Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          5FcJU63DILA6MufGnbxB6AwMNyimGmVCDr7YwuKO8nc=
Subject key identifier:   4E:90:C5:81:29:D3:6F:2B:C9:D6:87:A8:A9:87:27:89:BA:B6:47:94
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       01962F06B2BE9C6649C34989827F2DB9E2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          0C66
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: 7Hb0cxDKgEME9YU1nJ9t4uvfRA8.roa (hash: AkQY9ppbVhy4tGFhPFQeNdZuvfoba48WrfFAMllJVEc=)
                          2: 98yJd6CKF69Dg_9ycsUvR-BETQs.roa (hash: 3Ev+3DyYqmisojiXYuD5v3lmrru0HzcvSLE+oEhCf8E=)
                          3: CP5sV6hwKPPrFY5ssKzLxRDP72o.roa (hash: iGdJHjf6CqwTU/xy4cIPz3bE82CjxmDjP95RDzpcBGQ=)
                          4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: Iuexqxg7pfETgS7PNnWCoUrOEid3OewnGt/kzZPukSs=)
                          6: icELWhfd9GPLu8IWkwxM1B9b1F8.roa (hash: YOkXqZJxfhwZLYrQswqqRP/8HyClhXqiaW/6Oo79K30=)
                          7: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=)
                          8: jvff6WGoYFxaA4PYboUwWnOfv3c.roa (hash: +TXfc4B1fLIeKgxG681JTLQSo3SYOu7646Py3pWF6TA=)
                          9: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:be:9c:66:49:c3:49:89:82:7f:2d:b9:e2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=4e90c58129d36f2bc9d687a8a9872789bab64794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:ca:eb:35:4d:d3:9b:8a:96:c3:7f:8d:bf:
                    48:35:26:59:95:63:bc:68:e3:83:09:c6:67:c0:ac:
                    4d:40:cb:7b:61:32:d6:ce:d1:be:b6:8f:86:78:47:
                    1e:37:bf:32:f9:16:aa:76:d2:87:53:e3:4a:a7:28:
                    2e:5e:f0:32:e0:f1:b8:72:d9:a6:6b:6b:e6:1c:f8:
                    9a:5c:6a:f6:84:47:46:5d:fe:ca:8e:01:9f:c2:59:
                    56:21:37:30:e5:51:ff:6c:1e:0d:77:95:55:52:37:
                    29:75:ef:93:2f:35:84:66:63:9e:8e:ae:74:6d:61:
                    37:63:80:81:ed:bb:81:4c:20:5a:c3:78:15:93:41:
                    ee:5e:bd:ba:e6:b7:f5:7a:df:e7:21:bd:50:c7:5f:
                    69:5b:17:34:20:73:c7:e7:4b:78:ff:60:04:80:29:
                    90:b8:98:71:48:e2:51:24:89:81:fd:4a:c7:8c:12:
                    f0:f0:b0:bf:9b:ee:d4:84:ec:c9:4e:d1:e9:4b:63:
                    f6:8b:40:07:4e:dc:28:d1:7a:5a:50:bf:6c:c9:6a:
                    76:e6:c1:79:96:89:47:9a:3b:28:9c:dd:41:3f:b1:
                    33:73:37:ca:cd:8a:62:63:01:e1:f1:ac:90:00:5b:
                    8c:52:10:48:5b:01:bb:a0:65:5d:71:f1:de:be:d4:
                    ca:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:90:C5:81:29:D3:6F:2B:C9:D6:87:A8:A9:87:27:89:BA:B6:47:94
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:4e:f9:8f:cb:07:72:0b:00:f2:56:f5:e1:79:9f:87:9c:
         ec:ad:8d:31:e2:91:f4:7d:ba:72:2c:24:61:f4:18:82:75:98:
         2d:be:05:a6:f4:4f:8a:8a:f7:18:08:0b:b6:1a:cc:3b:69:1e:
         8c:83:31:16:af:7a:aa:5b:f0:76:12:94:63:46:83:4e:45:e2:
         71:2d:dd:10:bb:15:0b:5e:30:ff:2e:ac:56:12:19:91:40:47:
         07:27:4a:f9:1f:51:f4:7a:9d:09:c2:25:f7:d6:41:50:4e:c3:
         6d:98:d3:e8:a1:78:b6:da:49:08:ff:2e:15:ba:8e:9d:21:34:
         44:5f:27:3f:86:12:ac:f0:bd:18:12:54:52:6e:26:02:8e:31:
         d4:03:04:81:3e:dc:54:72:cc:f5:51:b9:68:f5:64:cf:25:d3:
         02:bb:38:65:17:41:35:91:e9:5b:11:fd:2f:ff:3e:c9:13:0e:
         d8:67:1a:8b:4f:93:13:a6:6d:bf:94:45:41:d8:fd:ff:39:25:
         cb:02:33:3c:dd:43:b1:c9:75:51:0c:3c:3f:4a:cc:55:a5:63:
         89:87:02:49:cb:04:e6:b8:7e:4c:0b:1a:75:35:c5:8b:d2:ed:
         9b:fd:49:da:2d:6e:b3:e3:28:fc:12:5d:7b:e3:98:d0:d3:65:
         08:23:fe:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----