Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File:                     __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier:          tQvH7mg6ZcXuKLRdLtHgvyUX2aTCwlGNQkFjFtCgBEA=
Subject key identifier:   32:A6:AB:D7:00:D1:FE:74:E7:98:3D:AE:DA:7E:B5:5C:41:C3:17:D6
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer:       /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial:       01962FAB65544DA18EA8260800EEE2F162CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: KE2VhXRMDp4E9ryvrK/S+ICvj6rVv5Tj8Y9qyyn5PM0=)
                          2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:65:54:4d:a1:8e:a8:26:08:00:ee:e2:f1:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=32a6abd700d1fe74e7983daeda7eb55c41c317d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:4a:fd:76:0d:4f:ed:a1:a1:29:68:03:16:
                    b8:a0:4f:f3:dd:8f:7e:01:b6:ca:50:a2:95:54:51:
                    43:52:73:55:18:90:07:27:4b:40:9f:49:65:da:39:
                    d1:a5:fd:56:0e:de:e9:02:1b:49:0c:ba:09:eb:57:
                    cb:93:93:27:c0:bf:2f:f3:10:39:e5:21:3a:57:d4:
                    27:fa:d9:1e:b8:84:94:8c:89:b4:a2:c2:39:79:1f:
                    bd:eb:1b:e2:68:73:99:63:77:55:af:9c:10:83:89:
                    8c:b0:53:f0:0d:13:1f:c2:f3:bf:dd:95:f4:9e:3e:
                    49:cb:e7:cd:b9:46:a6:81:5e:09:ad:5c:f0:c9:8d:
                    21:16:77:51:a3:17:6a:c3:6b:ef:41:69:fd:30:b4:
                    65:d3:ee:f9:94:c4:08:b0:c9:5f:cf:28:e1:76:d3:
                    75:72:6e:58:a2:d5:1a:c8:8a:80:da:d2:71:fc:58:
                    76:a8:a8:d2:59:5d:44:fe:3c:20:57:57:d1:32:f6:
                    57:1d:fd:44:c5:e5:16:98:d9:4b:ee:ee:a5:f2:c8:
                    d6:e5:fd:fa:ad:c1:e0:a7:c9:90:ab:eb:93:95:0f:
                    63:45:69:2e:46:50:7b:35:60:c6:6b:0c:85:50:f7:
                    86:1f:eb:b9:eb:79:a7:ca:48:f0:e6:08:73:b3:ed:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A6:AB:D7:00:D1:FE:74:E7:98:3D:AE:DA:7E:B5:5C:41:C3:17:D6
            X509v3 Authority Key Identifier:
                keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:4f:5c:16:29:65:a1:d2:b7:15:39:d9:06:06:65:ae:21:
         9d:d3:12:92:ba:a7:f9:e6:43:3e:70:c9:5f:80:af:e9:44:87:
         b1:3b:28:c7:ed:a6:c8:37:d8:46:a0:52:f9:d1:63:df:a6:8b:
         b4:5c:9a:48:19:5b:1e:60:0c:62:2d:e2:f2:f6:3d:b6:9f:11:
         dc:e8:a7:c9:49:d1:0d:a7:66:aa:d3:ed:63:be:c4:09:31:c6:
         4b:ae:01:df:0f:b5:7f:82:70:b8:2b:80:b7:39:82:e0:b6:96:
         f8:65:0d:33:d2:4d:67:0b:e7:48:16:d5:d9:aa:1f:7a:d4:d9:
         01:43:e5:78:a1:61:de:5c:13:a0:10:ca:0b:30:95:e4:71:d3:
         eb:3c:1a:47:48:49:15:86:9e:18:c6:fa:f7:3a:64:05:49:25:
         92:a9:b7:52:14:51:48:e8:ba:cf:69:0e:52:60:00:9a:29:48:
         c8:54:59:1f:36:d2:8d:d3:fe:1c:b5:a0:22:b5:01:bb:65:19:
         78:d6:ce:ba:f3:f1:af:a7:0f:84:c9:50:d1:cb:1d:82:8e:0a:
         94:56:eb:ce:23:21:7c:ce:18:8d:88:fb:e7:26:c6:10:66:62:
         d9:64:cf:a3:fe:34:71:57:74:80:90:b3:1b:84:40:f3:4a:7a:
         b2:41:da:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2VUTaGOqCYIAO7i8WLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZjYwNGRjNzg5MmJhOTlmNTM1Mjk2YjkxMDJkOGQ3YTE4
NDQzODgwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
EygzMmE2YWJkNzAwZDFmZTc0ZTc5ODNkYWVkYTdlYjU1YzQxYzMxN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA329K/XYNT+2hoSloAxa4oE/z3Y9+
AbbKUKKVVFFDUnNVGJAHJ0tAn0ll2jnRpf1WDt7pAhtJDLoJ61fLk5MnwL8v8xA5
5SE6V9Qn+tkeuISUjIm0osI5eR+96xviaHOZY3dVr5wQg4mMsFPwDRMfwvO/3ZX0
nj5Jy+fNuUamgV4JrVzwyY0hFndRoxdqw2vvQWn9MLRl0+75lMQIsMlfzyjhdtN1
cm5YotUayIqA2tJx/Fh2qKjSWV1E/jwgV1fRMvZXHf1ExeUWmNlL7u6l8sjW5f36
rcHgp8mQq+uTlQ9jRWkuRlB7NWDGawyFUPeGH+u563mnykjw5ghzs+3ElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKmq9cA0f5055g9rtp+tVxBwxfWMB8GA1UdIwQY
MBaAFP/2BNx4krqZ9TUpa5EC2NehhEOIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUt
MWMxOTk0OWI5NmI2LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iMzc4YTEtNWIxYi00Yzg5LThiYzUtMWMxOTk0OWI5NmI2
LzEvX19ZRTNIaVN1cG4xTlNscmtRTFkxNkdFUTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuZPXBYp
ZaHStxU52QYGZa4hndMSkrqn+eZDPnDJX4Cv6USHsTsox+2myDfYRqBS+dFj36aL
tFyaSBlbHmAMYi3i8vY9tp8R3OinyUnRDadmqtPtY77ECTHGS64B3w+1f4JwuCuA
tzmC4LaW+GUNM9JNZwvnSBbV2aofetTZAUPleKFh3lwToBDKCzCV5HHT6zwaR0hJ
FYaeGMb69zpkBUklkqm3UhRRSOi6z2kOUmAAmilIyFRZHzbSjdP+HLWgIrUBu2UZ
eNbOuvPxr6cPhMlQ0csdgo4KlFbrziMhfM4YjYj75ybGEGZi2WTPo/40cVd0gJCz
G4RA80p6skHaAA==
-----END CERTIFICATE-----