Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File:                     1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier:          7qQ9h+4gqYmftJT1h97JICbkb3tpYCWn64BVXggz2Pg=
Subject key identifier:   FA:81:5C:63:4E:CC:B3:E3:67:6B:01:16:47:D0:2E:AC:A0:CD:45:1E
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer:       /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial:       01962E2B10E489083567D51F18A8900225E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: BCNO3iStMWev1HemXoZJt7DckoXwiht1tI9sw7aBB3Y=)
                          2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:10:e4:89:08:35:67:d5:1f:18:a8:90:02:25:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=fa815c634eccb3e3676b011647d02eaca0cd451e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:62:ab:26:5b:b3:61:33:10:d6:84:3b:3d:
                    3b:c5:a2:ac:85:ae:77:a0:f1:81:27:4c:11:9a:bd:
                    02:ce:a3:8b:49:b0:ec:78:15:44:5f:35:f0:fa:1b:
                    af:87:67:72:2d:90:02:4e:d6:42:6a:53:e6:97:a8:
                    60:dd:45:05:4e:c8:2a:18:67:7d:94:1e:df:96:fb:
                    9c:88:dd:62:c0:00:44:f9:2f:a2:8f:05:fa:ec:52:
                    03:4d:23:39:b7:1f:6c:d1:70:1d:f0:3b:dd:fa:97:
                    e9:25:80:01:28:4b:1e:d9:41:79:ce:1c:a2:31:b3:
                    40:a0:f8:d7:19:e1:7f:f1:07:85:60:67:f1:a9:77:
                    55:25:eb:d5:c6:ac:93:69:3c:b6:1b:cd:35:45:4c:
                    72:fd:8b:31:db:8a:8c:19:6b:9f:1a:17:5f:ea:5d:
                    13:74:29:4b:df:21:ff:d1:d3:df:ad:8e:9c:59:4b:
                    06:53:e0:43:1a:fa:3b:12:cf:57:95:8c:d3:5b:a5:
                    c2:9a:04:22:06:0c:b6:9f:24:a9:28:a8:39:a1:7e:
                    d8:71:34:ea:60:67:4b:76:a6:c0:7f:43:2c:4b:07:
                    ef:a2:6d:8b:1e:88:a6:a9:91:cc:07:f1:fe:7c:e7:
                    68:d2:71:e6:cd:6e:80:46:39:e3:af:ae:62:f0:e2:
                    f7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:81:5C:63:4E:CC:B3:E3:67:6B:01:16:47:D0:2E:AC:A0:CD:45:1E
            X509v3 Authority Key Identifier:
                keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:e6:66:55:92:65:8b:b9:7e:d3:55:7f:7b:15:41:ec:77:
         c5:a6:d0:4e:14:d8:68:61:ba:0e:88:7e:6e:af:d0:0c:90:d9:
         92:2a:40:21:ae:2a:4c:5c:90:98:b8:2e:4f:76:09:33:0a:a7:
         67:46:41:b1:04:ee:c4:4b:1a:7a:f8:bd:ef:9d:3e:c9:a4:c4:
         7f:d2:7b:11:38:0b:ec:3c:11:0e:b3:59:e9:df:cd:4e:88:b3:
         ed:c9:ec:b8:5f:5b:f1:3a:35:22:60:5c:c5:33:b4:28:79:07:
         36:a6:f1:b3:f2:f7:1e:0e:0b:20:bb:a4:55:8e:99:d0:9d:34:
         55:2c:c8:7c:85:a8:44:24:e2:9c:52:a1:c8:87:a4:ed:c7:8b:
         9c:2c:c3:3a:04:16:f5:34:bd:40:47:fe:ce:c3:3d:f6:ab:e2:
         00:75:70:68:33:b2:b1:03:30:a4:34:5b:ec:3d:7e:37:a0:f3:
         5a:14:97:46:be:69:7d:6d:41:a4:71:92:b7:84:0f:86:14:bc:
         0e:f7:e2:c2:79:11:97:7f:ab:3d:5a:66:9e:50:1a:6f:d1:5f:
         d5:21:65:15:51:13:3a:94:74:d5:6c:0d:40:79:9a:84:3f:db:
         1f:90:29:fc:1b:f2:34:a4:6e:c7:00:4a:43:0d:28:de:5c:5a:
         4b:9c:c5:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxDkiQg1Z9UfGKiQAiXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODhkYjE3NjY2ZmE5NTE1YWYzMWRiYTA5NWQwZjI1MGY4
NGJkZjcwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
EyhmYTgxNWM2MzRlY2NiM2UzNjc2YjAxMTY0N2QwMmVhY2EwY2Q0NTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJiqyZbs2EzENaEOz07xaKsha53
oPGBJ0wRmr0CzqOLSbDseBVEXzXw+huvh2dyLZACTtZCalPml6hg3UUFTsgqGGd9
lB7flvuciN1iwABE+S+ijwX67FIDTSM5tx9s0XAd8Dvd+pfpJYABKEse2UF5zhyi
MbNAoPjXGeF/8QeFYGfxqXdVJevVxqyTaTy2G801RUxy/Ysx24qMGWufGhdf6l0T
dClL3yH/0dPfrY6cWUsGU+BDGvo7Es9XlYzTW6XCmgQiBgy2nySpKKg5oX7YcTTq
YGdLdqbAf0MsSwfvom2LHoimqZHMB/H+fOdo0nHmzW6ARjnjr65i8OL3fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqBXGNOzLPjZ2sBFkfQLqygzUUeMB8GA1UdIwQY
MBaAFNWI2xdmb6lRWvMdugldDyUPhL33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODIt
MzE4OGU5ZDFmNWEwLzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zZDdlMjAtOTAyMi00OTJhLWI4ODItMzE4OGU5ZDFmNWEw
LzEvMVlqYkYyWnZxVkZhOHgyNkNWMFBKUS1FdmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEzmZlWS
ZYu5ftNVf3sVQex3xabQThTYaGG6Doh+bq/QDJDZkipAIa4qTFyQmLguT3YJMwqn
Z0ZBsQTuxEsaevi9750+yaTEf9J7ETgL7DwRDrNZ6d/NToiz7cnsuF9b8To1ImBc
xTO0KHkHNqbxs/L3Hg4LILukVY6Z0J00VSzIfIWoRCTinFKhyIek7ceLnCzDOgQW
9TS9QEf+zsM99qviAHVwaDOysQMwpDRb7D1+N6DzWhSXRr5pfW1BpHGSt4QPhhS8
DvfiwnkRl3+rPVpmnlAab9Ff1SFlFVETOpR01WwNQHmahD/bH5Ap/BvyNKRuxwBK
Qw0o3lxaS5zFGw==
-----END CERTIFICATE-----