Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File:                     yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier:          TBvwk23jS2X1xiRuuFLQlOs4ngyVjV7dwY52PHTwwaU=
Subject key identifier:   96:92:88:AA:59:82:F0:CC:D1:35:43:4C:54:4C:8D:92:8B:EA:9E:65
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer:       /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial:       01962E993416EEF8A60995C97125B2EC5E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number:          0505
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: AM_8FnzBWvppCWEq5L2m7zOw4Xs.roa (hash: BSOdW4w3xzDGFEiTqGVLTD5VpVN1n3Tm2IL/b7m+dNI=)
                          2: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: Id2x0/Ce6064kIZzxL5LCNsYlFc7myV36T68v4U2IsE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:16:ee:f8:a6:09:95:c9:71:25:b2:ec:5e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=969288aa5982f0ccd135434c544c8d928bea9e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:85:3c:4a:78:41:57:d8:b5:09:71:fa:25:
                    16:89:89:ad:cf:44:08:be:ad:cb:9a:93:cc:ad:21:
                    1b:e4:61:77:c8:30:21:4a:72:c9:5c:d3:c0:67:83:
                    8e:d1:23:09:c8:55:be:08:20:ec:f0:03:f7:b1:69:
                    af:35:38:de:9c:cc:24:1f:85:55:e0:c4:d9:9e:61:
                    7d:e9:da:8d:9f:47:3e:49:29:52:84:0c:e8:15:aa:
                    d9:6c:95:67:1b:31:38:98:a7:22:f9:41:2d:20:89:
                    3b:49:cc:97:ac:dd:c3:1a:b2:b0:95:b0:5c:f3:b5:
                    4c:54:6c:33:a6:00:60:e0:62:c7:bd:cc:2d:b6:0d:
                    5c:8e:36:fe:fe:24:e9:8c:74:e2:d9:a3:84:f6:73:
                    18:6e:b5:17:31:78:83:13:bc:d4:d0:f8:7d:fe:a0:
                    b6:f7:25:a1:e2:b8:e3:b2:a7:63:bf:89:b7:5e:f3:
                    52:7b:40:db:78:99:ec:eb:88:67:3e:b6:bd:f6:41:
                    b8:57:7c:9c:89:d7:78:33:21:2b:78:4a:4d:0c:49:
                    d0:ac:cf:1b:73:6c:80:0c:9b:4b:62:68:4c:d0:11:
                    b3:71:e0:38:a8:55:18:88:ee:c4:b0:55:ba:48:a7:
                    15:1d:ff:50:85:56:6c:bf:5b:f8:a3:c2:8f:86:f6:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:92:88:AA:59:82:F0:CC:D1:35:43:4C:54:4C:8D:92:8B:EA:9E:65
            X509v3 Authority Key Identifier:
                keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:7d:a0:53:db:d3:72:74:f0:8c:07:9c:b1:f7:d5:bd:c3:
         35:8c:aa:d5:76:e6:7e:cf:5f:5d:c4:aa:bb:7e:4c:a6:00:1e:
         ad:c4:e8:83:6a:0a:bd:2c:fd:ba:49:a6:b5:4b:d5:88:45:4b:
         fe:82:a0:75:f1:9b:76:36:85:ef:bc:e9:5d:dc:49:c4:47:96:
         9c:54:6c:70:b8:c9:b3:60:0d:2d:4f:0c:0f:9c:1f:ae:20:4a:
         61:73:83:ab:ce:cb:e3:f9:49:dd:96:d8:b4:45:a7:ad:5c:34:
         17:3f:f2:a3:90:d8:16:1e:09:e8:ea:7f:0c:bb:dd:f6:9a:37:
         cf:7e:11:fc:6d:8e:14:d6:20:86:9d:04:8a:98:13:24:08:bf:
         bc:93:f4:b5:c2:e9:a8:84:a6:a4:39:f9:38:88:a6:f1:3d:cd:
         f0:f5:f8:32:2d:19:a4:2b:31:61:71:8f:37:f6:06:55:e8:43:
         69:e3:06:9a:d3:e5:d9:75:7b:05:84:fc:f0:4b:f0:7c:22:85:
         79:67:0e:ea:1a:c9:49:58:f7:00:33:07:ed:23:d1:d4:c1:83:
         cc:a2:2c:e9:d3:31:4e:c2:e4:27:79:c4:4d:8c:11:58:43:2c:
         95:be:c6:d4:dc:e6:07:39:b1:5b:c1:5e:bb:61:99:72:d2:6a:
         cc:87:7e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTQW7vimCZXJcSWy7F4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZjIzYzliN2IzZWEwNTQ5MTQyYjcwMTU5NzcwNmZjN2E2
Mzg1ZTcwHhcNMjUwNDEzMTAwMTU0WhcNMjUwNDE0MTAwMTU0WjAzMTEwLwYDVQQD
Eyg5NjkyODhhYTU5ODJmMGNjZDEzNTQzNGM1NDRjOGQ5MjhiZWE5ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoOFPEp4QVfYtQlx+iUWiYmtz0QI
vq3LmpPMrSEb5GF3yDAhSnLJXNPAZ4OO0SMJyFW+CCDs8AP3sWmvNTjenMwkH4VV
4MTZnmF96dqNn0c+SSlShAzoFarZbJVnGzE4mKci+UEtIIk7ScyXrN3DGrKwlbBc
87VMVGwzpgBg4GLHvcwttg1cjjb+/iTpjHTi2aOE9nMYbrUXMXiDE7zU0Ph9/qC2
9yWh4rjjsqdjv4m3XvNSe0DbeJns64hnPra99kG4V3ycidd4MyEreEpNDEnQrM8b
c2yADJtLYmhM0BGzceA4qFUYiO7EsFW6SKcVHf9QhVZsv1v4o8KPhvb+gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaSiKpZgvDM0TVDTFRMjZKL6p5lMB8GA1UdIwQY
MBaAFMnyPJt7PqBUkUK3AVl3Bvx6Y4XnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQt
M2Y5MjJiNDAxNjhhLzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jY2M3M2ItOWM4Ny00NWQ1LTgxYzQtM2Y5MjJiNDAxNjhh
LzEveWZJOG0zcy1vRlNSUXJjQldYY0dfSHBqaGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARi59oFPb
03J08IwHnLH31b3DNYyq1Xbmfs9fXcSqu35MpgAercTog2oKvSz9ukmmtUvViEVL
/oKgdfGbdjaF77zpXdxJxEeWnFRscLjJs2ANLU8MD5wfriBKYXODq87L4/lJ3ZbY
tEWnrVw0Fz/yo5DYFh4J6Op/DLvd9po3z34R/G2OFNYghp0EipgTJAi/vJP0tcLp
qISmpDn5OIim8T3N8PX4Mi0ZpCsxYXGPN/YGVehDaeMGmtPl2XV7BYT88EvwfCKF
eWcO6hrJSVj3ADMH7SPR1MGDzKIs6dMxTsLkJ3nETYwRWEMslb7G1NzmBzmxW8Fe
u2GZctJqzId+ZQ==
-----END CERTIFICATE-----