Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
File:                     yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft (raw, json)
Hash identifier:          GTwD6JIh+NNKxb711cflEIaEd0nQnypJtfwoIDwvJJY=
Subject key identifier:   3F:29:F8:9E:14:4D:D0:52:6A:58:F2:66:57:BE:5A:97:EE:59:D2:6A
Authority key identifier: C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7
Certificate issuer:       /CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
Certificate serial:       01962ECFE2913A8E3CC87F05B97CCAA051D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft
Manifest number:          65
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: hGnhNt09WVSvAvlRb80VOz0njRw.roa (hash: reYotro4wzpVN+aJarCV//yL8yhlq3gQQiQttC9Xbrk=)
                          2: yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl (hash: rUBoQeu0TtlKDqA/ttfjlgmsyL2CZ4PO6+qF6cVKmGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e2:91:3a:8e:3c:c8:7f:05:b9:7c:ca:a0:51:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8294a2c0c49dc936cb988b685b3a7d95c8fe0b7
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=3f29f89e144dd0526a58f26657be5a97ee59d26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:ba:cc:3d:63:9f:b6:1d:a6:17:e8:9b:e9:
                    7e:a4:e6:9b:54:d2:f6:d4:57:dc:8b:a2:bc:8a:63:
                    48:0f:89:32:7b:9e:33:4d:33:40:61:10:7d:07:2b:
                    b8:b3:ce:80:08:ac:bc:a1:db:b8:c2:84:2b:be:a8:
                    d6:23:bd:33:0f:8d:e8:4d:02:74:f1:f9:24:37:94:
                    12:8c:98:b4:ad:15:71:6a:ed:50:63:9e:74:16:fc:
                    fd:9b:6c:9d:6e:65:af:c5:eb:c5:51:c4:fc:39:8b:
                    6f:27:74:7f:72:e3:f8:2a:eb:de:31:0a:21:25:e5:
                    89:25:cf:c6:0a:03:6c:81:51:66:a2:b0:32:8d:63:
                    25:9f:1c:2c:3d:f3:01:50:e0:cf:7c:67:c1:60:36:
                    65:8f:00:9d:2f:be:d6:7d:ba:eb:d4:a7:d7:94:1a:
                    7f:f4:4e:6b:e2:77:77:51:16:45:e7:c7:e4:c0:76:
                    97:61:95:a9:b5:b8:da:36:a5:d8:bc:8a:8d:d8:c2:
                    c6:1c:9d:bb:85:3e:04:54:e5:75:97:a6:da:a9:65:
                    43:18:a8:3f:be:38:8f:72:c4:b4:ce:53:a2:bd:1e:
                    bc:64:af:a9:53:b8:3f:41:3c:11:8f:da:68:92:c7:
                    df:80:72:c9:42:d1:36:df:4b:76:96:80:ac:59:5f:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:29:F8:9E:14:4D:D0:52:6A:58:F2:66:57:BE:5A:97:EE:59:D2:6A
            X509v3 Authority Key Identifier:
                keyid:C8:29:4A:2C:0C:49:DC:93:6C:B9:88:B6:85:B3:A7:D9:5C:8F:E0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/478977-05bb-43fe-9ead-9cef792a5f6b/1/yClKLAxJ3JNsuYi2hbOn2VyP4Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:af:58:f4:4a:c4:5d:1e:c4:63:de:cf:24:f3:72:a6:2f:
         ed:41:67:1b:3b:d8:d1:fb:5e:48:bc:33:f5:50:af:d7:21:2b:
         21:2d:63:95:25:20:fc:a6:d3:9a:24:a9:a6:fd:63:3a:b3:0a:
         9c:52:5f:93:50:66:6a:db:26:dc:92:49:15:cd:f7:11:6c:1f:
         0a:5e:d3:34:c6:b7:0b:24:05:57:8d:59:f3:66:88:f0:ed:1a:
         37:77:eb:7e:05:4e:4f:bb:58:0d:53:11:27:24:27:a8:9c:c9:
         00:59:7f:89:d2:bb:da:8a:5a:5c:9f:57:f1:6b:ba:57:54:c5:
         73:45:78:65:79:d3:b7:ba:27:b1:86:40:84:df:71:51:e3:5e:
         bc:e7:65:b1:fb:7e:b7:c1:76:f8:20:47:30:7d:1a:c7:4a:f2:
         5e:23:0f:03:18:67:7d:65:4f:e3:46:c5:18:a3:9b:a3:eb:5a:
         a6:69:fe:b9:75:f2:a5:8f:1a:ad:55:d9:4c:27:63:e6:b6:d6:
         1b:c5:ff:d5:e6:3c:50:3a:12:d0:79:06:ad:ef:73:77:9d:bf:
         e9:db:c6:58:32:29:8f:04:43:8b:1f:a9:ce:b1:d0:a7:0f:d2:
         cc:47:8c:2c:09:41:6e:51:ff:7c:fd:4c:db:7c:f8:89:2e:0d:
         bf:82:a9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz+KROo48yH8FuXzKoFHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mjk0YTJjMGM0OWRjOTM2Y2I5ODhiNjg1YjNhN2Q5NWM4
ZmUwYjcwHhcNMjUwNDEzMTEwMTM3WhcNMjUwNDE0MTEwMTM3WjAzMTEwLwYDVQQD
EygzZjI5Zjg5ZTE0NGRkMDUyNmE1OGYyNjY1N2JlNWE5N2VlNTlkMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJi6zD1jn7Ydphfom+l+pOabVNL2
1Ffci6K8imNID4kye54zTTNAYRB9Byu4s86ACKy8odu4woQrvqjWI70zD43oTQJ0
8fkkN5QSjJi0rRVxau1QY550Fvz9m2ydbmWvxevFUcT8OYtvJ3R/cuP4KuveMQoh
JeWJJc/GCgNsgVFmorAyjWMlnxwsPfMBUODPfGfBYDZljwCdL77Wfbrr1KfXlBp/
9E5r4nd3URZF58fkwHaXYZWptbjaNqXYvIqN2MLGHJ27hT4EVOV1l6baqWVDGKg/
vjiPcsS0zlOivR68ZK+pU7g/QTwRj9poksffgHLJQtE230t2loCsWV88zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8p+J4UTdBSaljyZle+WpfuWdJqMB8GA1UdIwQY
MBaAFMgpSiwMSdyTbLmItoWzp9lcj+C3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQt
OWNlZjc5MmE1ZjZiLzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80Nzg5NzctMDViYi00M2ZlLTllYWQtOWNlZjc5MmE1ZjZi
LzEveUNsS0xBeEozSk5zdVlpMmhiT24yVnlQNExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkB6vWPRK
xF0exGPezyTzcqYv7UFnGzvY0fteSLwz9VCv1yErIS1jlSUg/KbTmiSppv1jOrMK
nFJfk1Bmatsm3JJJFc33EWwfCl7TNMa3CyQFV41Z82aI8O0aN3frfgVOT7tYDVMR
JyQnqJzJAFl/idK72opaXJ9X8Wu6V1TFc0V4ZXnTt7onsYZAhN9xUeNevOdlsft+
t8F2+CBHMH0ax0ryXiMPAxhnfWVP40bFGKObo+tapmn+uXXypY8arVXZTCdj5rbW
G8X/1eY8UDoS0HkGre9zd52/6dvGWDIpjwRDix+pzrHQpw/SzEeMLAlBblH/fP1M
23z4iS4Nv4Kpow==
-----END CERTIFICATE-----