Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
File:                     YmqokTLSpoTY0qGj9-QPIjRjbzg.mft (raw, json)
Hash identifier:          X8z+vIWA+sdIECoR65+o48J3bfrwwea75OYMy9skkR0=
Subject key identifier:   09:50:64:61:D6:5A:3C:89:D6:EE:2C:DF:E4:79:56:23:D3:75:F7:3D
Authority key identifier: 62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38
Certificate issuer:       /CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
Certificate serial:       01962F06D1B09305EB020057F379F8FCA4D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft
Manifest number:          12C6
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: YmqokTLSpoTY0qGj9-QPIjRjbzg.crl (hash: tBjKd6On1LGfwRel0m+Ru+Y9OqDWs7NIHh6ZQ+NBwes=)
                          2: xj0Zl5jyKNtmExsm8HUfZTBh1W4.roa (hash: qJ7mmoo0SJOyk9TkckQkyKsoiQJfN7oKl35vQICMSm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:b0:93:05:eb:02:00:57:f3:79:f8:fc:a4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626aa89132d2a684d8d2a1a3f7e40f2234636f38
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=09506461d65a3c89d6ee2cdfe4795623d375f73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:5b:62:18:8f:52:ae:de:22:cd:a5:1b:e6:
                    e5:24:12:c5:36:fd:f4:5a:95:ab:b8:0d:7c:0a:a5:
                    2a:79:d3:a3:0f:90:9f:7b:60:81:e9:f1:c8:79:28:
                    3c:98:7f:f2:64:78:95:17:15:82:dc:7d:e4:71:04:
                    62:e2:40:84:24:eb:2f:23:1f:d0:f6:84:d7:00:99:
                    2c:30:c4:dd:56:75:23:06:3c:a7:93:10:7f:90:bd:
                    c9:2b:96:d2:ea:d5:af:48:a8:7f:fe:08:3c:1d:ab:
                    19:14:d5:c2:34:99:b5:4d:ca:38:e4:c6:f4:21:95:
                    a3:b2:73:70:7f:65:33:15:29:64:7b:b0:84:b3:54:
                    ee:54:94:45:ac:3c:de:e0:a3:2a:06:5e:1c:24:c4:
                    a6:a8:2a:68:d3:c5:88:b2:82:ca:ea:9a:e4:ef:55:
                    be:94:60:8b:13:54:2b:36:7c:7f:9a:9c:07:86:de:
                    ec:e5:7c:3b:d8:e3:24:f2:68:6e:bc:89:2a:67:67:
                    de:0a:90:b9:29:8a:10:b9:a3:d2:25:d0:be:0e:65:
                    e4:b1:21:a9:f7:b3:1c:e5:13:21:d9:51:2d:dd:07:
                    85:0d:11:56:fa:c9:52:9d:d7:a2:d4:db:0d:f0:ed:
                    71:6b:83:2b:ea:6f:de:a6:e3:f9:4a:61:90:04:e6:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:50:64:61:D6:5A:3C:89:D6:EE:2C:DF:E4:79:56:23:D3:75:F7:3D
            X509v3 Authority Key Identifier:
                keyid:62:6A:A8:91:32:D2:A6:84:D8:D2:A1:A3:F7:E4:0F:22:34:63:6F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YmqokTLSpoTY0qGj9-QPIjRjbzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4cc0a8-ec44-49dd-a3e2-2926fc5f61b7/1/YmqokTLSpoTY0qGj9-QPIjRjbzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5a:a1:75:b2:86:bc:c6:b2:1f:45:af:96:88:28:71:4c:66:
         3f:f8:1d:5d:43:81:ac:d6:79:8c:b6:58:a6:f6:7f:8f:fb:c7:
         87:38:56:a7:41:b5:7e:05:c2:fb:2b:d3:ba:94:fe:91:55:bc:
         37:4d:ab:9f:90:b3:25:be:c6:e4:ce:01:3d:54:1e:af:6b:59:
         e9:4a:15:f7:99:a3:a6:5f:06:21:af:53:c6:12:e9:60:a1:ba:
         be:2b:76:17:3f:e4:13:00:59:9a:b9:3c:32:fb:7d:39:2d:d5:
         be:df:22:5c:49:5d:b3:59:25:a4:b9:79:49:42:76:08:4a:18:
         21:8e:bc:46:f1:33:64:7c:16:c7:5b:99:01:86:9c:82:df:8c:
         a4:c5:ff:2e:17:10:94:9c:f3:56:5e:f6:11:d8:7b:c2:77:05:
         b6:e9:c5:f2:00:f9:60:77:07:a2:43:58:3d:69:15:b0:2d:e2:
         e4:70:e7:27:63:d7:26:57:78:65:f4:4c:85:6c:76:bc:b9:e3:
         92:15:1e:24:3e:f3:05:4c:3c:94:c8:fb:29:2c:93:de:8c:6f:
         91:97:f5:39:87:5f:83:3a:1f:f3:8e:49:76:40:b8:b3:0a:b5:
         ea:40:62:88:c2:2a:ea:22:62:4a:52:0a:04:92:6c:ce:55:0d:
         f3:66:79:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtGwkwXrAgBX83n4/KTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmFhODkxMzJkMmE2ODRkOGQyYTFhM2Y3ZTQwZjIyMzQ2
MzZmMzgwHhcNMjUwNDEzMTIwMTM4WhcNMjUwNDE0MTIwMTM4WjAzMTEwLwYDVQQD
EygwOTUwNjQ2MWQ2NWEzYzg5ZDZlZTJjZGZlNDc5NTYyM2QzNzVmNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42ZbYhiPUq7eIs2lG+blJBLFNv30
WpWruA18CqUqedOjD5Cfe2CB6fHIeSg8mH/yZHiVFxWC3H3kcQRi4kCEJOsvIx/Q
9oTXAJksMMTdVnUjBjynkxB/kL3JK5bS6tWvSKh//gg8HasZFNXCNJm1Tco45Mb0
IZWjsnNwf2UzFSlke7CEs1TuVJRFrDze4KMqBl4cJMSmqCpo08WIsoLK6prk71W+
lGCLE1QrNnx/mpwHht7s5Xw72OMk8mhuvIkqZ2feCpC5KYoQuaPSJdC+DmXksSGp
97Mc5RMh2VEt3QeFDRFW+slSndei1NsN8O1xa4Mr6m/epuP5SmGQBOYGcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlQZGHWWjyJ1u4s3+R5ViPTdfc9MB8GA1UdIwQY
MBaAFGJqqJEy0qaE2NKho/fkDyI0Y284MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTIt
MjkyNmZjNWY2MWI3LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80Y2MwYTgtZWM0NC00OWRkLWEzZTItMjkyNmZjNWY2MWI3
LzEvWW1xb2tUTFNwb1RZMHFHajktUVBJalJqYnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVqhdbKG
vMayH0WvlogocUxmP/gdXUOBrNZ5jLZYpvZ/j/vHhzhWp0G1fgXC+yvTupT+kVW8
N02rn5CzJb7G5M4BPVQer2tZ6UoV95mjpl8GIa9TxhLpYKG6vit2Fz/kEwBZmrk8
Mvt9OS3Vvt8iXElds1klpLl5SUJ2CEoYIY68RvEzZHwWx1uZAYacgt+MpMX/LhcQ
lJzzVl72Edh7wncFtunF8gD5YHcHokNYPWkVsC3i5HDnJ2PXJld4ZfRMhWx2vLnj
khUeJD7zBUw8lMj7KSyT3oxvkZf1OYdfgzof845JdkC4swq16kBiiMIq6iJiSlIK
BJJszlUN82Z5OA==
-----END CERTIFICATE-----