Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
File:                     YbcgLJIwwolFDtWmKxc2mgZZvGs.mft (raw, json)
Hash identifier:          jFO2oB9DPmS4v+mo+KGC7su40l2RLhXDLbH6gIDdzwM=
Subject key identifier:   A6:0C:9A:97:B8:08:FD:1C:F1:B3:33:67:C4:05:DA:B4:BD:06:EF:34
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Certificate issuer:       /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial:       01962F74499A7E94C54DBDD89FE585D0E9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft
Manifest number:          078F
Signing time:             Sun 13 Apr 2025 14:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:12 +0000
Files and hashes:         1: WEJghusKIKSFibkCzqHCeJYzUzA.roa (hash: OzzJ4qVi0bEqkT53q5LfwPnutGydp+ntCXtobu4buTA=)
                          2: YbcgLJIwwolFDtWmKxc2mgZZvGs.crl (hash: sz0c/CoR2wrUF3dy7O/yFp3Twhghmj+DDMZia6Vz65Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:49:9a:7e:94:c5:4d:bd:d8:9f:e5:85:d0:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
        Validity
            Not Before: Apr 13 14:01:12 2025 GMT
            Not After : Apr 14 14:01:12 2025 GMT
        Subject: CN=a60c9a97b808fd1cf1b33367c405dab4bd06ef34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:0e:ef:69:76:a3:f1:ca:65:65:9b:92:2f:
                    8d:b9:58:f9:e9:09:95:b2:eb:96:3c:60:af:fa:46:
                    1a:8d:1b:cb:a2:04:40:b7:57:fe:38:07:6f:e9:10:
                    2e:7f:e3:ec:2a:77:84:99:10:50:14:dd:a4:87:e5:
                    d0:6b:93:81:a0:22:c0:06:5c:e5:56:2b:13:20:6a:
                    f7:1a:8e:12:6b:51:08:d0:90:1a:68:70:bc:50:ae:
                    2d:8f:82:fd:6f:f5:78:19:5d:18:f5:b8:25:0c:c0:
                    26:64:48:ec:8b:ac:48:e6:91:4d:1f:87:d3:e6:8c:
                    04:6f:4d:2d:36:a2:e9:91:7d:9b:c9:01:b0:a8:71:
                    b6:05:71:a1:f9:39:1f:29:fa:12:2a:75:60:9c:23:
                    92:1f:33:76:9b:9a:be:d1:fc:1b:cf:a0:e6:18:6a:
                    06:ed:a9:f0:45:36:cb:cb:71:d6:7f:b3:16:e9:6b:
                    55:8f:bf:1c:a7:7b:01:a5:e0:94:c5:b8:ac:01:99:
                    a4:e6:66:f2:d7:ff:2b:c1:61:9a:e1:f9:9f:52:40:
                    55:fc:8c:fe:d2:e7:7e:f0:14:6d:c3:b7:36:ad:96:
                    76:e7:3a:9f:73:24:77:11:55:63:c1:ee:bd:50:3b:
                    a3:9e:22:8e:2c:e8:d9:24:90:34:8e:a0:b6:ad:ff:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0C:9A:97:B8:08:FD:1C:F1:B3:33:67:C4:05:DA:B4:BD:06:EF:34
            X509v3 Authority Key Identifier:
                keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:9a:39:20:13:af:96:0e:f6:d8:8d:1b:95:1a:2b:88:00:56:
         68:f2:9c:bf:af:e8:d5:3f:ae:a1:62:7f:da:4a:13:e8:46:0b:
         06:8d:6e:6b:e7:1f:b0:58:c8:8f:1f:c8:b9:94:18:0c:c3:86:
         23:6c:7e:69:1f:33:bb:bd:65:f3:18:5a:d0:82:17:c3:bf:c9:
         6f:23:33:91:50:1a:0e:d2:73:6f:fa:79:d4:11:a9:b6:96:4f:
         b5:79:1f:95:3d:a9:1e:5b:9c:4a:0a:64:31:19:d0:4c:ee:da:
         07:cf:2a:ef:f4:41:e4:df:73:95:c8:18:31:14:cd:cc:4f:c4:
         26:e6:e5:63:47:69:0e:58:5c:b2:ce:5e:ad:02:d8:5f:20:a5:
         1a:81:7f:e2:3c:e0:5d:06:95:20:9d:3a:a8:e0:71:39:75:9e:
         91:0a:86:12:22:96:58:7f:cc:3f:a2:4a:0c:04:58:bb:e7:d7:
         6c:a1:36:3a:b3:7b:a8:b4:10:94:66:4a:aa:7a:f2:18:38:dc:
         08:b8:7f:90:59:07:f6:a4:46:f0:6f:51:bb:e8:d3:6c:de:6a:
         47:da:54:e9:d0:cc:55:7d:f8:1f:d9:dd:fa:4e:fb:03:2f:b3:
         4a:af:c5:ef:38:d9:c4:e9:1d:61:8d:82:9a:ac:e2:be:22:07:
         10:37:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----