Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
File:                     YYhVY15HlPWHjjuYX-2JNa4GxaE.mft (raw, json)
Hash identifier:          OoMVAmqYohigrqxbZaPj8akzJg0dk9Ek0eWSfKTj39g=
Subject key identifier:   5D:42:87:57:76:D2:65:E1:14:53:52:0E:F0:89:8F:62:F1:B2:02:73
Authority key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Certificate issuer:       /CN=618855635e4794f5878e3b985fed8935ae06c5a1
Certificate serial:       01962F745146EB6C89D04E404C350EBA6A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: 4G6PC7r1jLJaKqLvKiHJfqhR1e4.roa (hash: qfv1dvU9Pa4JA9Wl519haLOz9gG/Vfn4EhOnWCbqEOg=)
                          2: YYhVY15HlPWHjjuYX-2JNa4GxaE.crl (hash: tUbgat6ScAv9L+YObCbZRSXHjh5JHf6RgtvdWEdB1Y0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:51:46:eb:6c:89:d0:4e:40:4c:35:0e:ba:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618855635e4794f5878e3b985fed8935ae06c5a1
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=5d42875776d265e11453520ef0898f62f1b20273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:e7:6d:4a:33:47:70:69:91:ee:6e:07:b4:
                    d4:45:52:40:ec:31:5b:ac:56:a0:24:33:17:3b:03:
                    2d:a6:2c:eb:54:12:96:4c:aa:e2:b0:cf:bd:2e:fc:
                    8e:4b:f0:50:ce:6d:e0:92:8b:b2:9b:b2:f6:63:85:
                    f4:5a:0e:47:b6:91:ad:74:ad:da:cf:cf:3d:1d:05:
                    ee:ca:bc:d1:22:bd:0b:c9:43:5d:ef:2e:33:31:7f:
                    64:d2:81:29:46:fc:6f:36:0c:b5:17:fe:ff:f1:8e:
                    84:5c:74:70:cf:6c:82:da:5a:1d:4f:bb:e1:a4:12:
                    4a:62:fd:9e:7f:c1:05:21:78:01:60:63:b0:17:d6:
                    98:16:50:e3:27:44:65:0e:a5:22:e0:0a:71:82:ed:
                    38:0f:6b:01:3d:9d:33:db:93:06:24:d1:e9:95:6e:
                    32:36:83:7f:bc:ba:b6:9d:9a:b7:0e:23:6e:f0:72:
                    04:ac:eb:54:6d:6e:57:9f:af:bf:d5:bc:6a:85:0e:
                    4f:16:cd:24:e3:3d:08:7a:79:26:b6:e2:51:93:56:
                    d5:b2:4c:7c:ed:b4:db:e0:c4:b0:03:23:8c:82:c4:
                    ba:d2:2f:9c:cc:03:82:8a:40:60:46:bb:ec:de:4b:
                    bd:b4:5e:f9:8f:f6:59:6b:3d:ea:09:fa:46:86:ba:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:87:57:76:D2:65:E1:14:53:52:0E:F0:89:8F:62:F1:B2:02:73
            X509v3 Authority Key Identifier:
                keyid:61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7f:ef:3e:aa:c2:45:9c:ec:f5:b6:8b:69:5e:26:be:14:a6:
         68:8c:53:7d:18:09:70:54:73:29:4a:22:3b:f3:6a:97:6f:09:
         07:7c:d7:8c:6a:32:f6:ad:cb:27:09:df:d2:1f:7e:2d:5b:44:
         8b:8d:81:1b:23:e8:30:70:c2:2c:9c:9b:83:0c:02:3f:89:cf:
         ba:75:65:29:96:81:17:27:4a:40:49:69:63:76:ef:04:45:fb:
         34:b6:e8:96:01:79:9c:f7:df:9f:03:be:44:d0:19:73:49:2a:
         82:8d:9b:61:21:f7:df:fe:e8:49:e2:9e:27:f1:d3:84:04:41:
         cf:1e:de:b7:4a:64:bf:22:d8:db:d5:14:0d:a8:c2:13:04:3e:
         48:9d:42:35:37:ef:28:ce:63:71:f9:1e:9e:18:d9:73:94:84:
         ad:1f:c3:4c:81:f0:b0:e6:c1:b6:86:f3:47:3f:36:4a:e8:a7:
         93:0a:4d:71:a4:e6:b9:fe:75:55:e4:e8:6d:26:d6:28:b9:b4:
         1c:75:92:80:33:f2:c1:bd:43:e2:5b:87:f8:0a:b4:3f:dc:50:
         1f:c2:45:ce:6e:d2:72:22:0b:0a:46:55:90:f7:a0:48:2b:1e:
         94:0e:5c:d6:3e:1a:79:f0:5b:a4:04:cc:5c:ea:24:ef:d7:fa:
         f3:ae:d4:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFFG62yJ0E5ATDUOumogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODg1NTYzNWU0Nzk0ZjU4NzhlM2I5ODVmZWQ4OTM1YWUw
NmM1YTEwHhcNMjUwNDEzMTQwMTEzWhcNMjUwNDE0MTQwMTEzWjAzMTEwLwYDVQQD
Eyg1ZDQyODc1Nzc2ZDI2NWUxMTQ1MzUyMGVmMDg5OGY2MmYxYjIwMjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwjnbUozR3Bpke5uB7TURVJA7DFb
rFagJDMXOwMtpizrVBKWTKrisM+9LvyOS/BQzm3gkouym7L2Y4X0Wg5HtpGtdK3a
z889HQXuyrzRIr0LyUNd7y4zMX9k0oEpRvxvNgy1F/7/8Y6EXHRwz2yC2lodT7vh
pBJKYv2ef8EFIXgBYGOwF9aYFlDjJ0RlDqUi4Apxgu04D2sBPZ0z25MGJNHplW4y
NoN/vLq2nZq3DiNu8HIErOtUbW5Xn6+/1bxqhQ5PFs0k4z0IenkmtuJRk1bVskx8
7bTb4MSwAyOMgsS60i+czAOCikBgRrvs3ku9tF75j/ZZaz3qCfpGhrpKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1Ch1d20mXhFFNSDvCJj2LxsgJzMB8GA1UdIwQY
MBaAFGGIVWNeR5T1h447mF/tiTWuBsWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQt
MGViNmJiZjY1YjFmLzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZjhiY2EtYzRhMC00MjlkLTlmNGQtMGViNmJiZjY1YjFm
LzEvWVloVlkxNUhsUFdIamp1WVgtMkpOYTRHeGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH/vPqrC
RZzs9baLaV4mvhSmaIxTfRgJcFRzKUoiO/Nql28JB3zXjGoy9q3LJwnf0h9+LVtE
i42BGyPoMHDCLJybgwwCP4nPunVlKZaBFydKQElpY3bvBEX7NLbolgF5nPffnwO+
RNAZc0kqgo2bYSH33/7oSeKeJ/HThARBzx7et0pkvyLY29UUDajCEwQ+SJ1CNTfv
KM5jcfkenhjZc5SErR/DTIHwsObBtobzRz82SuinkwpNcaTmuf51VeTobSbWKLm0
HHWSgDPywb1D4luH+Aq0P9xQH8JFzm7SciILCkZVkPegSCselA5c1j4aefBbpATM
XOok79f6867U/g==
-----END CERTIFICATE-----