Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File:                     YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier:          eJOyoKBiQTir8T8k99EpdpmppMxO4A9i9JXDWwDPst4=
Subject key identifier:   5F:15:72:5A:6E:FA:BA:6E:E1:ED:A8:A0:54:F7:D6:BB:E9:99:42:4D
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer:       /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial:       01962E996C9C6FCA039E0DADD9F8A95F9337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number:          1148
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: Cr1GM2aFxsaZd-ImInN4uI7kXRc.roa (hash: PpfCM8zWq8dmU00l723EMPcIhVPj7pc1erECtwg1IFw=)
                          2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: /ZVRVTLlVemsJQTcS95QWJabkcUTHCoGF0Pv/IGvD8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6c:9c:6f:ca:03:9e:0d:ad:d9:f8:a9:5f:93:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=5f15725a6efaba6ee1eda8a054f7d6bbe999424d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:a5:12:62:08:8a:12:d0:a1:6d:cc:14:b1:
                    46:db:09:df:26:7e:57:31:42:bd:bb:4a:84:75:63:
                    e6:93:79:b3:65:be:4e:50:90:25:77:ed:b7:c2:90:
                    15:69:40:a9:24:65:6b:c0:ac:a6:17:0d:15:67:bc:
                    ea:68:ad:5e:1b:8f:a0:ff:3e:43:1e:fe:dc:71:9a:
                    c8:31:05:eb:e8:08:ae:5d:a5:31:68:c2:f9:cf:b7:
                    56:8d:59:30:67:88:43:d6:78:6e:c7:6a:46:c4:8a:
                    11:26:53:09:94:f0:25:7d:eb:99:84:10:29:d2:91:
                    a0:64:36:ad:1c:4f:0d:4e:e3:80:b5:63:b6:41:d6:
                    15:29:a8:99:07:46:e3:71:dc:bb:6e:d4:1f:63:6d:
                    63:3f:d5:5e:c3:0b:d5:a6:2c:84:cc:7d:32:ff:3e:
                    cf:4e:18:f6:bb:e6:b6:e2:b3:80:29:a6:4a:95:fd:
                    6b:26:c4:7d:3c:c7:b5:c7:a6:4a:62:1b:70:8a:b0:
                    2a:17:ac:bb:cc:b1:89:ae:5e:4f:6b:83:1e:94:b0:
                    ce:01:1a:a7:ff:61:1f:87:05:99:dc:8c:31:08:bb:
                    4d:93:a6:6e:eb:e9:9a:07:f7:db:d5:9e:b0:35:d8:
                    34:40:d9:be:df:e2:48:9f:be:82:aa:e0:f4:ce:56:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:72:5A:6E:FA:BA:6E:E1:ED:A8:A0:54:F7:D6:BB:E9:99:42:4D
            X509v3 Authority Key Identifier:
                keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:1c:48:d0:5e:4c:05:5f:07:32:22:5d:2b:7e:21:e0:03:8f:
         53:8d:53:2f:70:ff:48:a0:f3:a9:85:4c:4e:2e:e8:85:e8:e7:
         78:90:8e:39:fc:3e:5c:e1:57:fb:3b:3a:31:25:3f:0c:a2:a4:
         03:2d:a8:93:2c:bf:49:39:db:9f:de:7f:8c:b0:87:cd:12:a8:
         ce:63:55:34:85:20:c7:96:1b:fd:a7:b6:cd:0b:58:f8:72:9e:
         61:02:e6:43:70:e9:38:9a:7b:0a:c2:00:b4:3b:a4:01:21:11:
         d7:60:39:ca:d5:5b:38:0d:80:2b:91:29:0c:0c:80:d3:d9:95:
         55:a8:00:70:28:b4:f9:fb:c9:94:78:c7:16:6a:77:f2:8d:03:
         a3:2c:a0:c4:4f:aa:f0:b8:3e:a0:c9:f6:c1:3b:b1:72:6a:bf:
         36:2c:1a:10:f4:dd:f5:57:c3:e3:2e:d6:83:03:e5:7d:fc:b5:
         75:8c:fd:1b:e2:69:57:a1:73:b1:5b:95:f5:a7:16:21:26:ba:
         bb:38:3e:a9:f2:ec:df:78:ad:03:50:bf:03:9f:8e:b4:9c:17:
         5c:fd:76:54:2d:b7:b5:30:29:d8:a3:32:a7:3a:6f:7a:58:0e:
         1f:18:fb:11:78:da:60:aa:d2:7b:66:dc:9a:a3:cb:3c:9d:f3:
         9a:40:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----