Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
File:                     Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft (raw, json)
Hash identifier:          AweJHwqqcSLTOSOt3L6mHWJMnHACFxIEM7inyTKlsy4=
Subject key identifier:   3B:2B:EA:4C:43:CF:51:14:D8:B8:92:13:95:96:C6:03:BA:B2:01:3B
Authority key identifier: 63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47
Certificate issuer:       /CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
Certificate serial:       01962ECF4D38E1F16848D4D09B6885A889B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: 2c5hJsdBUeeCiChk_4V2w2gh6lU.roa (hash: D53Q1f7eGpeEwEpkqzHT1XzbHYkVzvcMu+bdTa1FNsw=)
                          2: TEuCPuBwv_2lyF72kvKuFoWc7_M.roa (hash: PAEddVQWD0GjFhS/Z0wF1zxF3c8P9Lqj+mpgI3WA80g=)
                          3: Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl (hash: 9ZJ6FG2UUYcKCQwtxeT8SeJNVTxp5Z+teJXirOUZom8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:38:e1:f1:68:48:d4:d0:9b:68:85:a8:89:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63f14f8e144c6d50c38ab4faff5ac6e547fe1d47
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=3b2bea4c43cf5114d8b892139596c603bab2013b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:d7:12:db:cb:ad:68:ab:d7:11:b1:d8:a3:
                    58:0c:f5:a2:11:b5:33:2a:a3:8b:56:d3:f0:91:5a:
                    5b:4f:8c:4d:b7:2c:21:2d:7b:3b:78:84:3f:b3:77:
                    42:84:af:8a:af:e3:ef:ae:b4:77:13:f7:8a:e2:9c:
                    b7:0c:e6:cb:8f:27:a8:74:d1:bf:7d:ad:c2:4e:b4:
                    a2:33:c3:5a:7a:2f:e2:1d:94:7c:a6:b3:78:a7:8a:
                    f7:04:25:5d:0b:c3:f8:89:20:1c:24:19:94:58:85:
                    04:df:08:39:f9:8e:bf:b1:1b:88:da:39:b9:9f:80:
                    02:52:e2:de:a6:cc:35:77:e9:95:ff:ff:35:91:da:
                    9d:99:e0:16:fc:fa:e9:af:f2:68:13:37:d3:5b:aa:
                    b6:83:43:18:02:87:c6:4d:85:cf:4e:52:17:fa:2f:
                    da:8c:c7:57:40:5c:90:23:2f:14:43:d5:ae:a7:04:
                    29:ac:57:ee:38:c0:80:7d:b6:a2:83:30:bf:fb:2c:
                    bd:df:29:52:da:68:30:5e:c5:49:b1:fb:59:bc:24:
                    0e:51:ad:0c:52:ff:0e:48:b9:3f:71:1a:e7:8a:3c:
                    17:b6:e8:10:15:e3:6c:93:7d:d6:16:bb:ff:bd:24:
                    a2:15:a4:3f:32:7a:94:70:f8:e1:39:2c:79:9b:d8:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2B:EA:4C:43:CF:51:14:D8:B8:92:13:95:96:C6:03:BA:B2:01:3B
            X509v3 Authority Key Identifier:
                keyid:63:F1:4F:8E:14:4C:6D:50:C3:8A:B4:FA:FF:5A:C6:E5:47:FE:1D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b0aae-9d27-4951-bab7-da394384e925/1/Y_FPjhRMbVDDirT6_1rG5Uf-HUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:c2:1a:fe:52:78:d2:b7:cb:f7:74:bd:d6:f0:72:78:63:
         01:29:a7:7f:d7:b1:86:02:40:ce:fb:d1:76:ed:65:e0:11:16:
         9b:95:23:f0:ac:5d:98:30:72:4f:46:b1:1c:10:fe:73:a4:e7:
         71:48:ee:40:6e:25:e4:62:7b:df:5d:4b:c5:1c:13:f0:32:f0:
         6d:4c:9e:c3:c4:c2:e6:61:2a:75:62:b3:73:ce:4c:4b:65:58:
         53:16:6c:54:82:af:ae:24:5f:90:85:0d:1a:c1:6b:42:15:dc:
         40:a4:f0:04:09:3a:be:78:0b:bf:13:be:2a:8f:15:e2:a9:b9:
         aa:e6:d1:31:08:91:c3:fe:e8:77:ba:dc:8d:76:2d:5e:f8:94:
         22:0c:78:3d:49:a5:2c:2d:2c:c7:ba:1e:aa:7d:5f:1f:7d:1f:
         47:67:e8:01:81:ff:41:d8:b4:4e:50:0a:81:14:ec:d9:f8:75:
         e4:a3:64:01:de:d7:d0:03:3a:89:ce:7d:29:13:8a:aa:91:86:
         34:97:95:6d:c8:36:40:f6:cf:bc:36:5a:60:10:d3:1c:55:60:
         53:c3:dd:9b:39:dc:a9:86:6d:96:9b:41:2c:f4:5f:b6:ab:08:
         f7:c8:e0:24:9a:02:dd:4f:c6:25:ed:63:4e:8c:c2:86:06:42:
         36:75:33:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----