Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
File:                     Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft (raw, json)
Hash identifier:          BMJjpzgjXeanrG/o2Y7UhuBK4zFTTLsZlqWCfUAmKiU=
Subject key identifier:   17:AA:50:E4:B2:C2:07:41:0B:7C:C6:FB:77:86:9C:3E:1B:ED:30:46
Authority key identifier: 63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C
Certificate issuer:       /CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
Certificate serial:       01962F0683A74650C860FBBA168FA0092A8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl (hash: zAirX8apQdOcY3jq7ThY2z7EAnN4YlgkvnHEeVnLhJo=)
                          2: lk2DKx6tMZ4QVeIQ4n9LUxby2mQ.roa (hash: g/j+F0OdRQ6yoH4DQlzMOgxK5K/3yYMtnzs95xrt8uU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:83:a7:46:50:c8:60:fb:ba:16:8f:a0:09:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c1b9ffe98672bf62f487f47dafea30f5bef09c
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=17aa50e4b2c207410b7cc6fb77869c3e1bed3046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:c6:fc:63:20:64:fa:51:d2:03:1a:a9:3f:
                    e2:06:66:93:2f:65:60:13:8f:51:dc:58:b5:88:3d:
                    5d:af:d7:dc:4f:1c:ac:ec:cb:47:9a:60:ca:d2:f0:
                    67:26:ac:88:6a:39:5c:6f:76:23:fd:cd:fb:88:b6:
                    15:62:0a:d9:41:f3:5a:3b:22:8b:68:b5:ad:6b:68:
                    8d:25:6f:18:92:45:87:d3:93:36:65:5d:be:e4:aa:
                    5d:f8:6e:be:34:4b:63:10:95:92:05:6b:86:f3:30:
                    21:3f:27:25:7c:7c:46:95:be:8f:91:03:e5:10:37:
                    73:61:73:90:35:f3:07:b9:24:fc:83:f5:22:be:59:
                    b0:df:0b:6b:d9:b9:34:1a:99:50:9d:23:ef:5c:60:
                    3e:8f:49:af:33:10:a4:c3:99:c6:2d:0a:ad:1d:db:
                    db:27:c0:a0:53:27:a5:a4:68:7c:c9:48:bf:25:63:
                    65:1d:18:c9:e8:7e:97:fb:1f:ae:b6:56:4b:ea:90:
                    5a:81:07:e0:3b:92:51:51:07:d1:3e:a0:d6:ff:5b:
                    50:63:aa:a7:2e:35:b1:34:36:f9:4d:99:b4:06:87:
                    7f:e4:37:eb:63:a2:41:a1:4c:37:5c:a8:ed:8c:1a:
                    cb:7d:e9:e5:af:fa:10:c0:ef:35:4b:b8:2b:5b:aa:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AA:50:E4:B2:C2:07:41:0B:7C:C6:FB:77:86:9C:3E:1B:ED:30:46
            X509v3 Authority Key Identifier:
                keyid:63:C1:B9:FF:E9:86:72:BF:62:F4:87:F4:7D:AF:EA:30:F5:BE:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/63e305-46e6-4363-8733-7d948dba5e3c/1/Y8G5_-mGcr9i9If0fa_qMPW-8Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:24:77:0a:9f:86:f3:5f:e1:82:00:6b:db:bf:7d:63:a3:90:
         1c:1d:65:8b:51:78:2d:af:1d:57:ce:13:4f:97:db:97:ef:9f:
         dc:f8:ef:e6:d8:5b:1e:08:03:40:8c:85:02:24:56:a1:98:a6:
         bd:3a:6f:c7:53:37:67:5f:3e:1d:74:6c:44:51:b3:55:a6:c5:
         e2:fe:b3:06:82:27:ab:ae:a4:99:3a:c0:19:99:c2:7a:36:bf:
         df:57:85:20:52:34:8f:e0:e0:2c:3c:21:99:93:77:a6:ec:28:
         f4:24:63:4b:79:47:da:ed:21:91:ea:f7:58:34:05:eb:8a:d5:
         d2:7a:56:c8:39:d3:89:9b:98:7c:c5:f5:f6:c5:05:21:bf:b7:
         55:63:d0:3c:23:36:30:4d:8f:72:74:6d:e0:ef:05:0c:e0:af:
         e7:52:d0:39:a6:ef:f1:52:fc:a3:38:16:b5:59:29:07:37:5f:
         08:ef:23:b2:b7:69:f7:15:a1:f3:bb:97:b4:5d:4d:31:b0:ed:
         1f:3d:b5:af:a1:78:b3:f9:d9:21:ce:d0:19:22:39:f4:6d:9b:
         66:38:1a:b4:0a:db:9e:0e:3b:c0:99:e5:a9:dc:14:74:3f:a5:
         d1:e9:ec:6d:1e:f8:8f:ee:0a:d6:14:df:20:b3:ff:8b:e0:85:
         b3:5a:66:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----