Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
File:                     Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft (raw, json)
Hash identifier:          TRFQ8V2EbhiMgNXoCE8rN+MOTWIX2aii+cN2JYVxaSs=
Subject key identifier:   D7:A4:8D:50:2F:6F:53:40:6B:ED:17:0F:B9:6D:59:43:9B:5E:FF:C6
Authority key identifier: 61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93
Certificate issuer:       /CN=61e6ea83926bc478c785471d805a5c1210a8c993
Certificate serial:       01962E2AE9ADABB1325600274B987E0D0136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: 8f1DQEzOmVOlZREX0FzyX7_KlmU.roa (hash: vPG/1XLUFUdmTpDY8V/ZQr1qcuxaKozSqJOdcnOMn8g=)
                          2: Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl (hash: mEvKISqB+nOePWy72caqhCj8ahmbAlOWQ3EAjsxXIXM=)
                          3: qSt6_fPnhc395r0EppghyMpbl50.roa (hash: WLU9AacDdZK/vCoUCpNnuiXgsMa/7UTXH1xNyMiTNHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:ad:ab:b1:32:56:00:27:4b:98:7e:0d:01:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e6ea83926bc478c785471d805a5c1210a8c993
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=d7a48d502f6f53406bed170fb96d59439b5effc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:57:d2:5d:80:52:03:53:19:86:3b:43:67:
                    d7:8f:dc:9d:e9:6f:b6:ce:c3:e0:7f:3c:d5:0c:67:
                    0e:c6:b6:64:1c:03:93:07:d0:04:24:1f:96:55:8a:
                    f0:77:59:01:49:82:fd:01:56:d1:47:07:84:0a:56:
                    bb:37:d2:38:a7:f5:32:21:2c:6d:5a:44:f8:f8:e4:
                    ba:66:23:cf:c7:02:45:ce:6c:f6:d8:ff:a6:43:88:
                    37:9a:fb:35:03:16:5f:06:e7:fd:c2:76:f4:4d:40:
                    43:c0:95:2b:2f:e9:a6:4c:27:77:7b:92:75:54:b2:
                    89:9c:db:0b:aa:39:31:f2:2a:90:2e:83:fe:59:86:
                    e5:43:be:94:31:2e:53:f0:6e:9a:4f:65:c1:aa:70:
                    c8:50:08:28:40:3f:3d:4c:94:4f:70:af:69:1f:64:
                    cb:b2:ea:86:12:9a:cc:26:71:04:5a:b1:7a:1b:85:
                    48:21:07:42:54:e6:44:07:5e:ba:13:60:31:a9:3a:
                    1c:70:c3:51:f6:1e:92:aa:68:18:b4:eb:38:b4:f5:
                    c1:ea:31:a2:de:81:f3:e7:4e:71:ab:41:28:09:01:
                    e8:d3:a5:be:56:9c:8e:da:cd:1a:0a:3d:c2:e5:57:
                    43:b8:4b:7c:e2:f4:37:cf:37:0e:8b:a0:be:4f:34:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A4:8D:50:2F:6F:53:40:6B:ED:17:0F:B9:6D:59:43:9B:5E:FF:C6
            X509v3 Authority Key Identifier:
                keyid:61:E6:EA:83:92:6B:C4:78:C7:85:47:1D:80:5A:5C:12:10:A8:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yebqg5JrxHjHhUcdgFpcEhCoyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/74bf41-d6a7-4fb5-801c-33cc3adb1e78/1/Yebqg5JrxHjHhUcdgFpcEhCoyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:4e:47:b5:af:ad:a8:1b:e4:89:63:31:c5:53:a8:1f:95:
         ce:0d:82:bd:8e:3c:50:24:f5:04:f2:78:40:0d:15:e2:a9:4f:
         ab:9e:e7:05:fa:0e:b3:1b:67:76:46:cf:8b:9f:91:e5:49:13:
         d4:85:40:19:c2:b0:4f:e0:02:0b:da:df:63:89:f3:0f:78:fd:
         bc:dd:96:62:6f:9f:2d:5a:33:43:b0:31:aa:8d:b0:f3:aa:70:
         29:d7:de:77:49:fb:1c:2d:b3:8c:48:99:1b:af:de:2a:a9:bb:
         96:e3:be:95:ae:75:a2:33:c9:57:66:1c:ae:a0:4e:22:f6:a9:
         b7:6b:52:61:13:e4:05:2e:9c:fc:75:29:ca:6b:a6:ea:37:a2:
         eb:f3:b5:39:57:79:f9:e8:0d:91:ea:5a:21:b1:05:a8:43:e8:
         f8:cf:c9:23:6f:3f:97:89:51:03:c9:f3:3d:45:ce:ee:20:c1:
         cf:4a:48:9e:d7:01:11:e4:5b:4c:73:42:10:e5:93:e8:e9:f1:
         36:65:b5:08:4d:e2:41:ee:1a:25:98:d6:10:28:36:f4:17:9c:
         9e:e9:28:ab:84:b0:3a:64:21:24:21:40:be:ba:8b:9b:83:f6:
         0a:75:46:0f:81:42:ad:b7:04:4b:44:aa:4e:15:4a:12:2b:2b:
         05:6f:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----