Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File:                     YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier:          p6/P0uwbfmNjEDN8dttodCFieJyDdJWMRqFykf0PY6U=
Subject key identifier:   EE:94:45:41:7B:BE:BF:00:ED:B1:6F:7B:09:12:43:37:4F:57:76:B3
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer:       /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial:       01962F74EA0C3C945088C2793A60CCFC847F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: CYWLmYxcCQgki-Xk5YRvuSHALzs.roa (hash: 61Fic0FYH+kK7MaPnl8UV3ohGlvf2gRHDh8nlfVoQGY=)
                          2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: ba0w/oBLQwAYsPSGvYNcmF+VW4Jwz/IyXSQBkAtaISU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ea:0c:3c:94:50:88:c2:79:3a:60:cc:fc:84:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=ee9445417bbebf00edb16f7b091243374f5776b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:89:46:b8:9f:9f:66:05:0a:19:6e:fd:d3:
                    1e:67:d6:c0:37:12:b0:f3:2f:b2:b6:3f:68:1f:3f:
                    67:d7:69:08:75:48:ec:00:de:95:4c:e2:2a:32:8d:
                    3b:a1:20:7d:4a:fc:67:b1:8b:e9:0b:86:f5:a7:78:
                    71:92:0f:4e:66:6f:1f:ac:c1:2d:c7:26:b4:ee:bf:
                    ac:15:a5:98:12:11:1c:ed:18:05:b8:7f:d1:10:1b:
                    25:93:d8:f9:e1:e2:af:9f:68:91:f5:63:d0:53:f0:
                    dd:9f:16:33:7c:7b:66:b6:90:11:95:48:a4:93:3a:
                    0f:a9:0b:89:9c:3c:a9:79:00:c4:86:74:88:ce:2f:
                    ba:4e:e9:32:29:db:3b:e5:b1:bd:08:82:0d:8b:8e:
                    3c:da:9b:3d:5a:5e:63:69:89:9a:36:d8:36:15:d1:
                    82:d0:31:ec:5e:f9:bd:5d:e5:e9:88:d1:66:0d:6a:
                    d6:76:b2:0f:51:e4:8f:ec:bd:a1:fc:e5:2e:a1:62:
                    f2:0b:ea:ce:b3:a7:67:62:d2:43:1f:d2:0d:94:86:
                    82:92:aa:1f:d6:ac:53:2c:4e:fc:65:2e:b2:a2:03:
                    8f:08:2b:03:f9:04:d5:6c:c7:4e:ae:2a:28:20:49:
                    fb:94:7b:cc:1e:64:d3:b0:65:45:8e:fc:00:4a:b2:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:94:45:41:7B:BE:BF:00:ED:B1:6F:7B:09:12:43:37:4F:57:76:B3
            X509v3 Authority Key Identifier:
                keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:fe:a7:55:0e:4a:67:07:9e:b4:b6:0c:7f:1b:86:9f:2b:ae:
         f7:8c:78:80:22:48:87:18:9b:0a:a9:d3:d6:71:55:fa:bb:a4:
         0e:a2:0e:fd:c6:04:db:6d:b2:a0:ab:df:ae:b2:a0:c0:a1:82:
         d6:27:12:97:c3:93:89:63:eb:78:dc:28:1b:d8:88:83:be:f5:
         4e:d4:53:2c:8e:75:d3:cb:a9:1c:92:2b:ec:a8:44:9c:c5:29:
         8d:0f:5a:17:d1:b5:e6:d0:f2:79:53:fe:2d:94:74:f1:a0:a5:
         3a:0f:84:ba:b9:52:20:ec:20:a4:c5:c5:00:bc:32:a1:24:28:
         a7:01:8b:7d:d5:e2:7e:43:05:47:d6:01:e9:f7:36:bf:19:91:
         43:57:0e:b4:bb:88:6e:ad:c7:8b:00:b1:14:52:0e:bb:a3:0b:
         88:5c:39:fe:f1:4e:d6:50:a3:4b:c2:4f:72:8f:1c:f1:92:1b:
         3b:0d:c4:63:30:ef:59:ad:4f:6b:e1:4d:34:9f:6b:2e:5b:8d:
         b0:da:ed:f7:4c:16:ba:ec:eb:8b:fc:1f:21:2e:a3:3b:92:16:
         db:15:4e:60:93:d9:30:8a:94:97:64:63:a5:eb:24:67:ed:96:
         8a:a3:25:79:84:dc:3e:8f:62:a5:62:06:c3:d9:74:7d:db:0b:
         64:5f:49:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOoMPJRQiMJ5OmDM/IR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYzVlZDBkZWQ4NjI1YjMyYjY1MzMyMDcyMjlmMmM0Njcy
NTk4NDgwHhcNMjUwNDEzMTQwMTUzWhcNMjUwNDE0MTQwMTUzWjAzMTEwLwYDVQQD
EyhlZTk0NDU0MTdiYmViZjAwZWRiMTZmN2IwOTEyNDMzNzRmNTc3NmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLaJRrifn2YFChlu/dMeZ9bANxKw
8y+ytj9oHz9n12kIdUjsAN6VTOIqMo07oSB9SvxnsYvpC4b1p3hxkg9OZm8frMEt
xya07r+sFaWYEhEc7RgFuH/REBslk9j54eKvn2iR9WPQU/DdnxYzfHtmtpARlUik
kzoPqQuJnDypeQDEhnSIzi+6TukyKds75bG9CIINi4482ps9Wl5jaYmaNtg2FdGC
0DHsXvm9XeXpiNFmDWrWdrIPUeSP7L2h/OUuoWLyC+rOs6dnYtJDH9INlIaCkqof
1qxTLE78ZS6yogOPCCsD+QTVbMdOriooIEn7lHvMHmTTsGVFjvwASrKQnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6URUF7vr8A7bFvewkSQzdPV3azMB8GA1UdIwQY
MBaAFGHF7Q3thiWzK2UzIHIp8sRnJZhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MDYyYWYtNTNiYy00MzVkLWI1ZmIt
YTExODQ5ODMyNWY3LzEvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MDYyYWYtNTNiYy00MzVkLWI1ZmItYTExODQ5ODMyNWY3
LzEvWWNYdERlMkdKYk1yWlRNZ2Npbnl4R2NsbUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif6nVQ5K
ZweetLYMfxuGnyuu94x4gCJIhxibCqnT1nFV+rukDqIO/cYE222yoKvfrrKgwKGC
1icSl8OTiWPreNwoG9iIg771TtRTLI5108upHJIr7KhEnMUpjQ9aF9G15tDyeVP+
LZR08aClOg+EurlSIOwgpMXFALwyoSQopwGLfdXifkMFR9YB6fc2vxmRQ1cOtLuI
bq3HiwCxFFIOu6MLiFw5/vFO1lCjS8JPco8c8ZIbOw3EYzDvWa1Pa+FNNJ9rLluN
sNrt90wWuuzri/wfIS6jO5IW2xVOYJPZMIqUl2RjpeskZ+2WiqMleYTcPo9ipWIG
w9l0fdsLZF9Jqg==
-----END CERTIFICATE-----