Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
File:                     yPJYziA-BKM_TpBlEVOyWc_6Pog.mft (raw, json)
Hash identifier:          Csq8ogQYkuBSv2LDI2MML0AMlJl/OpdPDu53JMKY9rQ=
Subject key identifier:   AA:01:FC:75:E0:2E:8B:6F:D3:D8:BD:66:11:EF:BE:67:CE:FF:3C:E1
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Certificate issuer:       /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial:       01962E996B83279768D3FC6DA001A5376B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (hash: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=)
                          2: DSP2YiR4WzjHqSWGSS08rUQRgbE.roa (hash: wRqBcz801mLsMlnqTiS+wIo1U44VP4wBktKdtKLPifQ=)
                          3: L-DhFAOlHk5rFENU35v4H6Y8kC4.roa (hash: es/wTE6LdxRXaEI3U8d6ZJo/4QzkGb/m+lXYCfWMDmo=)
                          4: yPJYziA-BKM_TpBlEVOyWc_6Pog.crl (hash: g9PB0qPzZ/B0f/PfxggZrV11egBxRLrEv+22l1EF4xE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:83:27:97:68:d3:fc:6d:a0:01:a5:37:6b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=aa01fc75e02e8b6fd3d8bd6611efbe67ceff3ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:e4:0e:3d:2b:d8:47:70:e7:e1:01:8e:85:
                    3e:33:67:15:aa:e6:ee:d4:1a:9b:af:a1:8d:c5:0d:
                    fa:b1:34:1a:f0:7f:c2:91:58:b5:99:0e:85:12:7b:
                    35:41:89:91:ed:76:a6:2e:66:97:e3:46:1d:54:8b:
                    c6:d3:5f:b1:cb:15:a5:35:9c:a9:f7:78:c7:6a:a7:
                    ee:20:00:80:0d:0e:41:3f:24:48:a8:78:4d:2a:05:
                    28:e2:11:87:e1:00:94:9c:9c:3b:2b:6d:f5:8d:f5:
                    7b:ab:69:e7:d5:cf:55:ac:f1:87:80:b6:e3:24:c8:
                    c8:f2:8f:bb:4b:14:e6:08:dd:5a:7b:f4:58:4e:89:
                    4f:f6:fe:58:3f:8a:82:e5:d2:66:81:52:ef:c8:73:
                    3a:7d:37:43:73:36:ef:9e:55:cd:11:28:07:fa:71:
                    7e:e1:ec:44:c6:3e:4c:10:c1:71:cc:b7:6e:bd:99:
                    30:1c:1c:e0:c1:0c:91:25:8c:60:16:b8:2b:22:4b:
                    f4:5e:ef:a2:3e:69:72:6f:82:36:9c:41:a7:d9:f1:
                    6f:9a:90:bf:8b:51:0b:44:37:e9:5c:cc:07:cf:ec:
                    09:78:ac:14:db:c2:d4:98:55:da:f6:da:ef:90:0e:
                    2e:9d:d3:03:98:b9:88:0c:ae:7f:a2:e0:b9:c5:c1:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:01:FC:75:E0:2E:8B:6F:D3:D8:BD:66:11:EF:BE:67:CE:FF:3C:E1
            X509v3 Authority Key Identifier:
                keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:be:b7:78:40:2f:f7:90:70:f9:18:d5:e2:f5:58:24:96:
         52:de:fa:92:1a:2d:44:d2:11:44:f8:7b:1d:1e:f7:b5:53:0f:
         77:7e:86:47:5e:9b:78:ba:8c:15:63:65:9b:1c:49:7c:70:e5:
         2e:c0:46:f7:90:03:a6:62:9a:8d:3f:ba:24:9c:88:fc:63:96:
         29:b9:57:08:23:52:d3:ac:4c:25:bd:d8:87:7d:14:25:7d:52:
         5c:fe:ff:45:ea:51:48:34:2b:8f:66:1b:44:21:da:31:cd:cf:
         82:f5:d5:52:25:5e:75:0b:5f:b5:c0:9b:be:32:24:49:20:12:
         33:ae:e3:37:00:d5:55:00:04:12:08:12:fb:e7:97:cf:50:e7:
         7f:2f:92:24:86:e1:ac:bc:0b:d6:77:62:68:76:64:ee:e7:73:
         f6:bc:c8:3e:5d:ec:19:04:01:0d:cf:8f:23:5d:ca:f9:79:7e:
         13:92:73:d1:96:46:74:c8:2b:05:a7:22:4a:2d:8e:7e:70:d0:
         f9:14:db:15:a9:c8:1b:d5:2b:e2:62:6a:b4:29:ef:11:f1:59:
         e0:07:3f:ce:34:3d:58:32:62:aa:ae:f2:a0:91:f2:67:2d:72:
         dd:3b:32:b8:aa:a7:14:7e:81:e7:94:6b:b9:b1:15:00:48:8f:
         67:1e:c5:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWuDJ5do0/xtoAGlN2tZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZjI1OGNlMjAzZTA0YTMzZjRlOTA2NTExNTNiMjU5Y2Zm
YTNlODgwHhcNMjUwNDEzMTAwMjA4WhcNMjUwNDE0MTAwMjA4WjAzMTEwLwYDVQQD
EyhhYTAxZmM3NWUwMmU4YjZmZDNkOGJkNjYxMWVmYmU2N2NlZmYzY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSvkDj0r2Edw5+EBjoU+M2cVqubu
1Bqbr6GNxQ36sTQa8H/CkVi1mQ6FEns1QYmR7XamLmaX40YdVIvG01+xyxWlNZyp
93jHaqfuIACADQ5BPyRIqHhNKgUo4hGH4QCUnJw7K231jfV7q2nn1c9VrPGHgLbj
JMjI8o+7SxTmCN1ae/RYTolP9v5YP4qC5dJmgVLvyHM6fTdDczbvnlXNESgH+nF+
4exExj5MEMFxzLduvZkwHBzgwQyRJYxgFrgrIkv0Xu+iPmlyb4I2nEGn2fFvmpC/
i1ELRDfpXMwHz+wJeKwU28LUmFXa9trvkA4undMDmLmIDK5/ouC5xcFNlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoB/HXgLotv09i9ZhHvvmfO/zzhMB8GA1UdIwQY
MBaAFMjyWM4gPgSjP06QZRFTslnP+j6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQt
NmM4OGJmYTdiNTVjLzEveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xZjNjNGQtNTllNC00OTM3LWJjMTQtNmM4OGJmYTdiNTVj
LzEveVBKWXppQS1CS01fVHBCbEVWT3lXY182UG9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYO+t3hA
L/eQcPkY1eL1WCSWUt76khotRNIRRPh7HR73tVMPd36GR16beLqMFWNlmxxJfHDl
LsBG95ADpmKajT+6JJyI/GOWKblXCCNS06xMJb3Yh30UJX1SXP7/RepRSDQrj2Yb
RCHaMc3PgvXVUiVedQtftcCbvjIkSSASM67jNwDVVQAEEggS++eXz1Dnfy+SJIbh
rLwL1ndiaHZk7udz9rzIPl3sGQQBDc+PI13K+Xl+E5Jz0ZZGdMgrBaciSi2OfnDQ
+RTbFanIG9Ur4mJqtCnvEfFZ4Ac/zjQ9WDJiqq7yoJHyZy1y3TsyuKqnFH6B55Rr
ubEVAEiPZx7FCQ==
-----END CERTIFICATE-----