Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File:                     YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier:          e+ZKbbe646Iqhhwed5bXFyqS4htFC12SQ+/ssm+xyEE=
Subject key identifier:   FC:98:04:1E:42:88:A8:1C:22:7F:BF:32:DA:A0:AE:C0:3D:6F:70:BB
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer:       /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial:       01962F74317D6B25675CFDE3F47B81A34226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 4Rs6VOUb7Jz1WEbUI4mx4euf-jo.roa (hash: 0ue5rKQ04dXvEPaM/2a7F1E05+6Su6iR1FzvjJIwmzg=)
                          2: X_5mJIe23lTGFoHxQS-RDQrkxZY.roa (hash: RzER0AmjnLXODOGy8fUMFdlmPYkcB4bwanmhBdhdXVQ=)
                          3: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: caE/6sZiQ/g36LpWBpI5bdgzlJdaERw9Q9rA00ob1zA=)
                          4: mRXbSMwMplFS-oxDDBYp3cRPJvY.roa (hash: 2gbj64POpXtv1Gc7Tqp5twOdYYGVI2nr7NuHBiH4Qgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:31:7d:6b:25:67:5c:fd:e3:f4:7b:81:a3:42:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=fc98041e4288a81c227fbf32daa0aec03d6f70bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:ee:d2:36:5a:b6:2c:75:23:ba:28:b8:dc:
                    54:6e:d4:d2:3f:5a:7a:23:71:2c:6d:46:c6:0a:ac:
                    f6:99:50:5d:47:2f:32:de:09:d9:90:ec:b9:46:eb:
                    db:e3:f4:b7:af:7c:2f:a3:09:07:bb:34:6f:47:06:
                    1a:20:d9:c7:0c:e2:88:10:36:45:90:2e:95:28:07:
                    fa:70:05:65:53:db:14:4f:e7:d2:9c:0d:58:57:5a:
                    80:4a:df:58:4c:48:7d:6c:e6:06:69:34:1b:91:0c:
                    c8:30:4a:ad:dd:a2:2a:1e:cc:e6:d0:ef:4b:1b:a2:
                    d8:a0:74:55:15:79:9d:38:a7:70:cf:0d:03:1c:32:
                    c2:3c:5f:67:0f:53:10:07:65:82:96:58:fc:2b:d6:
                    40:68:1c:89:3e:84:23:d1:d4:6b:03:93:f3:cf:85:
                    5d:6d:60:de:43:e2:35:89:cb:d0:87:80:83:92:68:
                    f0:69:6a:ce:18:b3:de:69:2d:67:42:46:61:13:82:
                    80:1c:2f:2f:a7:ee:44:4f:34:4f:67:74:24:b4:a0:
                    3d:c9:28:32:87:4d:62:a8:2d:1a:c1:8a:73:75:64:
                    a2:6f:d0:d4:ff:6a:f6:ea:2e:e8:bc:68:fc:36:e0:
                    89:c9:28:1a:9e:54:24:4b:f4:82:6d:bc:88:dc:13:
                    c8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:98:04:1E:42:88:A8:1C:22:7F:BF:32:DA:A0:AE:C0:3D:6F:70:BB
            X509v3 Authority Key Identifier:
                keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:c2:28:e4:64:0f:7e:0b:5b:9d:bf:a2:06:c6:10:14:3b:
         9b:32:94:4f:5e:2e:77:ff:7c:56:16:90:50:19:f4:2d:e3:5d:
         1b:59:6c:75:70:2a:84:76:f6:53:e6:a0:16:7b:34:cc:9f:98:
         84:18:1c:9b:bd:db:d5:2a:86:f1:6e:c6:aa:1c:2f:20:de:a3:
         4f:db:a8:39:e8:0f:94:0a:67:5e:b9:d9:cc:5a:9e:c4:1c:27:
         f2:75:de:a3:06:16:14:50:cd:d9:05:ff:ea:71:4c:71:dc:31:
         35:22:b0:3f:32:df:b2:88:ce:9a:be:15:6a:1d:21:3d:5e:9d:
         b1:27:6c:25:a1:23:39:47:3b:1d:fd:af:52:6e:1e:0b:da:6a:
         c3:09:63:a2:c7:92:8b:9e:c6:af:d4:fc:03:b7:37:70:d8:f8:
         29:4c:df:aa:18:b4:7e:d4:e4:52:b0:7b:26:3e:29:49:cf:7c:
         c6:9b:09:0f:d0:39:23:c4:d1:d6:51:f3:4e:55:de:ff:28:e0:
         78:02:70:b3:8c:13:ff:85:d4:c1:6f:08:5e:be:66:24:02:cb:
         1f:b1:72:2d:97:b2:0c:01:62:6a:6c:29:32:71:78:21:76:b3:
         f1:d5:18:7c:e7:1f:ae:6b:dc:32:b8:4f:fa:c1:ae:4e:b7:1d:
         47:04:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----