Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
File:                     YNCwIHYDvkPYSS6YUTeLi08JWU8.mft (raw, json)
Hash identifier:          dEQgUURnk5qw0fiZoZpx7iMpnSE6YpFFDi9SavceTl0=
Subject key identifier:   14:E1:84:74:50:D0:05:E6:F6:D5:67:D8:A8:29:4B:B5:98:88:CD:2F
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Certificate issuer:       /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial:       01962DF3AD132AA1EF82DAC5FC40560FAA05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: TGCJDTG82pX-vT9LeK2kOQ4sDi8.roa (hash: zRKBbHZChcvp4qDJB7Pkx8ohWvBK1TWvnJD0kE9wiHc=)
                          2: YNCwIHYDvkPYSS6YUTeLi08JWU8.crl (hash: eeu8iYpgIQ8vDENkoVNbAPxrWju5MaYNZncMg4HTuJ8=)
                          3: hmDTZOEMQo2FsgMZ2bH5HdU2vyI.roa (hash: NbIM1acTbudT3ToneHmDuzQP2dnfQF8A/BNgiqfCI44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ad:13:2a:a1:ef:82:da:c5:fc:40:56:0f:aa:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=14e1847450d005e6f6d567d8a8294bb59888cd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:be:6a:1a:2d:ce:df:b9:9e:c1:f6:cc:b8:
                    63:43:eb:a7:17:bc:7b:f9:0a:4e:7e:d0:71:b9:00:
                    a7:30:7f:e9:b8:6a:29:e7:58:e1:95:c7:9d:58:19:
                    23:b1:ec:cc:51:bd:0f:94:7f:7b:4f:18:32:04:ad:
                    ef:d2:60:c8:6d:46:9f:5d:bb:78:36:15:1e:75:8c:
                    ac:88:7a:6b:a5:83:a2:4f:00:04:a7:95:96:7b:cf:
                    82:e4:cb:6f:72:97:4f:87:1d:d5:f3:9a:0b:e4:c0:
                    85:3c:6e:c4:51:77:78:75:10:24:75:5c:40:90:22:
                    71:e1:d9:a7:13:5b:9e:14:54:ba:a6:83:a8:0e:b9:
                    1f:19:42:16:78:d4:9a:ab:d1:ce:ec:44:fb:eb:59:
                    a2:7f:79:dd:4c:32:ea:69:fb:b8:54:c1:89:eb:6b:
                    ec:4a:84:63:e6:1a:e7:26:77:97:24:9a:95:f6:16:
                    6d:55:4c:3c:b5:25:b7:c2:47:68:9d:5c:cb:8b:19:
                    ff:aa:70:2a:54:dc:cb:61:a8:ee:23:eb:bd:7f:db:
                    98:76:c4:cf:ad:8b:14:83:b9:5a:d8:b4:9e:d4:4f:
                    a3:8d:b2:57:df:8a:0f:de:57:09:33:89:28:46:3b:
                    d8:74:14:48:bf:6c:00:44:1d:7c:03:06:a8:40:c8:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E1:84:74:50:D0:05:E6:F6:D5:67:D8:A8:29:4B:B5:98:88:CD:2F
            X509v3 Authority Key Identifier:
                keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:63:73:4d:49:de:5d:68:81:16:6c:92:00:04:58:80:2f:
         cc:a7:7c:3d:bb:a0:be:03:81:cf:72:94:a7:28:e0:a9:d3:95:
         7a:bb:48:91:26:d5:88:78:f6:01:d2:57:95:0c:3b:91:81:d0:
         b1:32:08:92:2c:76:17:13:59:34:0e:5e:66:8a:0c:4e:7c:da:
         b7:7d:ce:32:c1:a9:fa:86:47:55:d0:69:ac:8c:8d:73:06:6a:
         33:3b:db:2f:2a:9b:ab:8c:b3:e6:80:17:3e:1c:4c:fa:1f:e9:
         dd:5c:ea:59:74:f0:0c:98:f8:94:1b:d8:04:55:fe:95:82:dc:
         41:f7:27:4d:45:10:6d:d6:ef:3e:c9:b3:23:7e:2d:79:2c:78:
         7e:76:dc:48:ac:ae:f4:23:c7:ff:4e:33:e6:09:01:2d:11:94:
         bd:3a:0f:19:43:58:65:4d:7f:57:78:e4:95:2c:63:49:b9:e2:
         5b:f8:32:46:d2:12:48:44:2d:b8:d4:b2:64:f1:7b:73:3e:f1:
         65:3e:0b:cc:ac:30:21:69:ef:1f:c1:e9:2f:25:d8:fb:72:c8:
         3f:28:2d:1d:09:67:d7:7f:1c:3c:0f:d0:18:e1:d9:06:92:7b:
         c7:f2:6c:cb:88:a8:87:86:d3:1a:f7:31:93:ed:78:c5:5f:11:
         18:c3:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----