Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
File:                     YC8n-tkkUqJUswoGDtODsTx1jtY.mft (raw, json)
Hash identifier:          Hly0G0+dMF8BUFiZ4F7GoRyHOqkL8bht8YQy9kK+eqA=
Subject key identifier:   58:84:52:E8:57:D6:F4:65:58:D1:9C:56:FF:1F:3F:78:59:59:DF:2A
Authority key identifier: 60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6
Certificate issuer:       /CN=602f27fad92452a254b30a060ed383b13c758ed6
Certificate serial:       01962F74DEF321FF48835985C2BEF082CC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft
Manifest number:          074F
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: TRV1zvMwN77u4mbYXqSf5mMtgyk.roa (hash: AGCpSC7dzCZj1/xhxXIQK1OjIYEOjpJ4XzT4WLt1kl0=)
                          2: YC8n-tkkUqJUswoGDtODsTx1jtY.crl (hash: HpQZ0Ef4UEsGE9sVeospXccey+6tptXAX0ho4SACTE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:de:f3:21:ff:48:83:59:85:c2:be:f0:82:cc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=602f27fad92452a254b30a060ed383b13c758ed6
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=588452e857d6f46558d19c56ff1f3f785959df2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:8b:1d:ed:1b:bc:12:1f:05:51:39:55:43:
                    9e:ab:00:45:2d:71:65:21:d8:8a:07:74:1e:85:ea:
                    02:7f:78:ae:7e:32:5d:a0:a4:3f:17:96:94:f3:ed:
                    b5:e9:8b:39:ad:69:17:7c:9d:d5:46:db:8e:9f:a4:
                    a6:a2:eb:6b:57:42:51:b5:a5:d2:c5:0a:99:20:8b:
                    5b:d4:c4:78:74:0a:90:d6:2d:89:37:6d:a6:15:24:
                    87:13:96:5e:87:d3:fd:8c:83:d1:2f:6a:d5:c4:e3:
                    81:fd:2e:02:7e:44:e9:bb:17:d8:01:26:66:20:54:
                    95:cd:48:76:c6:c8:3e:c3:1c:4c:62:ea:53:3f:77:
                    aa:b9:5f:22:e7:75:32:fb:8a:c0:42:04:b0:c8:cf:
                    c9:73:4a:b9:e0:70:68:38:26:64:1d:1b:00:f7:0c:
                    77:54:89:7c:2a:ff:ac:36:02:4f:5b:62:4b:e3:bf:
                    48:e8:f3:93:fa:eb:86:2e:5d:de:64:eb:db:44:56:
                    d6:46:81:c3:c5:90:de:12:a1:63:16:18:35:fe:4c:
                    69:a3:f4:e3:00:4a:4f:44:9f:d0:6a:0f:83:be:af:
                    4d:e9:4c:10:6a:be:6d:ec:0c:08:a2:e2:e4:00:0c:
                    49:5a:cd:59:c5:78:2c:f1:09:c7:c6:f1:cd:11:6f:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:84:52:E8:57:D6:F4:65:58:D1:9C:56:FF:1F:3F:78:59:59:DF:2A
            X509v3 Authority Key Identifier:
                keyid:60:2F:27:FA:D9:24:52:A2:54:B3:0A:06:0E:D3:83:B1:3C:75:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YC8n-tkkUqJUswoGDtODsTx1jtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2f67b9-490b-43ef-b088-4ab3973502fb/1/YC8n-tkkUqJUswoGDtODsTx1jtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3a:d2:42:3f:fb:29:dd:35:ca:22:93:2e:4a:bc:73:ca:41:
         3f:16:b1:92:fd:35:36:15:f4:7a:7d:1f:8b:4c:b3:33:64:ba:
         b8:ca:d4:76:63:20:f9:96:a6:db:15:70:8f:82:b7:f6:e3:dd:
         ec:e8:a6:da:a6:2f:52:72:76:c3:c3:8c:69:79:fb:8f:59:86:
         75:1a:ab:30:ea:b6:ab:51:dd:60:d6:b1:ce:d4:87:df:ce:f1:
         b9:c1:bc:b2:46:5f:e7:02:db:a2:21:fc:82:8c:95:b6:e7:c5:
         00:4c:06:31:2e:56:59:96:a5:26:8a:5c:13:8d:e3:90:64:d5:
         1f:06:32:30:d6:fd:70:ac:c7:46:4d:ff:80:68:97:26:64:eb:
         d7:08:35:32:0c:d1:53:94:4c:68:ad:86:33:32:a1:05:48:07:
         e1:b5:b5:c8:dd:b2:d6:58:69:61:5e:b1:1c:71:40:0b:e0:af:
         a1:46:3a:cb:eb:84:b9:7e:87:96:15:67:4c:d9:21:c3:c3:d5:
         7e:80:13:2d:94:88:91:d4:64:26:ff:82:ee:4c:72:c9:d7:42:
         b2:2b:af:ea:f4:3f:31:fc:30:82:cb:e0:0a:ad:f4:16:7d:87:
         71:db:50:20:3a:ad:5a:cb:6e:3f:31:8f:39:66:49:a3:fe:23:
         50:8a:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----