Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File:                     Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier:          NdCEDYBzgz+ceLOmrpdOxJB2cZhajcbNdLmPswCzoFg=
Subject key identifier:   6C:FB:1C:C5:9B:A9:EE:D1:05:DB:8C:A3:96:0D:E6:8B:E0:1C:14:5F
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer:       /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial:       01962E61887834AB620A5264770155575F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number:          0F05
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: YFIa0scc_xVUT5FKi7LKvASoEWc.roa (hash: V1CwEQLm9iXZGzptcaHc4LFmcOryBT2Kfmx1HSv4RTc=)
                          2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: RbPktYRqcmZPMnuulnQ+xN5Y+xgeInYFnSu9qtxSVSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:78:34:ab:62:0a:52:64:77:01:55:57:5f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=6cfb1cc59ba9eed105db8ca3960de68be01c145f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:8f:52:d2:fe:c7:d4:d0:cd:d0:28:cb:81:
                    3d:3b:56:b4:a0:6b:84:14:2a:e3:1e:a0:e5:1c:f2:
                    1d:dd:a2:e5:6e:25:1d:62:cf:9b:54:aa:5a:69:06:
                    8b:db:00:9f:4d:ac:a4:bc:d3:05:0d:78:86:2a:1e:
                    01:92:69:bd:68:78:08:c3:93:a2:76:fb:83:3e:7d:
                    d0:dc:e1:fc:08:a8:30:85:3b:d8:da:1d:b1:d1:e4:
                    ac:f0:68:0d:d1:eb:b4:60:65:0f:f7:d7:8b:69:d0:
                    0a:9a:f6:28:0a:2b:e6:86:94:7f:ea:4d:81:1e:d5:
                    47:02:cc:6c:94:cd:0e:1c:e1:1e:e2:0c:74:bb:0e:
                    45:8f:44:7a:d9:f2:e8:ea:52:7b:b0:12:f2:75:de:
                    72:36:72:01:a6:8e:bb:27:0e:d9:71:f2:fa:f6:c7:
                    79:42:4d:9d:aa:66:72:c4:79:df:e8:6e:8d:52:32:
                    5d:8a:00:8b:de:9b:c3:f6:34:5e:f0:7f:72:eb:50:
                    b0:6a:f7:fe:04:ff:bf:39:c8:5a:b2:5e:14:ac:59:
                    e6:5e:53:91:69:4d:86:90:7d:37:3e:b2:f1:1f:f4:
                    19:3a:14:16:e0:50:0f:ce:ab:6d:41:0b:88:7e:cb:
                    88:1c:06:00:c0:55:0f:e2:e6:be:14:6e:be:2d:75:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:1C:C5:9B:A9:EE:D1:05:DB:8C:A3:96:0D:E6:8B:E0:1C:14:5F
            X509v3 Authority Key Identifier:
                keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:f3:a2:e0:d1:4e:dc:d3:47:79:92:02:09:a4:c6:72:9d:
         15:02:96:c5:09:c0:45:36:98:65:03:62:76:82:e6:60:91:bd:
         b8:12:d1:75:9b:b7:85:68:12:c1:64:e6:f7:1d:e6:d6:33:ea:
         94:4f:93:55:f2:46:6f:37:24:c6:88:08:7a:aa:8c:97:73:aa:
         6e:dd:41:cc:bc:aa:cf:11:eb:b6:5f:77:df:1a:e4:5c:df:27:
         b0:87:48:f8:ab:20:e3:3a:51:68:3f:dd:f9:7a:cf:71:12:62:
         cd:6c:15:b5:4f:2f:46:4b:3a:70:86:30:b3:8e:eb:6e:63:e2:
         f5:4c:a0:7a:2b:bd:4b:f6:16:5b:8f:47:c7:e8:c9:46:e0:cc:
         99:d3:45:0c:8d:7c:c8:af:e5:f3:15:a1:4a:70:d4:83:2d:6c:
         c2:c6:0a:01:de:f0:d4:36:ee:24:9e:09:1d:d6:ce:61:2c:4a:
         e6:86:db:7c:16:8a:f3:a4:57:97:e8:68:99:c4:47:9e:f8:ee:
         15:50:f0:71:13:bb:e2:d9:c4:35:98:3a:8b:32:af:ca:18:b6:
         a0:29:8b:88:6b:c2:f5:49:2f:2c:aa:9b:8e:18:7d:66:d7:3b:
         8d:35:6c:44:45:40:98:76:62:f5:8f:c3:f7:86:61:c2:35:f7:
         77:d6:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----