14 11:01:24 2025 GMT
        Subject: CN=adc6d7dd83973befa900a19710cecdd062c85aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:ec:0d:af:fa:3e:ba:de:05:e6:77:12:57:
                    42:cf:ad:a4:d3:e8:67:03:c8:75:b2:0b:a9:23:dc:
                    4a:ef:1b:ec:1f:fa:da:3d:62:74:a1:33:8f:32:05:
                    92:e0:c7:85:75:31:19:97:85:5c:93:c2:d9:91:f4:
                    15:08:d7:e4:f9:39:47:6a:2c:8d:aa:94:c1:86:cc:
                    77:df:27:c3:ca:f7:47:13:56:e2:7b:ac:d0:25:22:
                    81:55:ed:9e:20:4a:69:68:9d:f7:85:dc:1d:d1:8b:
                    92:44:77:25:f2:4f:be:b6:87:16:b4:e2:02:84:4c:
                    6b:8e:19:27:7a:25:91:31:44:92:c7:0a:9a:27:77:
                    62:42:53:c3:3b:68:98:c0:9d:8d:76:8b:a0:0d:df:
                    4f:a4:23:98:79:7f:05:f5:bb:01:1d:da:47:41:dd:
                    09:0e:1b:1e:7b:aa:bb:c5:3e:3c:b6:74:23:fc:6e:
                    f9:2e:52:5f:23:25:a5:76:e6:f6:71:72:87:50:97:
                    3d:6d:67:d4:2e:c7:d4:3a:04:f7:46:50:91:fc:8c:
                    67:8b:c8:50:98:97:81:6c:77:5e:96:6d:60:b1:b6:
                    88:45:7d:82:1b:1f:a4:e0:2b:8e:32:a4:a3:55:cd:
                    65:8c:f7:d6:10:88:01:38:23:eb:92:b1:81:2e:b7:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:D7:DD:83:97:3B:EF:A9:00:A1:97:10:CE:CD:D0:62:C8:5A:A6
            X509v3 Authority Key Identifier:
                keyid:61:65:8D:5E:FA:2A:0A:3C:36:C9:23:93:74:25:8A:98:F7:FD:A3:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWWNXvoqCjw2ySOTdCWKmPf9o4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4b128d-ed47-41c1-aaf0-dfe6c5eb1f7c/1/YWWNXvoqCjw2ySOTdCWKmPf9o4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:6e:82:98:af:9e:ad:a3:e6:ef:d3:ea:e4:a8:13:11:6a:
         fa:f6:8d:d4:ff:8a:d8:0b:b9:6e:97:e9:3e:35:46:d0:be:7b:
         ec:ad:55:0b:b9:0b:24:da:a2:3c:78:a9:a3:8b:97:45:60:09:
         3a:9a:22:a5:da:77:e0:e8:b5:dd:5f:7e:2c:c3:01:a1:5d:dc:
         a5:55:19:c8:5c:73:7f:94:9e:7e:67:f1:2d:ce:03:25:aa:cc:
         fd:48:cb:4c:66:9a:05:5f:fc:db:af:47:6f:c0:f5:fd:f4:91:
         03:31:54:aa:dc:6b:dc:76:3f:e9:c2:f3:d7:d4:a4:5e:bd:d2:
         9f:5c:fb:e7:87:ac:04:1e:87:25:03:2a:3b:84:a4:17:bb:e2:
         02:65:9e:a6:d0:61:fb:d1:88:07:0b:79:eb:37:c2:9d:3c:b6:
         b2:e3:87:e5:ae:8b:25:ee:51:9e:ed:29:d4:e6:05:3e:ae:9d:
         a4:e8:05:77:52:ef:eb:6d:31:e9:1c:87:3f:67:a4:2a:4a:20:
         af:bd:08:47:bf:27:66:ad:e1:bd:d6:9f:2d:24:b3:0f:2a:de:
         03:3f:0b:75:87:98:8f:3b:43:b4:d3:79:a2:84:03:b7:f0:aa:
         1c:44:f0:53:53:e3:0a:38:43:0e:cc:be:1f:4d:7f:54:9f:86:
         4a:65:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----