Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File:                     YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier:          6pancPOgsLXvgS6V2BDCiAGNGUieiNIBv/Q2WnNliew=
Subject key identifier:   83:DE:48:4D:23:5C:D9:03:C9:57:4C:55:36:57:FD:63:D1:BE:63:D0
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer:       /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial:       01962E2AD01F0E9AE12F6615A87E516D4C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 8gQzPchz9vCwdjVN_ZBPueH3G6Y.roa (hash: Z7w2/N0mbKOYhB3ua7HBgoWG65DoIXePIy8hWS+i+vg=)
                          2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: rlHcgvQ4voYHpVha0K903ZhN0lBlw2C76eVjS4a0geY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d0:1f:0e:9a:e1:2f:66:15:a8:7e:51:6d:4c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=83de484d235cd903c9574c553657fd63d1be63d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:7d:ab:d5:64:2f:ec:f9:97:9b:17:d9:b9:
                    37:cc:f1:b1:46:bc:6e:af:6e:3b:7c:e2:89:95:ab:
                    84:d6:e8:9f:ab:50:8b:4f:64:47:79:37:d5:b7:32:
                    2c:e0:c5:6a:08:87:c9:ec:bc:05:32:db:92:c3:81:
                    56:86:a3:72:93:d5:6b:a3:63:44:82:71:e3:60:ee:
                    07:2c:21:71:38:de:a5:aa:1f:29:a3:29:4e:31:2f:
                    fb:32:61:84:f0:c7:0f:4b:fb:e4:fc:be:02:ba:98:
                    6b:37:32:b8:5e:ab:9a:eb:d5:37:3c:c5:43:15:40:
                    80:ab:59:47:0a:c1:05:3e:5e:9d:52:23:a7:da:32:
                    9a:60:6c:9f:8b:f1:53:01:ce:c1:c8:f4:08:a7:3e:
                    38:eb:cb:6a:0b:fd:7d:fb:54:bf:6d:ac:79:cc:c6:
                    04:10:af:ed:99:6e:6b:ee:99:a6:e8:da:e2:7e:75:
                    2a:a2:7f:d0:69:2a:77:f9:c9:ba:d0:b2:3d:96:a0:
                    6f:da:33:9d:1e:d5:82:af:12:27:ae:db:c9:17:ca:
                    7a:c3:0d:60:1b:63:f5:51:f6:1a:0d:a0:54:0d:ad:
                    89:02:dd:8f:27:e5:40:1b:53:ac:42:9b:d4:45:33:
                    03:61:d0:79:ca:19:88:43:17:1a:e3:cb:78:81:2b:
                    bd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DE:48:4D:23:5C:D9:03:C9:57:4C:55:36:57:FD:63:D1:BE:63:D0
            X509v3 Authority Key Identifier:
                keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:5a:0c:17:bc:3d:d7:ae:57:83:2b:fb:a9:64:a5:fb:3f:
         1c:2c:88:51:13:c0:00:61:14:3c:38:d2:6c:2a:e5:86:e6:09:
         ba:b6:84:51:75:07:76:3d:2c:b2:f1:6f:b1:dc:c8:eb:c5:c6:
         bf:b0:b3:48:6a:2b:5b:53:e7:21:46:de:72:e7:81:85:e1:f8:
         ba:ec:e3:d1:97:de:a3:e4:69:d7:4f:9e:a2:95:a7:5c:c4:b1:
         d0:19:a9:c9:50:07:69:01:8b:22:f3:3e:7c:3b:7b:65:52:26:
         5a:34:47:b8:12:58:35:77:4f:f3:94:95:29:f6:72:14:cf:93:
         ad:bb:66:31:20:b3:a0:f2:20:e9:b5:27:78:94:92:70:e4:9d:
         87:11:52:42:ef:57:bd:65:88:d5:1f:a2:1b:e6:c5:6d:74:e7:
         bc:57:f8:cf:29:6e:fb:73:1f:54:9d:6a:15:92:7d:d5:ac:b2:
         26:4f:c0:83:75:7b:1f:cb:b8:8f:46:c8:a3:7b:cd:8d:8e:74:
         da:fd:36:3f:e3:7c:4a:e8:7a:5b:5b:3f:3e:e6:4b:62:b1:08:
         8c:25:c6:26:d9:c5:88:b2:79:af:ed:11:dd:8c:05:a5:19:68:
         31:7c:a8:ce:2a:7a:0a:ac:16:34:56:fc:71:ce:24:34:72:78:
         29:49:26:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----