Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File:                     YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier:          wtS2W159EVV2hozJRRrMtzm6MSuDXTik0nR9tePgyzA=
Subject key identifier:   2D:F9:3B:DC:85:18:4A:D1:5F:A1:0D:97:74:56:EF:5E:C5:27:35:BC
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer:       /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial:       01962E995F15568B8D5A4A4192B94DC902E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: X_PEzQ4h2-EZtXwGF1yRsO_RZBY.roa (hash: slaceRsemZrT4J4p4MYMe/YtYOfBM+8j+DQ+MF7JOoM=)
                          2: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: wMgf3h/EW9MbDFCqjukWze5alXpAM8jR//HDYmPG5ME=)
                          3: uJcwClz6uJRHIAqaB4c6iwo2p2k.roa (hash: YfPxGf556xtNVvXkpS2EQtFKQegwkF+I1h92ZELHuRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5f:15:56:8b:8d:5a:4a:41:92:b9:4d:c9:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=2df93bdc85184ad15fa10d977456ef5ec52735bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:9d:77:a3:4d:2e:6c:d8:df:2f:79:f8:14:
                    8c:b9:64:40:62:ee:81:4d:5b:fb:4d:f8:6d:4a:0c:
                    38:41:4b:e0:cc:a8:9a:26:32:f4:f0:9f:6a:41:ca:
                    f5:91:3e:06:a8:29:ac:db:89:2c:79:48:2e:f0:48:
                    f9:50:dd:39:96:39:c9:a4:5c:d6:42:82:a4:ae:40:
                    00:0e:21:d5:29:de:dc:82:88:15:0a:40:5b:96:ab:
                    e9:24:55:84:d0:5c:fa:dd:c7:e4:e4:b5:93:7d:42:
                    f1:6a:b9:c8:58:34:7d:73:21:77:dc:8b:55:1a:a2:
                    d3:0a:ba:26:0c:ec:50:26:e0:37:42:3f:cc:3b:4b:
                    d2:f2:6b:69:b8:bc:57:37:4e:7d:1f:f6:fb:d9:00:
                    64:51:ad:1d:40:37:ca:41:95:5f:fa:50:2f:a8:02:
                    c9:93:41:88:f7:b9:1e:20:19:93:63:03:42:31:bb:
                    37:f9:ef:17:47:98:0f:be:4f:8d:2d:85:1b:ac:aa:
                    13:16:08:1b:1c:32:af:6a:86:16:ed:a7:a6:e3:f8:
                    ba:29:0a:1f:5b:4a:69:b2:95:6e:a4:2d:c9:b4:b5:
                    c1:1b:e2:1d:64:28:63:5d:40:c6:14:a9:03:35:40:
                    af:44:fb:e5:c8:2a:d6:af:be:6a:65:59:2f:52:fb:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F9:3B:DC:85:18:4A:D1:5F:A1:0D:97:74:56:EF:5E:C5:27:35:BC
            X509v3 Authority Key Identifier:
                keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:87:18:a9:76:9f:2c:fe:fb:76:85:8a:4e:5c:b1:6c:6d:c9:
         08:3e:21:9e:c9:31:c2:1e:87:70:f0:01:71:d2:0d:a4:f2:aa:
         c3:ff:07:f4:99:71:cf:fc:47:d6:41:95:34:37:ef:96:e6:6d:
         57:a5:64:83:36:cd:7d:f8:e1:c9:ec:be:0a:d4:bd:0d:bb:84:
         85:5e:10:c8:76:f2:9d:99:55:6c:9a:bf:79:ee:ae:30:61:fb:
         a9:3b:70:36:71:b0:63:49:62:1b:55:15:77:29:66:18:87:2c:
         8c:20:b9:d5:27:7c:14:a6:90:d3:42:35:f0:54:bd:2d:46:67:
         92:44:d5:73:35:2a:2c:8e:85:30:a2:c9:a4:9d:30:ce:84:25:
         38:62:4e:85:5e:18:3d:8f:c7:4c:b6:35:50:b1:e1:02:be:84:
         ce:80:0b:97:e2:af:be:b9:fa:9a:7e:19:b3:c0:16:d0:17:aa:
         12:2e:31:de:e9:65:4b:f8:ad:f1:b5:30:7d:4f:d8:53:b6:91:
         c7:7c:e6:01:8f:95:8c:35:b3:80:71:30:4f:cb:e1:f2:61:5f:
         cb:b1:f8:87:b0:ad:37:31:db:ed:cc:e2:11:b8:60:49:13:3e:
         66:53:23:dd:43:16:04:35:70:ac:e6:81:ee:07:be:a5:49:3e:
         f0:47:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----