Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
File:                     Y_3AmtVKOXxgTpShyWbiwpYFnME.mft (raw, json)
Hash identifier:          pqZcvLnt7fu/S7cJvHlB6On0Z0wnX9N9h7oyW7D4VkA=
Subject key identifier:   3D:33:13:07:57:D0:68:F8:81:63:70:C5:95:AD:12:1E:BE:D7:E9:8F
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Certificate issuer:       /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial:       01962E2B2070481454ECF1501394748351D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
Manifest number:          0647
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (hash: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=)
                          2: Y_3AmtVKOXxgTpShyWbiwpYFnME.crl (hash: voEvOnIpadL0jxH7oCBlFyQwkKPL7c4aGUNKnAzN+hI=)
                          3: bz0DaobqFx8uSG65YlIdlCnYXnM.roa (hash: iE8VTXx2IgO+YAuuzHNL90UnvmOpv60XoZ6IMkkBBJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:20:70:48:14:54:ec:f1:50:13:94:74:83:51:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=3d33130757d068f8816370c595ad121ebed7e98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:d6:99:5f:3a:53:7f:ae:37:f0:37:1c:7e:
                    2d:96:dc:32:38:31:d8:63:da:5c:d3:9b:59:d3:b3:
                    e1:06:4d:8a:d9:fa:11:08:6a:26:dc:50:86:2a:c7:
                    1e:0e:53:d3:5b:7d:52:df:e6:27:21:e6:3d:93:27:
                    65:71:3c:ac:5d:62:73:1a:fc:b5:ee:41:29:3b:32:
                    8a:ce:ab:a3:a6:b5:53:b6:02:d7:7e:b3:7d:4c:29:
                    65:c0:27:f3:c8:9d:90:8d:e4:84:a2:47:78:cf:9c:
                    d6:ea:d3:d4:13:93:47:56:a5:e8:38:ef:4b:cd:88:
                    b3:5b:e3:6e:52:0c:33:7e:ba:d5:7a:92:79:22:df:
                    55:29:35:d6:58:f1:a9:e6:1e:73:c8:de:f0:c2:b6:
                    86:59:aa:e8:58:40:a0:36:07:6a:80:23:cc:d5:52:
                    8e:43:3c:e8:09:17:0c:69:3e:f1:33:f6:d3:85:59:
                    43:a0:45:50:09:fc:bd:62:43:4a:f1:b2:df:4b:e2:
                    80:70:e8:c2:75:9c:2a:22:7a:fa:fd:1f:36:96:49:
                    5f:7c:a3:fe:eb:08:63:12:64:3d:f7:00:51:23:ca:
                    15:e2:5b:d9:df:7a:7e:fe:d9:e5:e9:d4:31:52:aa:
                    50:19:45:25:21:2c:54:e3:fa:fc:cd:fa:36:8f:cc:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:33:13:07:57:D0:68:F8:81:63:70:C5:95:AD:12:1E:BE:D7:E9:8F
            X509v3 Authority Key Identifier:
                keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:db:51:65:64:8b:09:3f:37:9b:60:3f:92:69:b2:45:ee:67:
         02:f3:0e:64:0d:6e:60:54:2d:26:06:b3:d4:ca:93:0a:ca:bf:
         c6:e0:e0:f3:dd:32:15:38:2e:87:1a:b2:44:0e:8e:eb:10:5f:
         3f:3a:71:44:30:1f:6c:44:95:f2:8f:18:a9:52:5c:fb:6e:83:
         ea:7a:92:d0:d4:a3:61:f6:fd:d5:2b:d9:f9:c8:67:7d:ce:ad:
         50:f3:66:aa:a3:41:2f:b5:ef:b8:0a:92:dd:17:ee:f1:d9:f9:
         66:55:5d:48:5a:7c:44:91:77:4f:a2:c1:51:0c:b6:8d:f8:f0:
         43:dc:66:10:7b:cc:11:28:43:de:b1:88:fe:6d:91:2b:a9:9c:
         43:1e:6a:22:e2:f6:28:f0:9c:01:e5:86:c4:18:c2:3f:36:a2:
         44:e9:8f:a3:15:24:9e:83:aa:6f:b6:93:47:47:43:cb:a2:31:
         44:7a:03:60:9a:63:95:75:2f:25:37:05:2b:97:99:78:d3:08:
         05:b7:e4:6b:06:a7:56:2c:1c:0a:97:18:a9:c0:00:b7:8c:f9:
         e2:28:39:c9:a0:f1:6b:6d:f7:8a:b9:38:99:4d:92:c9:fc:10:
         1b:32:86:35:d2:7a:05:7b:fa:6a:6b:1d:1a:29:38:d9:b1:7c:
         5d:37:e7:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKyBwSBRU7PFQE5R0g1HWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw
NTljYzEwHhcNMjUwNDEzMDgwMTQwWhcNMjUwNDE0MDgwMTQwWjAzMTEwLwYDVQQD
EygzZDMzMTMwNzU3ZDA2OGY4ODE2MzcwYzU5NWFkMTIxZWJlZDdlOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BLWmV86U3+uN/A3HH4tltwyODHY
Y9pc05tZ07PhBk2K2foRCGom3FCGKsceDlPTW31S3+YnIeY9kydlcTysXWJzGvy1
7kEpOzKKzqujprVTtgLXfrN9TCllwCfzyJ2QjeSEokd4z5zW6tPUE5NHVqXoOO9L
zYizW+NuUgwzfrrVepJ5It9VKTXWWPGp5h5zyN7wwraGWaroWECgNgdqgCPM1VKO
QzzoCRcMaT7xM/bThVlDoEVQCfy9YkNK8bLfS+KAcOjCdZwqInr6/R82lklffKP+
6whjEmQ99wBRI8oV4lvZ33p+/tnl6dQxUqpQGUUlISxU4/r8zfo2j8y/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0zEwdX0Gj4gWNwxZWtEh6+1+mPMB8GA1UdIwQY
MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt
NGE1Y2JkYjUwZTI5LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5
LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANtRZWSL
CT83m2A/kmmyRe5nAvMOZA1uYFQtJgaz1MqTCsq/xuDg890yFTguhxqyRA6O6xBf
PzpxRDAfbESV8o8YqVJc+26D6nqS0NSjYfb91SvZ+chnfc6tUPNmqqNBL7XvuAqS
3Rfu8dn5ZlVdSFp8RJF3T6LBUQy2jfjwQ9xmEHvMEShD3rGI/m2RK6mcQx5qIuL2
KPCcAeWGxBjCPzaiROmPoxUknoOqb7aTR0dDy6IxRHoDYJpjlXUvJTcFK5eZeNMI
BbfkawanViwcCpcYqcAAt4z54ig5yaDxa233irk4mU2SyfwQGzKGNdJ6BXv6amsd
Gik42bF8XTfnAQ==
-----END CERTIFICATE-----