Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.mft
File:                     YGFFFZB-jqyZgGYX1facQNuRo_U.mft (raw, json)
Hash identifier:          23IVk4N62JzwFamoT7ZuQi3WqKzPMzDUXUpdaAYT5OI=
Subject key identifier:   39:AF:3E:9B:3E:07:52:20:18:9F:F7:6B:7F:10:1D:1D:30:45:C1:04
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Certificate issuer:       /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial:       0191B379C2C5AB6AE001BAD0091197B095B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.mft
Manifest number:          1297
Signing time:             Mon 02 Sep 2024 16:03:06 +0000
Manifest this update:     Mon 02 Sep 2024 16:03:06 +0000
Manifest next update:     Tue 03 Sep 2024 16:03:06 +0000
Files and hashes:         1: JbcsSUBqJIV7FPCn1O2EvVpPiAg.roa (hash: g6lEGfKHcN08s7P8YNII0sfT3Rs5qiba7Usj06uvh6I=)
                          2: YGFFFZB-jqyZgGYX1facQNuRo_U.crl (hash: NwAY2a6P9L3TyIkzvsUZVkT+IySsJju7yJ9iZWL/9bQ=)
                          3: abo3PxWcu0YqjyfUPkXrD2OcqNA.roa (hash: EwTUAFExkRXkUHD3o64XsgfJeDzD5XQwXYimDZV+pjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:79:c2:c5:ab:6a:e0:01:ba:d0:09:11:97:b0:95:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
        Validity
            Not Before: Sep  2 16:03:06 2024 GMT
            Not After : Sep  3 16:03:06 2024 GMT
        Subject: CN=39af3e9b3e075220189ff76b7f101d1d3045c104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:22:d2:32:2b:28:28:cb:93:27:fe:61:b6:c9:
                    b1:6b:96:46:42:79:5e:f1:85:7e:42:7a:04:90:b2:
                    5a:b4:01:be:bc:06:c0:60:64:35:79:91:bb:2f:2b:
                    42:b2:d0:fe:f5:b1:49:41:dc:44:07:12:86:ce:ad:
                    26:c2:4e:fc:17:c1:e1:12:07:a1:93:f1:68:8b:b4:
                    85:0f:b1:94:27:9e:4a:56:1a:47:04:a7:d0:aa:f9:
                    12:f8:c0:e1:e8:ea:c7:a1:80:d8:aa:d3:42:f2:53:
                    08:71:93:79:44:9b:1c:9a:70:87:19:4f:c3:0d:90:
                    9a:b5:08:64:d8:fe:68:a4:48:7c:f2:e2:a9:32:12:
                    71:17:ba:7f:4d:a2:30:ca:55:b0:64:70:55:3c:65:
                    6d:4f:8c:37:f3:76:ee:9b:de:e6:81:bb:79:75:f4:
                    7c:9c:fd:1c:93:49:d5:cb:76:dc:8d:01:f9:f6:61:
                    e9:74:c3:a7:ad:bf:63:57:b8:ff:89:b1:39:5d:c6:
                    76:59:78:96:38:1b:35:9e:74:d4:ba:3e:35:d1:43:
                    16:bf:f0:d1:f8:31:b4:4c:5b:09:70:b5:68:14:df:
                    ba:2a:0b:b2:29:7d:12:3b:0f:43:14:95:59:83:66:
                    2a:99:23:35:f9:e4:94:fd:a0:ca:ce:39:3a:07:84:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AF:3E:9B:3E:07:52:20:18:9F:F7:6B:7F:10:1D:1D:30:45:C1:04
            X509v3 Authority Key Identifier:
                keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:70:b1:5f:8d:ed:d2:3f:1d:a8:c4:f4:a0:a9:a8:e7:0d:de:
         2c:89:2d:9d:8b:d9:22:1f:cb:61:81:75:b1:55:0d:1b:58:05:
         e2:a6:ad:0f:99:d7:3c:54:53:9a:2a:19:df:27:5c:60:be:7f:
         ae:2e:bf:7e:fb:0e:91:ed:fe:2e:76:7d:05:12:6f:b0:ca:0e:
         51:b7:e4:17:db:7c:82:7e:13:5f:7b:bb:c4:0c:a0:8b:4d:04:
         04:c1:01:db:21:b3:72:d9:2f:45:84:fc:66:f7:82:77:02:89:
         fc:8b:d7:ef:ce:3e:5a:54:6a:93:5e:ec:31:17:36:f6:6f:d4:
         27:c4:6b:29:92:58:31:a8:c6:03:6a:5c:38:42:b6:9c:c1:eb:
         c4:a8:c7:9a:8d:70:6b:8b:01:32:f3:8a:10:54:84:a4:03:1e:
         91:8e:e6:14:2c:da:ca:d6:5d:10:1f:ea:a2:39:a9:eb:55:f8:
         c9:bd:8c:3e:22:c1:5c:31:58:68:f0:56:5b:ec:65:93:df:16:
         38:8c:5d:55:23:68:9f:30:a8:9b:12:4e:ca:29:df:50:35:c8:
         50:01:47:7c:2b:5f:6a:37:50:c2:6a:db:3f:4c:96:c9:10:e0:
         f2:6d:13:00:ba:12:45:50:e5:9c:dd:a1:52:21:85:f1:95:17:
         cc:33:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----