Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
File:                     YWpyYPOGVhtDWOpQwDxeND1tDDM.mft (raw, json)
Hash identifier:          4sjDV7QzTNvp+Bf8ZOOnEzk4SmVUssUnWEoXG2fnalk=
Subject key identifier:   BF:5B:44:30:96:9A:BA:44:63:9C:EA:1D:1B:FC:83:9D:13:3B:21:5F
Authority key identifier: 61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
Certificate issuer:       /CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Certificate serial:       019345CC0639B143C8AF4E7225A5103A5513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
Manifest number:          0852
Signing time:             Tue 19 Nov 2024 19:00:19 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:19 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:19 +0000
Files and hashes:         1: FUQLReyV1fYnKhUR2Py0suEpzo4.roa (hash: 9A/8Ki/ykGwmpOcu1/NNU+e0I6B+VL2oFMH48r7RSZA=)
                          2: YWpyYPOGVhtDWOpQwDxeND1tDDM.crl (hash: XelS0fZl2S+7MSTQ87dvu3dG6x3z2U7bF9z2eullcOY=)
                          3: bn-8w0IhBSiuS6xuFjpDgIuohzQ.roa (hash: +QhpotgMFXzmBJ570Cj1UTyTgz4LOzQrkl7OgjYZOQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cc:06:39:b1:43:c8:af:4e:72:25:a5:10:3a:55:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616a7260f386561b4358ea50c03c5e343d6d0c33
        Validity
            Not Before: Nov 19 19:00:19 2024 GMT
            Not After : Nov 20 19:00:19 2024 GMT
        Subject: CN=bf5b4430969aba44639cea1d1bfc839d133b215f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:44:06:f7:23:67:9a:6f:25:3d:88:58:47:8d:
                    31:8a:73:a9:3e:2e:cd:71:cd:95:78:6c:58:65:a5:
                    94:8b:4c:c4:8f:69:d7:16:bb:80:8e:6e:be:8f:c1:
                    24:da:08:bb:b8:4a:d9:75:35:06:fd:14:b9:f2:5e:
                    55:13:5e:57:62:c4:64:a1:fa:b4:a1:26:f8:55:9a:
                    d3:68:87:d2:83:1d:e6:e9:d8:12:39:ea:b3:73:c3:
                    61:1c:9d:49:62:65:ff:5f:ac:92:fb:ab:93:4b:12:
                    08:67:0e:ba:2a:ba:49:56:ee:2f:03:e7:da:50:2b:
                    64:f5:f5:e6:b7:90:60:fe:b9:2d:b2:74:f4:14:df:
                    19:58:4a:27:d6:64:d2:98:43:f9:f0:e4:a9:dd:d5:
                    7b:c6:21:e2:c7:b4:28:dd:9a:d7:de:19:92:f4:cc:
                    fa:ac:d2:d3:9b:a7:7e:a8:5b:7b:d9:14:17:4b:2f:
                    9d:0e:48:4e:72:90:29:c4:dc:b3:ae:cb:99:a3:28:
                    e0:fb:e9:9b:c0:4e:3f:47:04:0c:5e:ec:71:40:96:
                    06:80:3b:53:ce:06:eb:b0:dd:87:49:5e:47:50:f1:
                    22:b4:fc:e0:b3:1e:47:f6:72:25:99:cc:c4:57:f8:
                    07:df:55:3a:f3:9a:a3:d5:50:c7:98:c8:90:25:d7:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:44:30:96:9A:BA:44:63:9C:EA:1D:1B:FC:83:9D:13:3B:21:5F
            X509v3 Authority Key Identifier:
                keyid:61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:88:71:24:73:23:ca:2d:65:25:89:6a:74:a3:a8:3c:25:69:
         3d:93:84:fe:eb:6b:34:6f:45:be:39:dd:68:db:dd:48:7f:38:
         38:45:d1:c1:0e:c1:43:6e:3b:8a:26:1b:81:ae:1a:1e:d3:10:
         f9:d7:1c:c3:84:61:70:4a:ff:49:a6:44:65:40:22:46:18:22:
         87:b5:a4:1c:21:47:5b:87:99:d2:ee:3a:0d:da:46:2b:47:27:
         a0:63:34:52:3f:0b:f1:37:23:d5:a5:0b:ba:7f:6f:94:ce:6a:
         41:ea:2b:31:c8:59:0c:a0:9f:46:d4:a8:58:5f:55:94:aa:82:
         93:fe:0e:9e:b5:7e:fe:41:01:65:c3:f1:c1:94:9a:c1:1b:43:
         2d:a5:c7:e7:d4:8b:b8:64:74:1a:d6:0f:42:cc:d6:17:a6:01:
         a5:36:2a:f3:4b:ff:03:a1:2f:c0:a7:dc:5e:a0:b1:e8:de:56:
         16:b7:f5:03:a8:d8:33:fc:7d:92:18:7b:47:6e:52:a3:33:a4:
         5d:9c:c8:ae:61:f5:15:bd:db:4b:a7:92:06:d4:58:3e:61:34:
         80:90:57:02:59:aa:e7:de:8e:6d:e8:96:39:a2:70:be:9d:9a:
         af:f0:da:de:98:77:32:6b:d2:f9:e1:23:03:91:30:b9:36:d0:
         59:3c:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----