Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File:                     Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier:          z2JKSEOrkq8V0PPciwgIlIJ8SOE/TJufXmIum86AQMM=
Subject key identifier:   76:DA:39:28:96:E0:3D:1A:6C:E3:2E:DB:07:21:52:A7:EE:C4:91:B6
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer:       /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial:       01962FAB9B7DE0139CB04DDB2B573D2D3638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number:          05C2
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: 7NPjy0_LNEtrF1BCG60HRzqdKlw.roa (hash: QFPKpHBMjVle5FlNRbqdK60lHpC8YmYJkA7cV7MHx8U=)
                          2: MB_KD3bxeM7K-OxuIIAzQqfVtmo.roa (hash: JedpLzW0zBpuOTjRbrIzIVmoqdb1dCTDslO3G1N2Fuc=)
                          3: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: mYFHhBIGaS6DbKHgE3iBHjyFawFviwSWyQh8+woXhn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9b:7d:e0:13:9c:b0:4d:db:2b:57:3d:2d:36:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=76da392896e03d1a6ce32edb072152a7eec491b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:3e:3e:0a:d2:35:24:32:61:fc:33:c2:50:
                    d3:48:1d:34:42:2e:ea:28:30:24:5e:92:d0:08:0c:
                    f7:2c:1b:67:86:cf:c6:d5:f6:65:9c:e8:dc:5c:cd:
                    e0:2f:68:f1:aa:11:f0:32:9b:7c:a5:d5:f8:7f:18:
                    8c:f1:c3:bd:fa:f8:3f:0e:ae:bf:25:6b:3d:a7:93:
                    6f:79:3b:19:d4:4a:16:82:90:aa:a2:1f:4b:8a:17:
                    75:3b:fc:1b:ff:bf:ca:da:a7:d0:c5:42:3d:fc:e3:
                    78:d4:15:77:9c:97:d4:7d:bd:76:19:94:de:95:18:
                    1f:20:18:8e:b3:f0:a9:6e:b4:5b:b7:a9:ee:d5:9d:
                    a0:be:c2:20:d9:d3:65:67:f2:d2:7d:38:a2:ae:89:
                    a1:04:b7:79:95:32:f5:09:82:1e:7d:fe:de:86:e2:
                    ea:7c:aa:ee:a6:7d:97:c1:06:9e:6f:de:8b:b4:17:
                    de:d9:ab:7b:57:a5:80:b4:97:cf:d7:6d:a7:5c:f3:
                    71:f5:68:c7:78:31:47:39:32:df:b9:e9:7e:2b:48:
                    e0:03:cf:0d:d1:89:bf:f0:ed:03:4f:c8:f3:e0:c1:
                    14:0c:61:c3:a5:0b:3f:c4:48:56:af:f6:2a:69:e2:
                    3b:9a:53:46:a4:60:37:15:fa:eb:9b:14:d6:c7:47:
                    e6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DA:39:28:96:E0:3D:1A:6C:E3:2E:DB:07:21:52:A7:EE:C4:91:B6
            X509v3 Authority Key Identifier:
                keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:26:e3:a7:04:d1:2f:77:31:d2:5f:ac:d5:de:04:54:75:61:
         44:2c:0b:5f:83:da:81:e4:54:71:7d:09:fd:b5:55:09:ef:70:
         be:4d:d2:18:be:52:60:45:35:31:45:fb:a3:76:9f:2b:6b:16:
         95:93:0d:0e:6a:1d:83:5c:8c:b7:af:b6:42:c1:6a:1c:bf:77:
         c3:9a:08:82:a3:0f:01:81:17:33:fc:bd:d4:03:7c:22:0b:a5:
         fc:cc:69:ce:cc:ec:6b:a8:02:77:4e:96:29:d5:b0:cd:97:85:
         87:48:cf:37:12:9d:40:df:82:f9:65:fb:58:b7:63:f2:9f:e8:
         50:4a:73:fe:63:32:86:1d:15:17:4e:e0:ee:5a:47:1b:23:52:
         79:d8:9c:29:46:b0:3f:f7:bd:cd:00:3e:e3:8c:29:0b:3e:5f:
         14:10:52:43:40:f9:6d:68:07:f8:3b:96:55:bb:3b:19:aa:d1:
         3e:94:b2:64:14:c2:c5:49:d6:5c:f4:ae:41:ac:c2:f8:03:34:
         cf:19:75:66:1a:38:f0:9b:71:2f:94:98:cb:35:b7:cd:d2:f5:
         84:8a:a4:57:29:ce:9a:3e:35:74:3d:d8:b3:33:9f:84:e8:0d:
         98:a1:b7:a7:c6:96:fe:98:c3:b0:ad:9f:45:0d:3b:37:e9:29:
         e4:c5:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----