Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
File:                     wY3k8q-McFDm5w4IoVJXPt1C5ng.mft (raw, json)
Hash identifier:          +Hi3hHRz/SlOdqq6PPm3DIu3PJMOYljFMthhPvLWnak=
Subject key identifier:   61:C7:47:88:43:E5:17:F5:42:32:2F:73:74:C2:D7:19:3E:90:AC:AE
Authority key identifier: C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78
Certificate issuer:       /CN=c18de4f2af8c7050e6e70e08a152573edd42e678
Certificate serial:       01962F07384EE224C2126F4486FACE388960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft
Manifest number:          0833
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: pFur-kbIHPtMOLrHz0LwLOKyGnk.roa (hash: CYiRhFaTrF8IsFJyFUUUj+3+nsfcKz+NgibdViBzD0s=)
                          2: wY3k8q-McFDm5w4IoVJXPt1C5ng.crl (hash: NYOiNOmNQiE4NyTT4xFooJZ8b1GVtb/Wo9ULGhKXPlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:38:4e:e2:24:c2:12:6f:44:86:fa:ce:38:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c18de4f2af8c7050e6e70e08a152573edd42e678
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=61c7478843e517f542322f7374c2d7193e90acae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:1b:83:7b:fe:1e:0f:61:b1:db:6d:49:36:
                    68:b4:70:96:36:6b:7d:12:2e:74:c6:e8:1e:5e:81:
                    ec:40:27:4d:87:1e:11:a7:59:41:ed:b1:bd:10:19:
                    46:cd:f0:44:4b:02:61:88:7f:78:d3:ea:eb:32:94:
                    27:2c:df:b5:78:4e:e1:ac:d9:83:29:53:9d:93:66:
                    5c:d4:be:07:2e:85:77:50:8a:ce:04:1d:41:84:e8:
                    f7:6a:0b:7a:7f:99:bd:80:78:35:9c:bb:ac:14:fa:
                    60:06:23:f4:a0:9e:db:df:4f:f4:30:28:8b:c0:28:
                    ad:ef:f8:37:d2:93:bc:f7:a9:d7:4c:3e:47:86:88:
                    a4:dd:6d:d5:04:8f:16:63:0b:1f:26:d3:17:be:90:
                    6f:48:6b:10:1d:65:e3:33:25:0c:03:55:22:36:92:
                    21:78:b0:cf:0d:20:18:80:b4:74:6f:c6:4c:9e:68:
                    fd:24:92:32:d1:a0:1e:d7:67:84:ae:f8:5b:cc:98:
                    59:4a:68:dc:f5:a6:48:17:55:19:5e:f3:ea:18:b8:
                    c0:a4:a5:c8:52:a4:c1:22:73:2f:bb:05:dc:bc:9e:
                    fe:fe:02:b3:5d:0f:dd:f0:51:3e:d7:94:00:f2:ad:
                    a6:3d:56:e2:6c:2b:f8:70:f7:fc:ea:b0:9f:20:10:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C7:47:88:43:E5:17:F5:42:32:2F:73:74:C2:D7:19:3E:90:AC:AE
            X509v3 Authority Key Identifier:
                keyid:C1:8D:E4:F2:AF:8C:70:50:E6:E7:0E:08:A1:52:57:3E:DD:42:E6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wY3k8q-McFDm5w4IoVJXPt1C5ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4af7c1-50cb-479d-a377-007b447d4b39/1/wY3k8q-McFDm5w4IoVJXPt1C5ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:88:4a:9d:a8:ca:4f:7a:45:85:ea:02:a8:76:ed:bc:69:1e:
         a7:c3:2a:14:f4:15:c3:e8:1c:a3:e0:2b:47:c1:ac:b9:82:5b:
         9d:e4:f4:50:3d:b9:90:87:aa:a4:fb:1c:ee:58:78:ce:c9:f2:
         c6:03:ef:51:2c:f8:10:9d:5c:c8:b0:c1:99:9b:6b:1d:9c:7c:
         5b:96:93:72:2d:b8:14:29:2c:98:61:47:49:ed:da:93:12:b7:
         0f:b7:87:1f:70:a8:9c:a0:19:b6:ce:7a:ec:b4:f0:7f:45:3d:
         22:b7:82:26:35:13:37:49:ea:e9:0f:8e:0c:a6:db:59:e4:b4:
         7c:ba:e1:ed:80:58:57:c7:4e:41:48:bc:22:4c:ac:c2:78:0d:
         a8:fe:9c:97:19:02:86:76:2f:3b:4b:77:ee:bc:fa:16:9e:19:
         d5:a0:18:c2:2c:a2:fb:74:70:27:b1:7a:7b:39:0a:00:d0:0a:
         cb:66:aa:67:f5:f4:68:0b:00:92:88:eb:20:48:76:75:34:a5:
         d7:d3:a8:48:37:e6:aa:42:a1:09:0b:b6:d3:b0:e1:cf:60:f4:
         43:27:01:96:49:cd:8a:99:60:6c:e2:a2:8e:92:16:bf:b2:e3:
         2f:15:42:68:75:a2:bd:6f:4b:46:bb:e3:e3:56:f5:d9:34:c0:
         e8:75:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----