Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File:                     YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier:          HZqy7Kd2VchUw8UeqP+goc81zxapzVQksrUChhcXgHk=
Subject key identifier:   1C:38:8E:26:23:6C:03:AA:E2:EA:71:6E:C5:80:3E:85:52:DD:E3:D5
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer:       /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial:       01962E2AEF4A8C1F8026B3E0594E310CDC60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:27 +0000
Files and hashes:         1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
                          2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: Lp4i7HyQ9BQmBCQLFnjnQHUjEsvrRsd0XPSqgcQRnA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ef:4a:8c:1f:80:26:b3:e0:59:4e:31:0c:dc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
        Validity
            Not Before: Apr 13 08:01:27 2025 GMT
            Not After : Apr 14 08:01:27 2025 GMT
        Subject: CN=1c388e26236c03aae2ea716ec5803e8552dde3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:8d:ff:ab:6a:0b:22:67:c3:7c:69:b3:e8:
                    c3:e7:2a:23:52:ff:41:0e:84:88:4b:6c:01:ec:bf:
                    85:90:2b:f8:b0:c2:22:83:3e:2b:4e:46:d1:78:9b:
                    15:29:9c:c5:33:7c:15:a8:0b:fd:5d:4e:0b:1a:95:
                    bb:c1:e9:3e:3f:e1:c5:b3:c0:dd:5a:3d:80:4e:11:
                    63:0e:92:63:5c:39:e1:fa:de:c0:13:34:44:e3:83:
                    e2:b8:67:b6:37:e3:26:5b:82:d6:57:2a:4e:7c:cb:
                    e8:43:27:f6:a1:44:62:e9:ba:15:f9:ce:75:28:53:
                    7a:2a:b5:9b:f2:3c:34:b2:ee:48:80:2b:2f:de:35:
                    f7:d2:0b:53:99:3e:37:d6:f9:a5:49:ac:61:17:9d:
                    6e:4c:da:73:14:65:47:34:7b:b1:36:80:61:9c:a6:
                    e3:8a:e7:ae:f6:4a:0f:30:e7:5e:54:23:7f:79:ef:
                    d7:22:d2:b4:dd:a2:34:f9:85:6e:5e:b5:98:46:53:
                    de:a1:6c:f3:ef:7c:7f:04:dd:d9:3a:bf:54:e6:82:
                    ad:74:df:31:2a:c1:5d:2f:57:2c:53:4b:dc:a8:73:
                    2f:60:12:60:99:8f:02:54:c6:c6:56:c3:d7:5f:7f:
                    cf:b6:73:3d:f1:08:b5:b9:a3:25:c2:f2:9b:e6:09:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:8E:26:23:6C:03:AA:E2:EA:71:6E:C5:80:3E:85:52:DD:E3:D5
            X509v3 Authority Key Identifier:
                keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:7e:f5:d3:46:3f:8c:67:78:fe:2b:a2:58:1f:7a:8b:2a:
         b5:67:8c:1b:10:60:cf:23:a0:b6:36:fb:ab:3f:7f:71:bc:fa:
         fa:47:aa:f2:be:24:3b:a6:73:72:68:c7:72:73:e4:a3:e2:c7:
         6d:98:c1:2e:fe:f4:2a:10:28:b5:eb:02:55:7e:9a:87:b3:2d:
         72:e5:63:60:c8:a8:2b:60:4c:fe:b8:70:ed:87:8a:2b:2c:56:
         2c:87:e7:13:f3:6a:7c:df:6e:e1:b5:65:e7:0c:21:61:2e:c5:
         f0:96:cf:88:0e:56:d8:1f:3f:85:ed:bb:fc:3e:24:20:91:1a:
         57:61:37:69:48:e8:85:64:40:f2:3d:48:8d:d2:67:d3:5f:b9:
         c8:36:8b:b9:55:1d:cc:ff:49:62:f4:1d:2f:bf:0e:7c:4d:e9:
         95:7e:d8:6f:49:b0:fd:75:32:04:48:f8:13:33:bc:64:cc:8d:
         da:33:53:83:a5:96:68:72:03:3e:9a:0d:45:b4:dc:0e:0d:58:
         48:28:9d:f3:dc:3b:df:d8:50:4f:4e:77:6c:6f:8d:3a:bb:b5:
         c1:34:00:49:24:7f:64:11:f8:e7:87:9e:9d:17:bc:be:43:71:
         64:e2:b0:b4:ae:72:0a:b4:c6:01:d8:f4:7d:d2:46:ec:7a:1f:
         7d:c0:e8:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKu9KjB+AJrPgWU4xDNxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDI1NmVkMzhmYjFlOTY5NDQ5MjZkYjRjNjZjNGQwODhh
Y2ZiZDYwHhcNMjUwNDEzMDgwMTI3WhcNMjUwNDE0MDgwMTI3WjAzMTEwLwYDVQQD
EygxYzM4OGUyNjIzNmMwM2FhZTJlYTcxNmVjNTgwM2U4NTUyZGRlM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsqN/6tqCyJnw3xps+jD5yojUv9B
DoSIS2wB7L+FkCv4sMIigz4rTkbReJsVKZzFM3wVqAv9XU4LGpW7wek+P+HFs8Dd
Wj2AThFjDpJjXDnh+t7AEzRE44PiuGe2N+MmW4LWVypOfMvoQyf2oURi6boV+c51
KFN6KrWb8jw0su5IgCsv3jX30gtTmT431vmlSaxhF51uTNpzFGVHNHuxNoBhnKbj
iueu9koPMOdeVCN/ee/XItK03aI0+YVuXrWYRlPeoWzz73x/BN3ZOr9U5oKtdN8x
KsFdL1csU0vcqHMvYBJgmY8CVMbGVsPXX3/PtnM98Qi1uaMlwvKb5gkBBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw4jiYjbAOq4upxbsWAPoVS3ePVMB8GA1UdIwQY
MBaAFGFCVu04+x6WlEkm20xmxNCIrPvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEt
NjhiYTZjNTRlZjlhLzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEtNjhiYTZjNTRlZjlh
LzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy9+9dNG
P4xneP4rolgfeosqtWeMGxBgzyOgtjb7qz9/cbz6+keq8r4kO6ZzcmjHcnPko+LH
bZjBLv70KhAotesCVX6ah7MtcuVjYMioK2BM/rhw7YeKKyxWLIfnE/NqfN9u4bVl
5wwhYS7F8JbPiA5W2B8/he27/D4kIJEaV2E3aUjohWRA8j1IjdJn01+5yDaLuVUd
zP9JYvQdL78OfE3plX7Yb0mw/XUyBEj4EzO8ZMyN2jNTg6WWaHIDPpoNRbTcDg1Y
SCid89w739hQT053bG+NOru1wTQASSR/ZBH454eenRe8vkNxZOKwtK5yCrTGAdj0
fdJG7HoffcDoPg==
-----END CERTIFICATE-----