Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
File:                     YGYXWM4zBiJHCjmujW70ogRPg8Q.mft (raw, json)
Hash identifier:          EHxzkCd72kr/cimKLfsxtEpP4LpEEdyuGbLVjX9LVl8=
Subject key identifier:   AD:6A:BB:9A:0A:0F:69:AB:B0:3C:B2:C3:0F:42:92:9A:73:8B:1D:44
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       01962ECF63A1D4833EDF0802F6D6314D2ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
Manifest number:          1519
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: 1jJgRYb9W4sURCICTmoLplbZHfs.roa (hash: qvyeOItWUbyQ2K5Z+KPy3O+0hoC+eVZj/p5eOsFLL2A=)
                          2: 2bitAWBYtHnJOfetAxEk1NWDm2Y.roa (hash: Ny4sMxLaEUhtST4+VmyAnyHZb/s80LG64s9z9X1sBRQ=)
                          3: BQS1rXwEuh8U6Mycybza_zeQDc8.roa (hash: JETVF4cuM1eSDrb4CZlSxSPfGvmyGijVAPUzbeqDwyo=)
                          4: FzUBpaz-C-RxalVbWOkDzpE2yCM.roa (hash: T/pZcNXmahfhGqhyvuYT5Ve4BWsAYlUMonVIOR9Jwwc=)
                          5: GnpXllFnavAmEq5NxCew5FbUJHI.roa (hash: UrAOMyeUWJbJMwCGhOZ8xTwTpTiZsyt257TfGcy1E8E=)
                          6: JsNpDFVTIVYgUCJ1BB9Q_OSa1eI.roa (hash: WP14cmIm0lMtM89Vbr+2k9QFB+POLX7HRTX2iqF9kl8=)
                          7: Ru0qR7TRZaYr9H0bORVN2DKCxoI.roa (hash: 8HruGL7yjBEpznKxnMUFMkvUrJXEnuhg3el+Q45d0VY=)
                          8: YGYXWM4zBiJHCjmujW70ogRPg8Q.crl (hash: +3QdXWbSXsk+OHi9iTSJ7wJ7K7F/LxERe5K2XQ6J5Mg=)
                          9: aUwME-OEW2tfuy8IUz8xO9RJ9VA.roa (hash: TJpr115B55iHu7xXQQMd6VR9p+/zOYhE8FX2JwI2PiU=)
                          10: c3DCrLRFAJY72J3n3qrjNug2KJI.roa (hash: dR7zsNeMamp+bQYtYrwKTVfIZFLqO0MP1cdCrGnLSmE=)
                          11: cUEqkvOn3Or6KK_gteey-M1immw.roa (hash: NBFmDrlpaQLqY6RSKBmBrpZhLZbGW8F9pK5gAcvo2qA=)
                          12: fI3NusZkrqWO5jLO3fTZ5z39Yl0.roa (hash: KILLD4GBsSEpBwdB72CBo4dP3KtsyWxUfk3vFU0iOuU=)
                          13: k6TUAjq7IKBlApZOlbsqYXrEIx8.roa (hash: bC2yv2JOs11J0JF7qUwzq/8PnVIsXN9xT7P0dfHswKQ=)
                          14: kAyD-iamG8PuwFNIujY2KowQdcE.roa (hash: RV+R2SNYZWh3uXsxFcbw49NH++kmcr/RW695RLifrdU=)
                          15: qQ7qZcsRXtjJvwERncTyOZfQz3Q.roa (hash: mqEcMXW4dbXayMYmxFVMUymF7f19p03bN3IauxDIgdw=)
                          16: qjLDoZZ2r8Ejj-B1h-p33wShS3I.roa (hash: xORdIInsPZCisZI4VA2gawexPnESY6xnP15CmInP8bw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:63:a1:d4:83:3e:df:08:02:f6:d6:31:4d:2e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=ad6abb9a0a0f69abb03cb2c30f42929a738b1d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:e1:14:d2:ab:c2:27:4b:ec:47:33:57:2a:
                    7e:1c:89:71:e2:6b:2b:a4:6c:78:78:38:ed:29:17:
                    09:74:c2:a6:f2:42:76:26:9a:cc:0f:d3:a6:49:67:
                    52:11:55:03:c5:ca:45:bb:44:61:e2:b8:c2:2d:90:
                    07:5e:07:40:82:7b:fd:9e:a9:c4:34:78:ac:ce:c0:
                    54:c4:cd:f1:40:2b:f7:93:b7:00:08:ef:82:bb:5b:
                    d4:47:8b:24:16:a5:aa:05:f4:f8:48:69:bd:62:87:
                    37:2a:47:12:79:4a:85:d0:86:5e:c7:5c:65:ce:7f:
                    43:e8:7a:08:3e:3e:f1:51:d6:25:b9:cd:a4:59:1e:
                    0e:49:24:e6:77:80:8d:2a:60:cd:c9:af:c2:a2:9c:
                    9d:f3:71:1f:b9:6c:d4:17:2e:46:ca:bd:14:55:83:
                    92:6a:58:ff:6a:ee:8a:3f:dc:7a:80:87:94:c7:5f:
                    c0:11:30:5f:38:ad:45:09:ac:dd:37:87:2b:38:9e:
                    f4:f5:69:83:53:2e:b3:e6:94:c8:77:e6:a4:12:ff:
                    d1:49:00:87:56:8b:0d:ec:4c:65:71:89:b3:f6:f2:
                    6b:6f:94:c5:50:8c:1d:0e:7a:88:d1:5a:ba:9c:ec:
                    5f:16:e3:b2:9b:cd:14:3a:b7:6c:50:65:df:d9:8d:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:BB:9A:0A:0F:69:AB:B0:3C:B2:C3:0F:42:92:9A:73:8B:1D:44
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:60:8a:c5:cd:6d:1b:64:c3:d1:46:f6:75:ee:65:8f:87:1b:
         cf:0e:c4:a1:07:18:fd:c8:41:6e:d1:d6:a7:95:7d:83:7b:67:
         d5:af:bd:c8:9f:a0:b1:6d:3b:f1:7a:b1:a2:97:e7:5c:ef:ef:
         4f:8d:9f:2a:25:8d:a8:e8:e3:2b:5a:3f:ad:08:c6:a0:23:69:
         43:5d:a7:e9:e8:0a:59:4b:9e:d4:a3:5e:08:05:22:ce:bc:c6:
         f0:af:b6:52:29:ad:29:23:e2:d2:f1:16:ee:50:04:3c:d2:54:
         0f:b0:e8:5e:ce:b4:6e:76:40:ce:82:e8:12:5c:21:dd:69:f3:
         b9:b8:14:8c:84:f0:39:2c:0d:b4:c9:da:0d:3f:06:d0:90:dd:
         85:94:48:94:7e:31:5c:4c:98:19:f7:0a:fc:e4:ae:ad:f2:05:
         78:76:47:ce:03:1c:d6:ff:64:73:c1:42:1a:a9:f8:17:6b:f1:
         db:b9:d3:a9:ab:78:32:2e:a1:82:f0:ca:68:ea:f4:c5:b8:79:
         0d:ba:46:ce:b7:9b:ac:1f:1b:23:f1:eb:71:54:60:96:eb:3c:
         09:70:98:05:3d:06:b8:ca:0f:26:a6:c9:9c:b0:86:93:c1:32:
         d9:45:2d:b4:a7:89:2d:48:04:41:1c:47:9a:2f:59:bb:5e:0f:
         e1:a3:e1:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2Oh1IM+3wgC9tYxTS7UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EyhhZDZhYmI5YTBhMGY2OWFiYjAzY2IyYzMwZjQyOTI5YTczOGIxZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzjhFNKrwidL7EczVyp+HIlx4msr
pGx4eDjtKRcJdMKm8kJ2JprMD9OmSWdSEVUDxcpFu0Rh4rjCLZAHXgdAgnv9nqnE
NHiszsBUxM3xQCv3k7cACO+Cu1vUR4skFqWqBfT4SGm9Yoc3KkcSeUqF0IZex1xl
zn9D6HoIPj7xUdYluc2kWR4OSSTmd4CNKmDNya/Copyd83EfuWzUFy5Gyr0UVYOS
alj/au6KP9x6gIeUx1/AETBfOK1FCazdN4crOJ709WmDUy6z5pTId+akEv/RSQCH
VosN7ExlcYmz9vJrb5TFUIwdDnqI0Vq6nOxfFuOym80UOrdsUGXf2Y1aUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1qu5oKD2mrsDyyww9Ckppzix1EMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGCKxc1t
G2TD0Ub2de5lj4cbzw7EoQcY/chBbtHWp5V9g3tn1a+9yJ+gsW078XqxopfnXO/v
T42fKiWNqOjjK1o/rQjGoCNpQ12n6egKWUue1KNeCAUizrzG8K+2UimtKSPi0vEW
7lAEPNJUD7DoXs60bnZAzoLoElwh3WnzubgUjITwOSwNtMnaDT8G0JDdhZRIlH4x
XEyYGfcK/OSurfIFeHZHzgMc1v9kc8FCGqn4F2vx27nTqat4Mi6hgvDKaOr0xbh5
DbpGzrebrB8bI/HrcVRglus8CXCYBT0GuMoPJqbJnLCGk8Ey2UUttKeJLUgEQRxH
mi9Zu14P4aPhVQ==
-----END CERTIFICATE-----