Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
File:                     YDJcIdL6_nQzmNweVXRDMoARBGk.mft (raw, json)
Hash identifier:          KowVHiEGnqaXok4sEIIKltPzmaVkYjO18m96xtZFYDg=
Subject key identifier:   67:2A:14:B8:4E:5C:95:5B:7B:4D:95:DB:D0:C7:B9:EC:A9:43:2B:B4
Authority key identifier: 60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69
Certificate issuer:       /CN=60325c21d2fafe743398dc1e5574433280110469
Certificate serial:       01962E2AF00AB85BA286DFDD129ED996FB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft
Manifest number:          139B
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: 47Lsjeq5DX4wkpatXUE_-iIQY9Q.roa (hash: 4K/nWKrcsaLST8bPt6ayJw8vMIxal4U4+r8J15AVgP8=)
                          2: IM8VWz4L8uTjG3ZXrmr-hQCDEpU.roa (hash: mPn7wlOGgWBcgNZKFj/CLgGSvVpk3XUPtLV9M7i6VUo=)
                          3: YDJcIdL6_nQzmNweVXRDMoARBGk.crl (hash: B8Jl3v6zoeoiYfnSmr9vR0fgKv54fF7qIvyWmap/5NA=)
                          4: dbiwvrIUEB3DJnzikNFfso5iId8.roa (hash: iE+EP1DWoHf3NMKkX22W/jzavybl3y9slyLbgbFYb6M=)
                          5: sP5nildmZqp3srG2whATaK4yFJ0.roa (hash: 8RcLa/XNj+cj8Nd5KnP9mKP7qKdpC46YG8NrNsESEAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f0:0a:b8:5b:a2:86:df:dd:12:9e:d9:96:fb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60325c21d2fafe743398dc1e5574433280110469
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=672a14b84e5c955b7b4d95dbd0c7b9eca9432bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:73:a0:64:b6:3f:73:e3:4e:38:90:4b:a6:52:
                    23:c9:c2:8e:57:f9:fb:7c:99:e1:da:01:90:2c:93:
                    91:14:a8:6b:2e:4b:e9:c4:72:90:60:2c:b6:49:43:
                    38:10:4c:e7:cc:f6:48:50:15:f3:73:5e:3a:b3:78:
                    41:3e:69:f5:09:ec:f9:70:5f:7f:40:2b:1d:5d:b6:
                    68:f6:f5:10:3b:aa:ee:d3:eb:e4:1c:46:95:e3:3f:
                    a5:d5:f5:fc:1c:e3:70:e9:18:80:43:89:ad:38:96:
                    43:b2:f5:7a:32:d1:51:4f:65:4a:95:d3:a0:33:3b:
                    1c:44:28:29:3e:65:50:e4:7d:e0:ae:ad:1a:50:e8:
                    6b:6b:cd:e0:25:0e:57:ae:90:3e:67:6c:ef:57:1f:
                    ee:d8:a4:a8:fe:83:d3:34:59:0d:0f:92:6d:27:af:
                    6e:1b:34:54:87:ed:02:67:64:26:31:4a:db:77:4c:
                    39:7f:45:99:b2:81:e1:d5:29:d7:1d:af:16:9b:3d:
                    02:c9:5a:a1:df:95:02:8a:36:31:7f:97:0a:5c:26:
                    de:c4:a2:0b:79:50:41:76:c0:79:1a:d3:6b:8e:86:
                    c4:22:bf:92:c7:0c:6b:b6:ea:00:ef:25:f8:bc:a5:
                    5e:51:b6:47:de:7e:72:d7:06:fa:1b:2d:b2:f3:29:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2A:14:B8:4E:5C:95:5B:7B:4D:95:DB:D0:C7:B9:EC:A9:43:2B:B4
            X509v3 Authority Key Identifier:
                keyid:60:32:5C:21:D2:FA:FE:74:33:98:DC:1E:55:74:43:32:80:11:04:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDJcIdL6_nQzmNweVXRDMoARBGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f2770b-da19-4790-a494-c58e95cd4277/1/YDJcIdL6_nQzmNweVXRDMoARBGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3d:41:47:b4:6b:0c:5c:da:8a:91:b1:5e:d8:57:fb:65:46:
         a9:c9:ce:49:7c:cd:b7:e2:bd:89:c8:40:b3:41:03:ad:87:0d:
         a4:ae:1d:1a:7d:5c:5e:68:41:19:6e:89:25:d1:80:aa:00:a3:
         62:34:7a:3c:81:12:82:1b:33:fb:b1:ae:22:e9:df:d0:fb:e3:
         0c:04:cd:99:20:8a:a0:30:22:56:c4:20:85:27:8c:6e:06:81:
         01:85:99:97:6c:24:86:e4:e7:70:b0:0f:23:f2:aa:a2:3b:89:
         71:dc:0e:0b:93:d4:8b:95:2d:7a:17:4e:c0:61:64:be:f1:77:
         88:90:f0:49:c8:ec:8c:ce:1d:bd:df:d6:c6:cb:d4:21:2c:7e:
         57:91:a6:1a:4d:5e:58:d2:2b:a3:86:ac:c2:f6:d5:6d:66:de:
         3a:b7:98:5e:7d:a2:fc:f7:be:ad:f7:52:ae:60:93:18:aa:1e:
         0d:db:75:80:08:a6:21:33:0a:67:21:8e:62:f8:f7:32:ac:4f:
         35:b9:b7:29:5f:e5:67:5a:6b:98:7c:8c:c7:3b:9a:4f:59:8d:
         d6:2a:3d:a6:3f:53:bd:d3:c0:ad:17:bc:e0:0c:20:6f:49:25:
         3c:30:7b:ed:b5:d4:c5:f2:43:fc:87:21:09:5d:20:71:0e:3f:
         24:06:54:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----