Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File:                     YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier:          rtn8LAPCnTjz2kyD5cuFSxkuzIXphd+QBac6UpTCoI0=
Subject key identifier:   31:09:BB:E7:27:D6:49:D6:2B:18:EA:F1:31:5C:06:5C:FE:7A:DB:20
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer:       /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial:       01962F0742F84CE1990BCC51A0F9790FEFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: Wt3X3B6NcZ-mxrNPh2fG99PqrRE.roa (hash: q1LYdMsfXSEFkYw+v/2PtBLKm0CXtMVR1H0DEe1ErnY=)
                          2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: iuSzWLvYRc9vxz4pn9fMBAvlL/w3rsT+LuANvfRMR1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:f8:4c:e1:99:0b:cc:51:a0:f9:79:0f:ef:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=3109bbe727d649d62b18eaf1315c065cfe7adb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:58:81:01:0a:31:44:d0:a3:c0:f7:56:d9:a9:
                    42:7e:6e:0b:c4:e4:ce:3d:78:a4:9c:65:3b:9a:19:
                    68:22:57:f1:37:d5:db:f9:47:2f:f5:fe:5c:6d:be:
                    2b:46:8c:13:e2:3d:16:86:bc:71:48:9f:dd:cb:a9:
                    23:72:d6:30:7b:ec:88:ee:7c:dd:f1:0f:9a:f1:6f:
                    32:92:c5:f8:b4:a0:5c:8e:3c:cf:f1:d5:44:7d:d9:
                    e8:8a:32:59:e0:ea:81:ee:cb:94:1d:5c:0f:93:3a:
                    6b:38:67:f5:33:18:d8:24:6a:2e:d7:d7:c8:56:d4:
                    6b:0a:8b:f4:19:38:66:8c:fb:1c:6f:29:eb:d0:70:
                    b5:43:8e:96:b6:61:ae:97:b3:37:e0:d0:96:0b:80:
                    3e:13:2f:fc:c2:28:68:f2:bb:0b:f0:41:5f:a4:75:
                    62:d0:c6:de:83:6a:0d:48:b6:4e:d3:c5:ef:5a:de:
                    29:87:af:f9:4b:f7:1a:09:e9:6e:52:d6:fe:93:10:
                    40:29:cc:22:0a:9c:5f:9d:df:db:3e:90:09:46:95:
                    c1:35:b7:21:ee:2b:af:85:20:74:6b:b3:da:97:37:
                    d7:19:f0:26:28:b0:a4:a4:29:f8:ed:c1:b6:26:74:
                    ff:2d:de:3f:59:e3:29:33:34:d7:be:6b:f9:fb:3d:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:BB:E7:27:D6:49:D6:2B:18:EA:F1:31:5C:06:5C:FE:7A:DB:20
            X509v3 Authority Key Identifier:
                keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:50:bc:d1:9e:33:84:24:38:1a:87:cc:3a:d1:70:b3:26:8e:
         d9:66:25:72:5f:6b:82:9d:9d:0b:64:f6:c7:7a:8a:47:28:a4:
         e4:81:c3:20:2f:7d:82:1a:4f:ae:60:23:18:a9:1a:30:d7:71:
         07:de:74:97:7e:80:ab:71:b6:da:fe:5f:c2:7e:b1:b6:8e:ea:
         f8:04:8c:ea:f5:fe:be:fc:f1:b6:a9:08:5a:69:10:91:04:2e:
         ae:0d:28:98:1d:da:01:16:ed:56:e4:79:44:75:e9:dd:61:55:
         fe:5b:aa:d8:ae:b1:3f:41:ae:ec:5a:f2:d6:19:66:29:e5:d0:
         09:b0:fb:fc:80:b9:9c:7b:f7:67:08:99:02:20:ba:bb:53:38:
         0d:72:86:a9:6b:09:f7:c3:0f:da:0d:a4:8f:80:c4:3e:91:e4:
         08:1d:b2:82:62:48:3b:d9:2b:43:c1:54:35:a5:7b:30:d6:ed:
         7b:fe:dc:b1:3c:4d:ac:4f:30:35:b6:57:fa:41:41:63:24:51:
         39:d6:e6:91:00:a6:aa:22:b3:7e:5a:94:ff:b3:7f:eb:2c:b9:
         f4:3d:df:17:a6:a9:3c:a2:4d:06:43:23:c2:e3:f9:30:c3:e4:
         34:95:1f:1a:5e:3b:89:cc:59:9c:ba:0f:f0:7e:40:b8:49:5c:
         80:e3:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----