Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
File:                     YU9WZQWavHvjR17553qXl7cW_Ic.mft (raw, json)
Hash identifier:          uFfwyEVS1XQU8SlxxLY512VtxiBtVszUQxz9J95/qmc=
Subject key identifier:   F9:2F:42:BD:20:E4:66:D6:D3:62:8D:0C:FA:B3:8E:2C:8C:88:95:F6
Authority key identifier: 61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87
Certificate issuer:       /CN=614f5665059abc7be3475ef9e77a9797b716fc87
Certificate serial:       01962E2B3793AFD3CC698FAF6DCF9C59065E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft
Manifest number:          10D4
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: TBiZ_CyXMsOJcf6YES-qeNnA7K4.roa (hash: QMLp06BguaI0fqG8Q739POQiUPSQCHhnkaMoIvb33Vg=)
                          2: YU9WZQWavHvjR17553qXl7cW_Ic.crl (hash: dodsQE15ingLSJ7+HPSMczRvSgmb35tcTZqCP0gb6PA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:37:93:af:d3:cc:69:8f:af:6d:cf:9c:59:06:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614f5665059abc7be3475ef9e77a9797b716fc87
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=f92f42bd20e466d6d3628d0cfab38e2c8c8895f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:cf:30:d0:e9:39:d1:ab:05:24:6e:26:5c:
                    49:4f:ff:51:3f:50:6c:4b:1c:65:cc:c3:24:59:66:
                    69:7d:ca:96:7c:43:51:ee:29:76:3b:0f:93:ee:a4:
                    7a:82:4d:0c:96:ff:f1:cd:d2:59:fd:c6:7f:ec:d4:
                    8c:7c:23:f4:ba:6c:0f:de:ba:a8:c8:83:0b:24:41:
                    03:67:bf:34:f3:cc:f9:dd:30:6c:f2:67:df:e0:ae:
                    25:de:21:51:a7:95:aa:6d:bc:fe:00:14:8e:8d:24:
                    f6:fc:23:14:14:57:1b:3d:7f:e1:85:e9:a9:2b:fb:
                    6c:14:86:bb:49:12:22:d5:ae:f4:6c:2f:4a:d7:70:
                    0b:30:85:14:85:a8:d5:bc:20:4a:27:7c:06:20:20:
                    b0:a0:33:ea:7b:d4:3d:e2:fe:f7:6e:64:b1:35:c6:
                    8f:aa:76:11:4e:0d:ef:c9:cc:b2:b2:b5:af:5b:3c:
                    e9:0c:8d:32:c0:43:98:7d:7a:0d:10:a8:cd:2c:63:
                    b9:92:b7:12:d0:7f:c1:57:9a:8c:d1:06:a5:56:65:
                    d4:a9:e5:2e:e8:e7:54:4d:25:31:f8:1c:3d:cb:77:
                    bb:98:a4:5a:e7:47:21:c3:17:2c:c3:be:ed:f6:a1:
                    a5:4b:88:82:ae:0a:bf:ef:dc:35:d0:a6:98:13:9d:
                    68:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:42:BD:20:E4:66:D6:D3:62:8D:0C:FA:B3:8E:2C:8C:88:95:F6
            X509v3 Authority Key Identifier:
                keyid:61:4F:56:65:05:9A:BC:7B:E3:47:5E:F9:E7:7A:97:97:B7:16:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU9WZQWavHvjR17553qXl7cW_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/888a04-77f4-4159-986c-3cef593d16b4/1/YU9WZQWavHvjR17553qXl7cW_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:3a:20:22:fa:11:cf:ea:2a:d6:51:b0:90:a0:94:56:d5:
         d5:d6:d0:00:26:fa:6b:d2:cd:e0:fd:ce:d9:f2:6a:48:88:0f:
         87:4e:e6:2b:4f:e5:55:dd:a1:22:9d:6a:2d:2a:06:2b:84:92:
         14:78:a4:14:cb:35:64:7a:86:67:45:75:2a:a4:0b:b2:3e:34:
         1d:5f:18:84:23:af:cb:51:a1:fd:5d:73:32:af:5a:fe:f0:33:
         56:0f:9a:f7:fa:09:e8:80:fa:ac:e2:65:fe:05:34:6e:75:a6:
         bc:51:60:df:87:40:f0:77:60:0a:2f:2b:c8:c7:16:a9:a1:4c:
         3b:21:50:cd:3e:da:c4:f5:48:f4:62:dd:e3:45:89:20:db:9c:
         58:cf:85:a4:82:07:65:48:ca:00:ff:c9:cb:74:2d:87:32:c1:
         b0:a3:df:4a:ff:51:5a:9c:83:3e:d8:29:03:02:67:6d:f8:eb:
         6c:92:30:6c:24:0d:3b:89:84:ee:43:74:2a:2e:3b:be:95:00:
         ea:11:3e:36:ea:14:da:df:74:ee:1a:6d:f7:89:03:b9:c3:47:
         fa:7d:08:8d:4b:0e:41:c5:5b:26:8f:6b:14:b8:d7:04:1b:a2:
         06:77:68:d5:12:8e:6c:aa:40:1f:09:02:56:99:70:9a:b4:10:
         7e:1e:1b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----