Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
File:                     YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft (raw, json)
Hash identifier:          QUdUnBgR2WsLHYZpEFzB7y1Kll/ZJRGL0LHyFNnFqxo=
Subject key identifier:   29:FF:EE:FA:3B:9E:5C:5C:76:19:48:C0:7F:35:34:35:6A:5F:E0:93
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Certificate issuer:       /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial:       01962FAB8B83DFF04089FC071883FF1F48BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft
Manifest number:          10AD
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl (hash: ZoJ/rdp9G+gVCTICpbIyTcsTVVSgIxNfWsA6/cAlfP4=)
                          2: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (hash: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:83:df:f0:40:89:fc:07:18:83:ff:1f:48:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=29ffeefa3b9e5c5c761948c07f3534356a5fe093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:a0:2f:14:fd:e8:4b:2b:43:bf:11:92:79:
                    15:1d:94:c8:37:fb:db:9d:9a:f2:87:6e:e0:40:a1:
                    0f:45:bc:51:dc:d5:16:6a:c6:96:c2:0f:e2:01:0e:
                    1a:e1:0b:2f:96:c9:0c:33:84:61:bc:06:81:ef:9a:
                    55:5d:9e:98:91:c0:5e:45:06:31:0a:0c:d0:6d:4c:
                    4f:75:23:d3:a6:49:8c:7b:91:99:48:90:d3:87:55:
                    da:c2:5b:6a:0d:6d:90:73:0f:52:fa:be:59:46:b9:
                    0d:42:19:07:6f:d1:cc:94:dc:ac:7f:9b:43:63:18:
                    67:50:b8:9c:72:7b:5e:e3:35:f0:2f:64:74:84:08:
                    e6:f9:8a:11:08:cb:f7:ab:76:2e:27:ce:73:46:6a:
                    f5:9a:5b:cb:28:b7:5a:8c:a1:9b:15:18:a5:2d:83:
                    48:96:30:9e:ee:bc:f3:84:14:eb:21:f3:ff:cf:25:
                    c5:2a:83:d1:aa:cf:b2:01:0f:7d:35:01:ce:b9:2c:
                    a5:1c:97:b8:cd:9a:b7:1d:85:e6:70:5e:17:4d:f5:
                    a7:21:92:e9:93:dc:0e:33:d5:8f:26:b8:eb:d1:57:
                    8d:0c:d4:83:b0:fa:92:22:e7:d3:df:93:8f:69:e7:
                    1c:e9:c1:ea:bd:fe:72:d0:ec:91:35:89:a9:1e:9d:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FF:EE:FA:3B:9E:5C:5C:76:19:48:C0:7F:35:34:35:6A:5F:E0:93
            X509v3 Authority Key Identifier:
                keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1d:ba:8a:a7:80:ee:7d:09:15:76:97:55:fb:08:c4:27:f7:
         59:ae:b9:c2:d8:a0:a4:de:d9:3a:54:4f:f3:4c:f6:cc:a9:35:
         ce:d0:15:3b:2e:11:da:6f:e0:02:40:85:00:14:d2:56:34:6e:
         f0:e7:ab:8a:e1:1f:2a:56:8a:eb:71:bc:4b:58:c4:20:49:41:
         cb:64:72:0b:cc:b5:2b:fe:40:62:81:5c:c5:a3:ee:d5:8d:0e:
         d2:18:63:ee:27:73:80:71:cc:3d:74:cf:f0:cb:f7:10:55:d4:
         ef:f7:cc:8c:c0:23:a9:54:ed:83:5a:d9:cd:a9:48:d5:f0:1b:
         ce:fc:66:2d:1c:04:d3:cb:e8:6f:b6:a6:86:5d:a3:8a:5f:eb:
         16:60:d9:c2:81:ad:ea:bd:60:86:62:75:a4:67:84:3c:88:e4:
         68:3d:9d:0b:8d:22:57:93:bb:e5:4b:41:88:dd:5a:3e:e3:56:
         83:bb:08:06:19:89:71:0b:c8:31:ba:a4:e1:cd:76:39:b4:00:
         c5:c5:8a:72:c3:3e:9f:63:1d:4d:4a:57:53:d0:6d:d3:f1:ea:
         7d:84:af:fe:cf:c9:9e:52:20:23:d8:46:7a:59:a8:ce:0c:1c:
         50:0e:21:30:7c:ea:a8:10:76:4f:ce:48:8a:b1:53:71:59:e4:
         d4:ee:70:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----