Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
File:                     YH4TV4xoDumP2q0gI3DxDjwoKvw.mft (raw, json)
Hash identifier:          gTJnBO3h0pLZheuQPFGn7GTu+ySGiAGEbm69WnO73Vg=
Subject key identifier:   80:3C:26:27:44:3F:68:49:EF:F9:A0:25:48:23:80:C7:54:1A:48:48
Authority key identifier: 60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC
Certificate issuer:       /CN=607e13578c680ee98fdaad202370f10e3c282afc
Certificate serial:       01962ECFD96A6FDD0F0E9054ECB24A269EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft
Manifest number:          0DD2
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: YH4TV4xoDumP2q0gI3DxDjwoKvw.crl (hash: Sdfa6piZ3Pb4rWXWwMdvga4VSsUR1I3Fckg4T9faxb4=)
                          2: wjF-boaSBdJpFX21HtXG9GjSpyA.roa (hash: AbHr9ss+TI1KskPrNJWukMpmmelIuYFTcEXRCT6a0es=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:6a:6f:dd:0f:0e:90:54:ec:b2:4a:26:9e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607e13578c680ee98fdaad202370f10e3c282afc
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=803c2627443f6849eff9a025482380c7541a4848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:ee:a9:b8:b4:50:d4:dc:75:76:27:00:b4:
                    db:34:43:87:6e:6c:40:0c:9f:fe:f1:dd:cc:ea:16:
                    ad:31:be:7e:e4:06:9f:64:7d:45:3a:8e:db:99:ae:
                    01:bf:6d:95:c5:3d:4e:3e:b9:82:55:fd:3d:90:51:
                    7d:1f:6e:7f:91:7a:b1:a4:35:09:d0:13:b0:9d:72:
                    50:93:cd:df:02:55:45:af:94:fb:53:ec:ac:00:5f:
                    81:b0:7b:d1:a3:ee:6b:be:12:eb:80:41:b4:77:69:
                    cb:f7:35:68:71:46:fe:5d:eb:20:ac:c8:9b:93:7a:
                    85:1c:83:af:b6:96:48:15:09:13:69:3b:34:ab:c9:
                    50:ca:5d:3e:a4:9b:f3:ee:c9:e7:c1:63:85:bc:3e:
                    24:62:a3:aa:98:fc:3e:e3:7b:32:cf:f2:be:de:80:
                    b1:0a:c1:9c:0b:f8:8f:0f:ba:8c:04:ca:56:e1:61:
                    f8:3d:5c:fd:40:be:dc:73:70:bc:03:a1:85:2d:a2:
                    a1:f8:0e:ea:e3:eb:2f:b6:75:dc:26:34:13:61:82:
                    6b:01:3a:fd:11:fa:33:50:05:6a:ca:fc:1b:d4:22:
                    9f:e2:c8:87:bf:ee:85:cc:20:de:66:15:1d:9a:18:
                    c5:35:59:e2:e9:ce:7e:52:d5:08:df:df:4c:71:c0:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3C:26:27:44:3F:68:49:EF:F9:A0:25:48:23:80:C7:54:1A:48:48
            X509v3 Authority Key Identifier:
                keyid:60:7E:13:57:8C:68:0E:E9:8F:DA:AD:20:23:70:F1:0E:3C:28:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH4TV4xoDumP2q0gI3DxDjwoKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a21bbe-ba4d-4e03-bef8-baffe3b677df/1/YH4TV4xoDumP2q0gI3DxDjwoKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:60:4b:b3:9b:78:1a:5a:01:b9:d7:d7:9c:6c:8e:30:ff:
         a3:1d:22:35:bc:65:10:b3:ea:34:9d:0c:6a:d3:bb:8a:67:45:
         a4:69:d2:05:0a:6d:b3:81:db:fd:ee:60:a3:d2:48:88:e7:e2:
         26:5b:ea:a5:ae:0d:4f:5e:f5:78:6f:06:da:14:4c:09:6b:7b:
         65:d2:87:a7:53:6d:fe:15:a5:bb:d7:da:36:d5:a1:08:43:8f:
         f2:21:9a:15:91:6c:9c:d9:98:61:7d:31:7d:c4:df:c2:3a:5d:
         28:39:8d:79:a5:f4:91:e1:0a:0c:cb:02:e9:5d:57:73:4f:33:
         73:cb:dd:17:6d:e5:02:31:35:e4:e7:08:85:bf:c4:97:d3:62:
         06:e3:e4:ff:54:4f:30:02:67:07:6e:51:3f:03:04:00:79:f6:
         41:0d:8f:aa:95:c2:d6:d5:8c:2b:69:bc:59:15:6b:b5:18:b6:
         c0:3e:79:2f:4e:37:20:cf:88:ac:d6:12:7c:5e:1b:ea:a0:78:
         7a:a3:1b:18:59:88:c4:ba:63:3c:0c:c4:7a:bc:98:79:05:68:
         cc:b6:70:af:fb:f4:15:94:05:bc:62:b0:de:08:c9:04:15:43:
         f6:0a:d9:67:2c:23:05:ea:16:fa:37:e8:b9:b7:8c:c7:0b:39:
         86:60:98:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----