Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File:                     YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier:          2eoqI8zjozFCNGdwtW8OepUzjaoCbp01pzMkO/qv5Nk=
Subject key identifier:   65:DD:7D:BE:69:ED:B4:C6:12:B2:32:77:93:90:C0:F7:8E:79:7A:F4
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer:       /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial:       01962ECF800E9A56C0DC1286891E6BB7118D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: YyqIJuh0nudrX2b05jrtLA+hVl7rXzr37Y8KYhTC2rU=)
                          2: xoPlD0rrBEJIFIvkk6R1R6ePGVo.roa (hash: v5S5OgtFceKc/UtdxN43/f/RbwPnYdlFD8XVOZ+FDEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:80:0e:9a:56:c0:dc:12:86:89:1e:6b:b7:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=65dd7dbe69edb4c612b232779390c0f78e797af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a6:73:b4:98:f7:9e:86:a2:61:e9:30:d1:55:
                    d2:66:ff:40:ec:c6:59:d2:bb:91:87:c6:cd:8e:5f:
                    69:90:4d:a8:fe:d2:04:e5:4f:5d:6d:90:90:b9:b9:
                    9c:d0:05:83:90:1e:9a:57:ed:d7:f9:24:10:fb:f3:
                    75:21:55:87:a5:33:00:8b:08:f1:c4:1d:0e:d7:0d:
                    ec:83:68:80:43:95:1f:82:16:6f:1e:a6:3d:05:30:
                    11:ea:6f:a4:cb:35:ad:7c:bd:08:95:cf:0f:4b:ae:
                    01:c5:6b:7a:90:dc:76:53:9b:26:40:b7:f7:80:3c:
                    30:f6:33:e9:e0:f8:b7:d1:3b:2d:8c:ad:b2:2b:a3:
                    2e:f0:ea:01:57:69:65:69:34:3e:d1:c9:f5:07:03:
                    e6:b0:2c:09:44:4d:6c:33:76:70:09:69:33:23:aa:
                    e3:1a:b2:0f:4c:3d:ab:14:48:1d:21:27:86:4b:ea:
                    6f:e3:8f:21:ee:68:32:6e:d4:29:53:81:94:94:ba:
                    dd:29:6c:36:ab:18:89:13:0d:7b:01:6c:5f:87:24:
                    0b:12:e4:1b:b7:d6:45:95:80:e2:d3:3e:ac:2c:b4:
                    3b:d5:18:ab:7e:7d:3b:1f:92:a7:b2:91:b7:3f:20:
                    7b:a5:0b:11:c7:92:1c:91:18:9f:9f:07:7d:7d:e2:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DD:7D:BE:69:ED:B4:C6:12:B2:32:77:93:90:C0:F7:8E:79:7A:F4
            X509v3 Authority Key Identifier:
                keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:65:37:d7:d3:54:bb:33:8c:1c:92:39:d7:89:89:9d:28:7f:
         d9:c6:8b:26:b0:b5:ca:29:af:e7:61:03:a1:ac:d8:00:39:9a:
         95:0f:51:c6:7f:3e:7a:39:6b:da:56:27:7e:3d:5c:7d:0e:02:
         5c:b0:29:7f:c2:b4:f1:fe:9d:dc:68:05:24:47:f1:67:96:f7:
         4a:70:23:d4:23:bf:74:21:ba:3c:8e:f5:fe:21:86:08:b5:32:
         b6:f5:01:07:14:c0:53:31:82:7c:6b:7c:fc:0a:e9:c8:44:c2:
         2f:a7:67:f7:b4:22:a1:41:50:f3:d4:60:c8:d4:21:aa:89:28:
         a0:13:62:af:fb:c8:3b:99:a4:ff:c2:18:cd:03:d1:79:c6:e9:
         b6:4d:46:1e:88:61:bc:d3:e3:0e:fe:89:2b:05:5f:68:14:95:
         c5:f2:b7:ac:b8:bf:d2:3d:b9:b6:40:da:03:63:bc:af:92:2c:
         18:23:68:a6:04:5f:37:a2:8a:60:84:aa:be:3d:93:07:bc:26:
         e1:cc:6b:8f:a7:40:d9:36:f6:7e:2b:c9:70:e3:aa:75:69:84:
         b2:d2:8a:23:a0:94:c0:fb:57:ab:f0:ca:1f:63:b3:a0:7c:2f:
         fd:7a:48:7c:2d:4a:a1:a5:bd:d5:c8:05:ec:f7:2f:b9:7f:c6:
         75:af:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----