Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File:                     YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier:          cg1Oz7/FzwQnnBcfdLpzDFiLZK5cthzsOgtgwg4jhew=
Subject key identifier:   B1:12:3C:CA:62:AB:6B:74:F9:3D:D3:BF:F2:B3:87:5E:8C:BD:C4:57
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer:       /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial:       01962E994334585D5AC47B41FB95A2B7ED10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number:          0975
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: C_VxgsrOTNHfcbo19nO36kuNZTY.roa (hash: elP/uo536peeHFglZZfLB7X6uPEm9F3vZkqB1C65yyw=)
                          2: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: w9cd0b8wGYe0ZuF1ifiYs5p0NFsAaaW8pecjdPfBUCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:43:34:58:5d:5a:c4:7b:41:fb:95:a2:b7:ed:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=b1123cca62ab6b74f93dd3bff2b3875e8cbdc457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:60:90:dd:c7:0c:25:c0:b4:23:1d:f4:7e:e8:
                    9c:6e:d6:68:bb:58:b3:f8:bd:c9:e6:f6:c0:fe:df:
                    a2:0b:f9:c2:53:e5:80:54:4f:17:9e:0b:25:32:e8:
                    7b:a3:ad:d9:26:7e:a4:f6:c8:ec:31:3e:3a:a9:f0:
                    9f:aa:7a:b6:75:12:ed:35:ca:82:fa:1d:03:76:fc:
                    40:fd:20:53:c4:7a:7c:04:34:97:44:eb:19:e9:ce:
                    96:6f:b5:44:b2:1d:3a:bf:d4:3c:b6:71:df:e6:73:
                    f2:0a:92:dd:87:e0:5a:59:9a:67:8f:38:d5:22:0d:
                    19:e5:00:f0:6f:cf:4f:46:7f:7e:51:04:d7:30:19:
                    78:3a:ab:20:6e:9c:d5:cf:99:6b:f0:42:06:46:98:
                    09:09:84:90:c6:b1:83:46:95:ac:d4:01:22:79:e4:
                    5b:2f:e8:d2:2f:93:c1:1e:a1:2e:18:52:63:24:b3:
                    ad:48:00:f3:88:11:32:d3:ca:8f:d4:32:4b:63:bd:
                    36:5a:f8:0b:6b:4a:31:bc:2f:6d:69:8f:4f:31:90:
                    2a:5e:bf:ef:84:14:46:c7:4c:d1:29:fc:d7:8e:1f:
                    29:11:80:e8:09:c5:13:ec:18:a2:d9:9d:5a:71:00:
                    1b:c7:a8:21:57:7d:b8:8a:29:36:be:5b:40:82:26:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:3C:CA:62:AB:6B:74:F9:3D:D3:BF:F2:B3:87:5E:8C:BD:C4:57
            X509v3 Authority Key Identifier:
                keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e1:a1:2e:b8:27:20:2b:60:56:cb:0b:9f:5a:13:20:f0:59:
         61:08:bd:29:0f:cf:67:37:ef:58:01:ab:6b:13:c6:cc:3b:ec:
         09:84:f9:5a:33:17:b6:b9:ad:33:64:5e:ee:7a:b9:56:32:be:
         4b:da:88:e8:bd:47:2a:17:8b:2f:1d:cd:87:83:10:b2:be:ef:
         84:e8:fe:85:d4:75:2e:73:44:47:ea:4e:51:b6:c2:2f:99:51:
         ce:04:51:b4:77:f2:05:26:e5:78:29:cd:47:89:6f:2e:db:96:
         47:29:58:1e:e5:4b:1c:96:3f:0d:25:2b:07:d4:06:2b:b5:94:
         c0:c7:af:d7:b5:64:8f:97:96:65:6f:d6:5e:db:03:4c:e6:e1:
         73:e9:9a:f1:2d:b7:ef:f8:20:21:c5:3f:3e:7c:a5:a6:5d:73:
         13:b1:0c:90:1d:6d:ed:14:c2:67:fb:cd:6a:4e:0d:af:97:06:
         c9:8b:78:d2:25:89:42:a7:be:d5:35:ee:03:c1:40:71:2c:86:
         49:95:1d:63:13:f0:ca:51:49:0f:03:03:62:ea:44:db:86:ae:
         f3:e5:04:68:79:18:0c:3b:e2:91:ad:85:60:2c:e1:89:c1:8e:
         3a:82:bc:ad:a6:91:b5:49:9d:46:6a:fe:70:25:c0:51:2c:f5:
         23:8f:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----