Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File:                     Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier:          st8l/jPu+xKkG59QN9W/V9V1k7N8DgO7YaGwu/4qnPc=
Subject key identifier:   67:AC:F2:42:D7:45:E1:2A:AB:02:AF:EC:D2:2D:83:A3:DC:C0:22:31
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer:       /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial:       01962E993B80EA876A52CEF25D102AA06B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: Hs2TvjBAbChswFTm05pNrXJsCJA.roa (hash: xtJBUOZoNvBaKTOo18EAAqIaZQ4IjdLX9G/viT94FJA=)
                          2: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: YevJkqpIB+QPk9MRmVwOBKU3QsE3D8p+mpobURNFs8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3b:80:ea:87:6a:52:ce:f2:5d:10:2a:a0:6b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=67acf242d745e12aab02afecd22d83a3dcc02231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:40:8a:fb:09:14:9d:b5:c0:a4:3d:d2:df:
                    f9:cd:4e:67:c6:b1:24:d2:6c:1d:13:e1:ee:52:e3:
                    34:0c:5f:4c:7a:13:8e:e6:ef:5e:7d:fc:0f:80:6b:
                    20:62:7f:cc:6b:58:ef:46:ab:b4:1f:7e:fe:32:a9:
                    e3:1c:30:88:ee:47:95:e3:ab:47:35:39:5c:a6:f5:
                    76:f2:af:e6:c5:ab:d3:55:cc:e5:77:66:13:50:6f:
                    1f:58:26:f4:f6:41:f8:4e:1a:76:44:73:e6:c8:dd:
                    c5:cc:9e:46:94:63:c8:90:06:52:1d:4b:17:f2:31:
                    ae:0a:97:1d:81:f8:b5:31:b6:9e:e5:25:bb:2e:c4:
                    07:39:35:21:f3:b6:b5:b9:cc:fc:d8:28:6d:be:42:
                    bd:cc:c5:b9:e2:65:29:0f:11:70:df:59:52:b5:86:
                    cb:50:a7:e6:db:76:cf:5f:c4:a5:a7:dc:17:ca:4c:
                    83:fb:3e:5c:71:0f:b7:71:73:e2:ab:7d:a7:af:74:
                    eb:e4:8e:c7:6d:d6:8b:e2:40:32:54:45:91:0f:06:
                    d4:5b:6f:1d:a8:92:3d:1c:ef:06:af:71:fb:1a:76:
                    48:9a:e9:05:fb:45:8b:f1:42:7e:3d:a1:2e:ff:32:
                    ce:1c:17:e1:63:f3:0e:d4:46:2c:0d:42:d5:59:bc:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:F2:42:D7:45:E1:2A:AB:02:AF:EC:D2:2D:83:A3:DC:C0:22:31
            X509v3 Authority Key Identifier:
                keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:42:a2:77:7d:b7:b9:45:ad:82:55:55:34:d4:a2:3a:ac:9a:
         c0:3d:19:2a:c1:fc:99:cb:33:cd:e4:45:0b:23:53:9f:90:ac:
         dc:11:22:20:4a:08:d6:13:ca:a8:9b:e5:9e:3e:2b:18:82:22:
         1f:24:8e:b3:4e:e8:59:ab:1a:39:6d:bd:37:84:c4:ae:14:d7:
         72:fb:ac:89:70:f8:9a:7d:b4:a8:1d:45:af:6e:25:a9:1d:88:
         2f:82:4a:f6:5b:11:65:f0:44:5c:e3:e6:76:db:97:5a:e3:bc:
         ea:47:b0:68:24:ad:4e:93:eb:3b:c5:04:7f:97:dc:57:80:7a:
         8c:f2:2f:51:c9:3a:ec:db:73:a3:e0:19:5f:bb:bc:85:3c:e0:
         57:2a:ee:bf:69:dc:96:61:e7:b2:04:54:ab:ba:9b:4b:50:87:
         89:f5:7f:30:70:52:11:51:49:14:e2:9e:74:b1:45:af:b2:a8:
         04:41:b8:f3:aa:34:bf:ee:67:b2:9c:c6:74:56:a6:4f:d5:82:
         71:3f:91:25:05:ae:7e:42:5e:92:4f:00:dc:2a:54:c3:4b:f9:
         62:93:7b:79:8e:30:7a:0f:8b:8a:b8:19:b7:23:8e:ec:b7:7a:
         2c:06:ab:55:74:2b:d7:99:ed:47:e7:03:34:8d:31:28:1a:1a:
         d0:67:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----