Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
File:                     YOiP_m8N5fLx_J0U72LyVnC9W0o.mft (raw, json)
Hash identifier:          lhiyF347+CZRVfFAjuQr1ZVz4Q1Vv7h9n3RwYGKDe30=
Subject key identifier:   D6:BC:70:F2:20:B7:06:05:46:34:B2:75:6F:64:CD:BA:2D:DF:84:D2
Authority key identifier: 60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A
Certificate issuer:       /CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
Certificate serial:       01962E2AD2636AD58422687B5D95767569A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft
Manifest number:          04B7
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: YOiP_m8N5fLx_J0U72LyVnC9W0o.crl (hash: WrpedvCT1QFnn7Wwvz2NPNWrDABvrTRQNzkyr32E2i8=)
                          2: cBsFVB26JCMAz1JmmMw2rMdGhDc.roa (hash: T49iCpRELOVmeVt8pXk4tghuepmEHEqGlpGQeMuT87g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:63:6a:d5:84:22:68:7b:5d:95:76:75:69:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e88ffe6f0de5f2f1fc9d14ef62f25670bd5b4a
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=d6bc70f220b706054634b2756f64cdba2ddf84d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:ae:fb:e3:72:aa:9b:09:8e:ad:ae:c6:2b:
                    5e:52:e6:68:95:6b:1d:1a:b3:58:53:1c:f0:39:fa:
                    5a:a9:45:bf:31:cf:57:b7:91:fb:8d:d0:ab:94:e0:
                    93:ac:96:51:c5:e2:fe:19:12:9e:c9:de:ee:15:e4:
                    8d:3c:3c:4a:60:fe:82:0d:6d:65:92:4c:92:ed:a1:
                    29:53:90:d3:db:80:cc:0b:86:a5:86:4b:16:a8:21:
                    20:20:cc:f6:a6:c2:42:b9:fb:30:31:4f:b3:97:0c:
                    ac:3a:de:36:bb:c2:eb:e5:b7:b1:b6:23:2e:53:30:
                    5f:75:5b:70:ed:30:4e:ca:45:30:1e:1a:ea:39:32:
                    f0:77:a6:8e:8c:4f:81:fd:09:a5:f5:d5:58:d9:af:
                    78:32:6d:fa:d0:df:b1:30:89:03:a9:d9:4c:39:f5:
                    0c:2e:3c:db:f2:a0:97:19:ba:b2:a5:2b:f6:c5:4c:
                    41:a0:2e:00:5e:34:49:8f:67:b2:86:ab:31:15:8d:
                    96:41:0c:9b:c8:23:ba:1b:cb:85:14:1c:3d:45:ca:
                    9d:62:10:f4:aa:a2:e8:30:c0:87:cb:b6:f4:32:79:
                    f5:5f:3c:08:44:1f:63:77:0b:8d:3c:0b:48:1b:75:
                    18:af:45:16:e4:22:14:a9:64:2b:6e:68:95:51:24:
                    97:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BC:70:F2:20:B7:06:05:46:34:B2:75:6F:64:CD:BA:2D:DF:84:D2
            X509v3 Authority Key Identifier:
                keyid:60:E8:8F:FE:6F:0D:E5:F2:F1:FC:9D:14:EF:62:F2:56:70:BD:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOiP_m8N5fLx_J0U72LyVnC9W0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f97aed-f5c2-4fb7-a7d1-0725f0697b83/1/YOiP_m8N5fLx_J0U72LyVnC9W0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:b9:02:66:91:02:fc:4d:4e:35:38:3b:89:57:72:2b:8f:
         12:8c:d8:f8:8b:7e:66:f7:a1:4a:96:cb:8f:a0:a6:45:dd:53:
         c6:c3:68:d8:68:3a:a0:ff:ef:eb:67:9d:e2:e7:4d:ee:32:d2:
         fe:c7:1a:b5:66:e6:b1:7b:15:32:80:cf:06:e1:2c:68:d1:a7:
         21:c0:a2:9d:61:43:67:33:2d:d4:7f:9d:d3:ff:5d:b8:a6:7f:
         44:fc:6a:b1:15:5c:1b:88:d5:c1:09:ee:bf:e9:19:83:53:72:
         de:3a:7a:70:66:ea:45:5d:a1:09:79:af:94:6b:97:f5:c7:2b:
         bf:1c:e4:f5:50:d0:50:91:4c:57:aa:09:a9:1c:a5:a3:69:be:
         87:bd:1b:62:ed:13:53:e6:24:83:e4:3e:e7:e5:4e:43:27:2a:
         93:10:9c:b2:72:d5:ee:f0:d9:6d:b3:cc:09:7b:c6:03:b3:25:
         dc:a3:07:71:94:b5:32:9b:86:73:1d:bf:c7:38:07:87:3c:ec:
         1d:69:b8:14:7e:f5:1b:c6:1a:5c:1e:8c:13:88:f5:87:04:67:
         ef:9c:d3:05:5a:4a:3a:4f:36:40:eb:6e:cd:d5:dd:c5:2a:2e:
         e6:92:7d:ff:41:8b:0c:0b:7c:a2:2b:2c:7c:c4:06:72:bd:da:
         0d:82:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----