Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
File:                     YQfi4ugXHTGdobxks2w8mF5kbCo.mft (raw, json)
Hash identifier:          1MdsGcEHrFU8HboUO8qoe415sRZZnOHAIcZAw/V/pNI=
Subject key identifier:   1A:F5:02:04:AB:CA:48:52:40:36:F4:E0:E9:3C:AE:D6:EF:4B:4D:64
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Certificate issuer:       /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial:       01962DF3AFB023CBFE8DCF739D4AFA617001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 2lOhAzlC5K0mMI8bchXi_D9R3Rw.roa (hash: wULZZ92mny/AlScu8gAC9jEDmMKs+7xfe1mY5oB7zrA=)
                          2: YQfi4ugXHTGdobxks2w8mF5kbCo.crl (hash: ixALGjsP866rLAJ3VHvX4JyVX+3wxlLoQKHpOT7lh68=)
                          3: hPjtiwCLC1o0j8AvpBmtBQU028U.roa (hash: HOlWkUmkwwPkAjP8XtxdcNr70UoyoWRPwYz3VVAT2tA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:af:b0:23:cb:fe:8d:cf:73:9d:4a:fa:61:70:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=1af50204abca48524036f4e0e93caed6ef4b4d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:1b:c2:36:f9:18:56:58:67:88:16:05:bd:
                    f4:4e:56:98:00:ee:33:ea:24:71:23:5a:95:87:b6:
                    05:c8:0e:92:7a:1f:00:5c:14:d0:16:d2:d3:f9:20:
                    4a:b2:84:5a:78:68:da:61:97:ca:0d:09:ee:9c:66:
                    8e:81:4b:ba:3e:27:40:ea:5f:4b:1d:1b:6d:c9:2b:
                    7b:74:49:8f:20:63:07:d5:72:8a:f9:0b:1e:78:92:
                    02:a8:bf:dc:00:95:fd:0b:b1:63:db:07:21:5d:31:
                    20:30:0c:d8:a4:6d:e6:0d:3e:7a:81:88:b2:de:1c:
                    01:94:5a:54:ff:da:94:99:88:7d:c1:df:86:37:92:
                    f2:34:59:32:12:ed:8e:0e:34:68:3b:88:d8:cf:5b:
                    77:51:1b:c8:31:a8:4e:6d:a8:a5:ea:a0:b4:7f:c6:
                    ca:55:f9:ed:0f:85:30:22:6b:25:30:d4:78:a4:37:
                    84:7b:84:dd:ec:3c:cb:dd:1c:73:ca:71:6e:2c:32:
                    d6:56:ff:5f:e7:6f:5f:2b:a3:b3:04:7e:e8:22:86:
                    0e:8a:be:ef:8b:47:99:df:a4:dc:d4:cc:06:d9:20:
                    9e:86:ce:30:49:20:2e:d8:18:3f:0a:97:c3:af:b0:
                    30:d5:93:cf:4f:a2:6a:b9:a1:d5:9d:1b:03:d1:5e:
                    89:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F5:02:04:AB:CA:48:52:40:36:F4:E0:E9:3C:AE:D6:EF:4B:4D:64
            X509v3 Authority Key Identifier:
                keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:70:ae:75:98:8e:c0:8a:19:8d:94:a7:27:3f:df:47:e3:70:
         27:eb:c5:43:1d:55:1e:8a:c4:9e:25:e2:0d:7c:e2:71:1c:f4:
         fd:f2:88:cd:43:68:3b:3b:d5:a4:28:b5:84:b8:97:88:d4:69:
         64:51:b6:17:de:64:95:74:26:8e:a0:d4:c7:cd:d2:67:91:bf:
         9b:ff:6a:9f:d6:f7:47:6b:17:c5:45:56:77:8f:af:54:42:e2:
         f4:73:03:7e:25:58:fa:23:94:e5:ab:5d:fe:0b:c8:64:98:c9:
         8e:2c:7b:e6:16:31:9f:b9:17:77:4c:62:39:02:95:b5:93:94:
         7c:41:66:ad:19:e8:d4:01:69:1f:82:60:ee:ac:cb:51:af:3d:
         76:08:2a:78:b8:4f:7d:f0:34:8d:c6:83:f8:ea:f0:c2:57:97:
         af:33:63:1f:8a:37:96:81:18:4a:60:5b:8a:b6:67:89:34:ca:
         b8:b2:2e:1c:7c:8c:86:d0:83:a8:04:86:59:16:5d:2a:cc:4f:
         27:e6:f5:c1:6d:66:20:17:c6:76:4d:57:07:a8:2d:d8:d4:7d:
         99:2f:6d:d1:fa:fe:34:d0:f0:e8:9c:d9:9d:31:3d:c3:e9:c8:
         d9:5e:73:58:21:b3:42:51:d2:d5:e0:a3:bf:66:0b:3b:53:81:
         9c:b9:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----