Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
File:                     YAG5U8a-H5GDHWilwBFcIODNf5o.mft (raw, json)
Hash identifier:          R4rY4xZn6+YZF2sLgiOKqP9DBr7byEbgdmLiDivIKvY=
Subject key identifier:   A8:5C:69:42:69:2E:6F:BA:BC:2E:E8:D7:61:69:72:CC:9A:22:3D:8A
Authority key identifier: 60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A
Certificate issuer:       /CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
Certificate serial:       01962DF43EA75058FCE233E7FEE2B2FE3A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft
Manifest number:          04CD
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: QQlxlfhA9BwLpxAQMkShfHqNuQ8.roa (hash: J1jtN5BQZROl/8dEYO5qeCL3b90fBYd6l0TNzemkVxs=)
                          2: YAG5U8a-H5GDHWilwBFcIODNf5o.crl (hash: YQbK0nkcMap9FGh7Ec6ZYcnVCQrS578BpI5Gfpq3/4Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:a7:50:58:fc:e2:33:e7:fe:e2:b2:fe:3a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6001b953c6be1f91831d68a5c0115c20e0cd7f9a
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=a85c6942692e6fbabc2ee8d7616972cc9a223d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:35:e0:d8:b4:f3:fa:20:eb:16:9f:23:85:3a:
                    76:50:0d:41:88:a0:60:bf:6f:f2:b3:0a:73:b1:8b:
                    67:3d:39:3f:d5:d8:82:c9:ae:f3:33:5b:0c:99:9e:
                    cd:7a:5b:84:f2:7d:fb:5f:34:48:e5:c0:97:ab:92:
                    86:42:4c:ea:e8:f2:b9:a9:13:61:de:26:5c:72:a2:
                    0d:15:3c:1b:14:a7:29:99:7f:ac:4b:22:62:cb:a8:
                    83:69:98:d8:39:84:0b:f0:4f:99:29:79:80:64:6c:
                    5a:c2:d6:b3:1b:1c:fb:35:54:ff:6b:72:91:08:55:
                    5d:b4:64:1b:23:d0:d1:e8:84:7b:d2:6f:ee:66:f0:
                    a5:30:c4:4b:09:23:37:0d:42:ab:c7:74:5b:d4:ab:
                    ae:12:4e:cd:3a:26:2c:e5:72:3e:cf:69:a0:31:44:
                    7b:73:fa:1e:c4:c8:8a:24:39:ad:75:cd:56:a7:e1:
                    3c:56:d8:d3:b9:45:a7:10:18:ac:d4:d1:a3:8e:db:
                    cc:69:22:b2:69:a2:3c:66:36:a4:b8:20:13:02:59:
                    e6:35:f6:f4:b2:03:a3:0b:e7:4e:2a:9e:c1:12:5b:
                    cf:9d:06:81:66:9b:f6:09:c6:d4:99:c2:8f:29:f6:
                    5a:6f:0c:e1:e8:22:ee:ef:6a:21:16:c7:44:94:1c:
                    01:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5C:69:42:69:2E:6F:BA:BC:2E:E8:D7:61:69:72:CC:9A:22:3D:8A
            X509v3 Authority Key Identifier:
                keyid:60:01:B9:53:C6:BE:1F:91:83:1D:68:A5:C0:11:5C:20:E0:CD:7F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAG5U8a-H5GDHWilwBFcIODNf5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/213be6-ecb9-4300-8346-a647675f46b6/1/YAG5U8a-H5GDHWilwBFcIODNf5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:75:d8:5d:cc:61:a4:3f:19:dd:02:16:58:23:cd:91:25:43:
         ad:25:1a:53:e5:97:73:21:5b:96:6a:2a:b2:bd:53:57:54:a6:
         39:8b:ca:52:47:fd:d4:a0:82:09:87:29:ca:3d:47:60:e6:8f:
         ee:f0:d0:19:07:03:8a:89:6e:24:05:44:d4:39:09:ec:30:d6:
         a9:15:bd:78:53:7a:07:2c:f8:57:7d:e4:66:cd:cb:08:77:7a:
         9b:5a:e3:2f:c8:80:73:f9:02:b0:13:18:2f:c8:be:65:d5:ce:
         e2:3a:19:b8:f8:c4:49:57:3e:62:aa:f9:fd:d9:1f:f8:9a:03:
         2f:a2:ae:24:9f:4e:ee:ea:cc:d3:4f:78:35:76:1a:bd:28:cd:
         d2:dc:3f:13:cb:5e:da:6f:fd:44:49:e9:a4:c8:aa:cf:86:17:
         77:25:81:be:52:85:58:b9:f3:3a:72:e3:8f:19:e6:b0:67:4a:
         bb:31:a2:fb:35:fc:65:c2:72:d6:b5:df:ac:2b:bd:98:64:dd:
         8a:5b:8d:f7:4e:0b:90:b1:00:84:49:96:d6:08:16:7d:76:f6:
         eb:4b:c6:ea:e1:53:5b:2d:f9:e2:7f:46:d0:99:e7:42:3a:d4:
         bf:e5:ad:a4:da:48:93:25:df:40:13:da:ad:5c:d9:d2:d2:6d:
         ba:89:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----