Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
File:                     YDgxphvIqPTLhYhwIvtvhjlzRdw.mft (raw, json)
Hash identifier:          SuGhEInOD9MgXDykUENQaXWkArbG1Z7gPVkzNpFogo4=
Subject key identifier:   2D:A7:5B:BD:1E:C3:90:C9:0F:53:14:56:DB:8C:32:DC:41:38:8B:62
Authority key identifier: 60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC
Certificate issuer:       /CN=603831a61bc8a8f4cb85887022fb6f86397345dc
Certificate serial:       01962ECF53BDA2ADF38E1DD996B341C7F732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft
Manifest number:          0BFB
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: YDgxphvIqPTLhYhwIvtvhjlzRdw.crl (hash: Uzt0lJ2mgj02NliHGv9c5mFV6dlAUP4QxYn4/EBJ/0I=)
                          2: _mYolmt2fF0wabxHp1kAcOpFjJQ.roa (hash: Ni2pHhwSkaVczL8tsRRH+ZM9PBph4eSrgcYZ18OoRUY=)
                          3: ucZk7RPUTaIeSxLkQGWFeSNWVec.roa (hash: 5rWJbfTjArOhmwmwJF8k3Fgre3TIPFtEAx1ngBb1v5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:53:bd:a2:ad:f3:8e:1d:d9:96:b3:41:c7:f7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=603831a61bc8a8f4cb85887022fb6f86397345dc
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=2da75bbd1ec390c90f531456db8c32dc41388b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:d4:6b:c8:44:5d:38:12:b9:76:55:a6:d9:
                    9b:0b:7d:0b:f7:96:61:46:a2:64:83:27:fb:81:fb:
                    cc:bb:c2:3a:db:fb:66:76:4f:9f:6e:5d:45:a4:35:
                    90:6a:89:0a:b7:15:1a:c4:a2:98:27:62:8c:d4:37:
                    4a:30:25:fd:e9:69:e7:3a:fa:66:2e:7f:76:99:3d:
                    f5:36:32:b9:be:d4:75:01:73:06:55:fe:c3:e7:f1:
                    8c:93:21:18:0f:41:8a:69:d3:49:b8:99:a6:ce:c4:
                    78:8f:35:f2:da:0b:4f:06:e8:43:fc:42:76:a7:05:
                    46:c4:2b:15:15:5d:96:99:b7:2b:63:85:49:96:e4:
                    b2:1c:89:46:3f:a6:ff:96:19:df:e2:7f:5e:f8:84:
                    f8:10:a9:2e:f4:ff:74:58:32:d4:a1:44:8f:f4:33:
                    d8:2f:ef:0c:07:82:08:2d:22:99:ef:c7:13:28:4b:
                    85:28:64:ad:bb:28:41:7d:c7:6e:69:a1:d5:be:b2:
                    45:a7:68:db:0b:72:4a:39:23:df:7f:6e:d3:08:08:
                    02:4c:81:58:70:4a:be:c5:c5:fb:ab:76:20:ba:3e:
                    74:0f:3b:27:33:1c:76:41:22:dd:d0:f4:5f:4a:18:
                    2b:e7:22:44:bd:ca:5a:a9:b5:79:c4:a1:c3:aa:73:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:5B:BD:1E:C3:90:C9:0F:53:14:56:DB:8C:32:DC:41:38:8B:62
            X509v3 Authority Key Identifier:
                keyid:60:38:31:A6:1B:C8:A8:F4:CB:85:88:70:22:FB:6F:86:39:73:45:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YDgxphvIqPTLhYhwIvtvhjlzRdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac3276-50ad-4ebc-a2a6-9808545933c9/1/YDgxphvIqPTLhYhwIvtvhjlzRdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e0:af:68:9f:76:c9:73:ea:bf:cc:47:01:5f:ec:5c:ab:09:
         65:2d:c7:63:b9:ce:fe:73:a2:9c:67:38:2f:7d:62:83:60:90:
         9f:1f:18:de:6f:14:a4:43:c9:2f:56:e6:ec:5f:f8:18:4b:23:
         3b:33:c8:b9:00:e9:d2:3e:71:42:04:a5:78:a9:04:2b:7d:36:
         1d:a3:a9:33:6b:33:44:0c:d5:65:3c:dc:8b:bf:89:9c:4a:de:
         a1:41:64:8b:05:b8:bc:47:10:3e:9a:00:e4:57:25:bf:32:9b:
         b9:8f:2f:95:50:b3:35:b4:8d:71:ce:27:90:3b:74:a4:4e:26:
         6e:61:0f:e2:80:e7:1e:f5:03:47:71:a6:b2:a3:37:86:d3:78:
         93:51:3e:0c:df:eb:3d:ae:07:9c:1e:fe:3a:04:96:35:a1:50:
         5c:2a:c8:b5:61:eb:52:0a:81:d1:e1:af:ea:9d:07:67:f6:8f:
         67:30:2f:55:eb:e2:17:35:b2:cb:67:6d:33:b7:bc:d9:36:93:
         7c:5d:1b:47:e2:3c:21:c9:78:5a:6e:c3:6b:a9:b8:cf:32:b5:
         2c:ba:12:3e:57:ad:b0:39:c5:ba:73:18:13:bd:03:3a:d7:ad:
         b2:75:0e:04:e5:be:99:c0:50:5c:a3:de:6f:2a:d5:26:6a:f7:
         3c:7f:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----