Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File:                     YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier:          l+4/e3UKG6s0jKkpp9qyk0qefG6nE3ycflXjjFuLNB4=
Subject key identifier:   C6:A1:46:75:44:4D:2D:C0:02:CC:C7:08:C1:B9:41:57:54:5F:58:76
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer:       /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial:       01962F074449E149B349BCBA21EEE9B5398D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: EwMUoWYW4dc0tRkkx15ciptmQak.roa (hash: IxyoruIJ2PWmvP6nW1K1qsmgYgo96Vwp6Gm5YCkQlWE=)
                          2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: SbBBa/YRAS+I6ZPo7V2okbYqf3xhLrlEABflOtsrq7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:49:e1:49:b3:49:bc:ba:21:ee:e9:b5:39:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=c6a14675444d2dc002ccc708c1b94157545f5876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:8c:00:7e:01:cb:16:37:d1:39:94:72:0f:
                    ed:2d:73:4d:34:83:ba:1d:b2:c2:dc:c5:31:89:89:
                    a8:39:68:20:76:41:03:37:59:c4:92:b1:b1:c1:be:
                    9e:60:80:3b:94:90:2a:03:e1:13:6b:7c:ac:af:77:
                    99:ad:6c:7c:51:fa:20:5c:ef:a9:31:52:e8:bf:d0:
                    dc:77:fb:1e:16:6a:1c:84:53:ef:63:29:0b:0b:12:
                    8f:51:4d:2c:dc:4b:24:84:96:28:f2:4a:28:27:ac:
                    3c:85:91:48:86:5e:b4:2e:ef:e2:1a:00:07:cf:f7:
                    8b:19:b1:c3:57:de:d4:d4:9d:de:97:7c:30:da:2f:
                    92:ba:c1:ff:2e:b9:2e:fc:67:64:99:90:30:d8:d9:
                    f4:b0:f0:13:73:71:73:81:be:c4:d7:3e:4f:f1:fc:
                    5d:b9:20:88:cc:9e:fa:b3:1b:39:ad:be:81:31:5e:
                    28:0d:0b:34:a4:34:0c:a9:e6:26:7e:6d:8e:eb:41:
                    0e:d6:1d:ff:da:01:3c:97:a8:51:50:20:36:4c:59:
                    76:49:7b:e9:c1:eb:56:3e:21:46:88:b6:3e:27:56:
                    e0:c0:5e:2c:7c:9f:b3:bd:69:25:e2:11:3b:66:21:
                    1b:e5:ac:f8:07:6a:5c:de:b3:00:e7:2a:71:7a:41:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A1:46:75:44:4D:2D:C0:02:CC:C7:08:C1:B9:41:57:54:5F:58:76
            X509v3 Authority Key Identifier:
                keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:1e:37:42:04:c2:e8:30:0d:1b:8d:c6:4e:9c:3b:fc:e5:2e:
         68:33:99:ee:92:15:06:9c:b7:ef:d4:ab:5f:4f:03:85:c9:aa:
         3a:d2:12:b0:a4:16:3e:a9:cb:dd:53:1b:64:13:b3:91:55:31:
         d6:58:b8:41:21:6a:7b:70:c2:08:c9:35:79:fa:6c:07:76:cf:
         1e:f2:17:9f:46:3f:53:cb:07:87:e6:c5:97:4a:e4:07:1a:1d:
         16:fa:a4:a9:ee:f2:f6:20:c3:52:28:f1:0a:84:8a:5b:cc:93:
         8f:73:3f:62:eb:d3:09:bc:e1:25:5c:8a:3b:ea:85:1f:a2:26:
         87:12:f9:a8:3a:35:25:21:6b:0c:ba:81:ce:cf:01:62:22:e2:
         bc:8c:71:d9:cf:1d:8c:c1:d7:2e:1e:6f:b2:04:49:e5:a6:24:
         b8:34:b8:af:ff:9a:be:58:52:3b:55:d5:a7:a1:f2:40:f1:c0:
         51:ab:4b:c8:a2:8e:fd:ef:c2:f2:8b:05:c8:64:6e:0c:3b:e4:
         a7:2f:c1:e1:f7:b5:16:d4:bd:4c:ef:7a:4c:04:cc:01:bd:f8:
         75:3d:80:61:3d:53:12:01:99:18:47:d6:98:3b:2d:6d:f1:61:
         50:37:fc:b1:21:5f:cc:3f:a7:85:86:d5:3a:64:7e:57:7b:f8:
         0a:cf:75:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----