Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
File:                     YtGQsjjZeveQC9y9AjBLeC_8ryo.mft (raw, json)
Hash identifier:          NZ/CAiHy2EMrDRm742bN8taxAUFffWQVa8jpk65IJXQ=
Subject key identifier:   3D:DB:ED:28:DE:CF:74:CD:1C:88:8A:2F:D2:4C:47:F5:2F:09:E2:99
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Certificate issuer:       /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial:       01962E618922661CF4B6EFD8281029D2DAD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
Manifest number:          13CC
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: BZgRuxw6XN5JK6FOhunyeY0a9Fc.roa (hash: yKRC8CuGjayGobPtwmCDX6ktnCZk3RWj3tDYbdA547A=)
                          2: KidBmSJQC90WWlzzX6-raLlPkBk.roa (hash: UjIj4BCKN2Yzl+7rl6tYpEx3eAYndxpux9jsq4JXQKM=)
                          3: Y33-idsN2IrHbXJmRfchF8SWRjM.roa (hash: Qhp5Guy5ylBt3xJaF8ORUseIHpCiXnCFbO+p2dIHmtY=)
                          4: YtGQsjjZeveQC9y9AjBLeC_8ryo.crl (hash: n8FDhX9xrYIZOFF25vbrXYJpYaEjQJorIm99gxKcddM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:89:22:66:1c:f4:b6:ef:d8:28:10:29:d2:da:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=3ddbed28decf74cd1c888a2fd24c47f52f09e299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:f4:de:a1:57:71:21:e4:cc:af:31:79:5d:
                    3b:bc:a2:77:72:f6:ef:e4:10:f8:9d:94:c7:b7:8f:
                    59:85:27:5e:c7:6c:cc:98:72:5f:9b:d9:0b:ee:f7:
                    cd:8a:e1:20:71:85:06:a2:3a:15:8c:e8:d0:90:3e:
                    b4:5b:51:b3:da:0c:e9:fe:a3:54:1e:06:4c:57:bb:
                    0f:9c:51:fb:8d:84:88:0b:28:27:6f:43:8d:e9:b7:
                    ed:80:e7:d8:ea:67:15:4f:3e:5c:9f:44:d7:a3:cd:
                    b3:9a:2c:cb:ca:f7:45:a7:b3:12:c3:12:89:8b:ba:
                    75:78:97:36:f6:b3:e9:54:5a:ff:15:82:04:21:db:
                    3c:0f:35:8b:db:9d:46:bb:9d:a7:05:fd:79:3c:e4:
                    38:53:a2:6a:75:72:4c:f7:c8:8e:c8:78:0f:96:cd:
                    e7:cd:3b:9c:f1:65:95:5a:5b:9b:6e:36:f8:8a:7a:
                    ba:fb:3a:c0:ea:6a:14:98:9c:92:c0:b8:95:54:fd:
                    f7:17:cb:cb:35:94:e3:73:9b:77:f9:a4:9a:ec:00:
                    75:18:40:78:c6:5a:b4:5d:46:a0:ae:bf:f4:9d:7e:
                    b0:34:6d:b4:3e:08:2e:35:0d:95:05:dc:92:9c:93:
                    30:90:81:c4:d2:2e:69:22:8c:ce:e0:3f:49:bc:8b:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DB:ED:28:DE:CF:74:CD:1C:88:8A:2F:D2:4C:47:F5:2F:09:E2:99
            X509v3 Authority Key Identifier:
                keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:34:72:95:9d:e9:e1:6d:18:bf:78:a0:fa:7b:2e:03:82:b0:
         93:cb:4c:b0:c1:5d:0a:eb:76:16:72:0a:c7:41:64:8e:7b:56:
         0b:fe:f1:ff:cc:33:38:20:8e:7b:78:19:b6:93:0e:de:71:77:
         5e:9b:3b:35:68:a8:aa:3a:a6:5e:03:73:d6:be:05:85:13:6f:
         fc:43:b2:e4:b1:0d:85:60:b6:c3:80:30:c0:43:43:d4:66:3d:
         ee:63:e8:53:6e:d7:82:2c:6d:d9:15:4b:82:5d:f4:78:ed:6c:
         f7:d2:a8:49:87:c3:f5:e6:1b:92:8c:fc:30:d1:be:7a:63:2b:
         b8:62:1f:96:31:1d:72:90:4d:4b:19:12:6c:45:4d:3c:a9:87:
         54:55:6f:ad:74:21:9b:9a:c4:a8:c9:aa:87:8b:a8:53:75:08:
         53:50:76:f5:7f:c6:d0:f4:97:11:62:3d:73:d7:b3:aa:87:15:
         1d:f4:23:83:e1:02:f2:d8:f4:1d:b3:5d:3e:36:01:63:c6:1a:
         45:14:73:39:1a:f7:bf:77:db:3d:c7:9d:e1:c5:0d:ef:1f:9a:
         30:e5:0d:cd:3a:ed:97:54:5e:e4:de:b5:d8:ad:7b:7a:8b:e0:
         64:c6:4f:5c:49:0e:44:0d:c9:c2:50:71:4d:fc:73:9a:d2:e4:
         86:69:a7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYkiZhz0tu/YKBAp0trQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZDE5MGIyMzhkOTdhZjc5MDBiZGNiZDAyMzA0Yjc4MmZm
Y2FmMmEwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
EygzZGRiZWQyOGRlY2Y3NGNkMWM4ODhhMmZkMjRjNDdmNTJmMDllMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklz03qFXcSHkzK8xeV07vKJ3cvbv
5BD4nZTHt49ZhSdex2zMmHJfm9kL7vfNiuEgcYUGojoVjOjQkD60W1Gz2gzp/qNU
HgZMV7sPnFH7jYSICygnb0ON6bftgOfY6mcVTz5cn0TXo82zmizLyvdFp7MSwxKJ
i7p1eJc29rPpVFr/FYIEIds8DzWL251Gu52nBf15POQ4U6JqdXJM98iOyHgPls3n
zTuc8WWVWlubbjb4inq6+zrA6moUmJySwLiVVP33F8vLNZTjc5t3+aSa7AB1GEB4
xlq0XUagrr/0nX6wNG20PgguNQ2VBdySnJMwkIHE0i5pIozO4D9JvIuyNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3b7Sjez3TNHIiKL9JMR/UvCeKZMB8GA1UdIwQY
MBaAFGLRkLI42Xr3kAvcvQIwS3gv/K8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTkt
MTYzZmI3MDAzZTVkLzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi81YTMzN2YtYzg0My00NWY0LThkOTktMTYzZmI3MDAzZTVk
LzEvWXRHUXNqalpldmVRQzl5OUFqQkxlQ184cnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDRylZ3p
4W0Yv3ig+nsuA4Kwk8tMsMFdCut2FnIKx0FkjntWC/7x/8wzOCCOe3gZtpMO3nF3
Xps7NWioqjqmXgNz1r4FhRNv/EOy5LENhWC2w4AwwEND1GY97mPoU27Xgixt2RVL
gl30eO1s99KoSYfD9eYbkoz8MNG+emMruGIfljEdcpBNSxkSbEVNPKmHVFVvrXQh
m5rEqMmqh4uoU3UIU1B29X/G0PSXEWI9c9ezqocVHfQjg+EC8tj0HbNdPjYBY8Ya
RRRzORr3v3fbPced4cUN7x+aMOUNzTrtl1Re5N612K17eovgZMZPXEkORA3JwlBx
TfxzmtLkhmmniQ==
-----END CERTIFICATE-----