Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
File:                     YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft (raw, json)
Hash identifier:          38EQlS4rT9Lwq9U4JHBSS2Vbh6qPmVj9uK4ev7CWJ58=
Subject key identifier:   5F:11:4C:07:B8:07:96:D3:FD:6E:90:97:E6:E4:2F:A8:AA:02:1F:52
Authority key identifier: 61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5
Certificate issuer:       /CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
Certificate serial:       01962F07488735DF67D2C62FB4F8B90C86A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft
Manifest number:          0C84
Signing time:             Sun 13 Apr 2025 12:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:08 +0000
Files and hashes:         1: 02GOfZbMNICRgOj9G0mIGs2I4vI.roa (hash: 7F9bn3m0UkAUH0crYUw2LxUKO5iFZMnEUQvddNdyyzY=)
                          2: 1wktyXo13sUHT1rATESg5FNiuyk.roa (hash: hCP3ZMMgaFh8n4sim6mqZazNXZKLtUNK2izenZ+UBc4=)
                          3: YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl (hash: ZT7x4EHUd+5tbStBCyl3G+4l/XGqLmGa+2aBzs6L1II=)
                          4: yxSHMNq1K4qzrK8RBcry_vpRL0Y.roa (hash: ES8XPk3Ggq1Zs2KaMQwv/Lx7ybdkBhCiefUow9lLBOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:48:87:35:df:67:d2:c6:2f:b4:f8:b9:0c:86:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614e19a2275816a28e5e80c8f9a28cc5a1d9c0d5
        Validity
            Not Before: Apr 13 12:02:08 2025 GMT
            Not After : Apr 14 12:02:08 2025 GMT
        Subject: CN=5f114c07b80796d3fd6e9097e6e42fa8aa021f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:51:31:8a:58:e8:9a:6e:d5:06:d3:9f:57:
                    6c:1c:4d:34:21:b8:1a:94:9f:45:19:9f:6d:2d:39:
                    af:e4:27:49:0c:9e:82:81:ae:15:ef:17:f8:17:01:
                    9c:ae:0b:cc:47:63:79:e4:21:fc:74:f4:bc:ab:60:
                    eb:40:60:27:60:7e:bb:57:8b:51:8d:d9:85:9d:39:
                    00:a3:52:a6:1f:63:76:47:34:7b:f6:6a:19:4c:ea:
                    0f:25:91:0f:10:b6:72:4c:a5:67:17:5f:bf:cc:b8:
                    13:d5:52:e0:eb:81:47:85:3b:b0:f1:0f:5a:41:b7:
                    66:ab:2b:31:2d:d2:ae:47:ca:88:0b:3b:57:6d:4d:
                    0f:5a:3c:67:11:9f:68:bb:43:1c:ec:a1:a8:47:ac:
                    81:53:53:9f:34:8d:10:60:94:83:ca:b1:be:33:7f:
                    56:d8:ce:12:e2:45:26:07:e3:f4:84:d3:3d:35:af:
                    c5:4a:2f:a5:8e:6f:02:6e:4b:cc:b0:d7:8d:9b:09:
                    51:fb:95:c6:70:3e:cb:65:a9:9f:5e:2e:d9:c1:b8:
                    3e:d1:7f:14:93:a0:1b:26:24:13:a4:b2:52:d0:53:
                    17:66:f0:ff:20:e6:5c:bc:ff:8d:f8:6d:c3:9c:16:
                    e7:36:ba:28:cf:c1:34:8b:9a:00:2e:05:02:8d:ba:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:11:4C:07:B8:07:96:D3:FD:6E:90:97:E6:E4:2F:A8:AA:02:1F:52
            X509v3 Authority Key Identifier:
                keyid:61:4E:19:A2:27:58:16:A2:8E:5E:80:C8:F9:A2:8C:C5:A1:D9:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YU4ZoidYFqKOXoDI-aKMxaHZwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/e58e27-cafd-417c-95d0-870544caafab/1/YU4ZoidYFqKOXoDI-aKMxaHZwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:ae:65:97:ca:d2:4e:41:e8:95:5e:af:e7:38:b0:8b:95:
         f2:68:d9:e2:bd:2a:fc:d0:d7:6a:8e:c8:9b:97:69:4b:7a:26:
         7e:7b:69:b4:46:0f:2f:f1:2f:62:17:a2:a5:40:dc:ea:5a:ea:
         45:67:56:e3:0c:12:f2:37:62:b5:fd:84:11:87:b6:61:4b:81:
         4f:f8:3b:5f:1d:7a:a4:0c:67:12:ed:58:4e:c6:78:38:d4:41:
         e6:7e:ea:cb:e7:9b:8e:bd:27:cb:57:1a:98:31:97:f8:c1:85:
         f5:af:65:b0:82:c9:ae:0c:b7:44:7a:97:50:c8:42:ef:7f:59:
         07:bb:d6:3f:87:4b:e6:97:cd:25:e3:6a:65:60:90:9f:6b:59:
         ab:01:47:56:4e:73:ce:25:96:75:5b:dd:d2:1e:a4:26:bb:2b:
         28:80:03:4e:14:e9:c7:25:8d:f0:29:a1:fb:8c:77:2f:3f:22:
         e1:a1:66:0b:bf:41:1f:bd:5b:38:be:fa:13:04:4e:65:68:dd:
         7d:e4:ac:7b:37:31:36:f1:cb:70:cf:bc:9e:5a:af:b9:8a:81:
         e2:63:12:8a:4a:c3:da:6f:d0:bc:10:2a:ca:60:4f:96:60:ef:
         bb:21:89:63:0f:7c:bd:8f:c5:b4:6d:1e:8b:8c:ac:bb:1a:79:
         e5:20:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----