Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File:                     Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier:          pI9mlNfLxUK/jWXOnWoHT6FQZRaRt+bEGiKvstx9fss=
Subject key identifier:   7A:A2:75:55:A2:C3:59:87:25:FF:A2:37:7A:04:4B:6F:08:FB:E5:4A
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer:       /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial:       01962F0705ADA587437800147A306CFE5D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number:          1052
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: UI5zkZGQyqwm2BPKOU4qAsxWVV8ddlPmBZplQ75nHds=)
                          2: diGFBknLdwh-HCGfBtKOS8e6uJM.roa (hash: cB3gm8p9TxqmEEhTV6yxgTgaXbm1raO7jRrFe5J7IiI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:05:ad:a5:87:43:78:00:14:7a:30:6c:fe:5d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=7aa27555a2c3598725ffa2377a044b6f08fbe54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:4c:42:f0:9e:ca:35:b6:4a:9c:d0:46:89:
                    c8:90:6d:dd:8d:b3:7c:29:6b:0a:32:86:5d:48:44:
                    b2:53:df:98:3c:d8:30:16:dd:93:c7:7e:9e:3b:49:
                    e3:e8:2a:f8:41:45:5d:df:1a:5a:05:fb:77:a4:d7:
                    41:b0:32:1a:97:14:fa:bc:74:cf:1a:79:a8:6d:92:
                    7f:7b:65:ba:4d:f9:b6:55:ac:89:0e:c6:0f:49:37:
                    5a:72:b4:f7:0a:3b:d2:5f:ee:81:3f:e9:30:c2:f9:
                    9b:40:66:95:9c:98:0c:be:d5:4c:f6:76:3b:92:a0:
                    77:63:5f:57:fd:56:35:f9:68:ec:3c:c4:fb:7c:4b:
                    3b:1d:c2:83:56:69:d8:eb:17:6e:7f:0c:21:a2:66:
                    91:5f:bd:65:90:aa:97:9f:64:d1:bc:72:28:bf:32:
                    f5:0c:8d:c8:e5:da:af:be:3c:f1:6d:73:f0:07:cf:
                    d4:32:2b:8e:9a:3a:81:54:d5:e3:53:4b:65:3f:45:
                    9a:6a:7c:54:a5:76:12:00:4f:58:b8:2f:1e:22:d3:
                    08:f5:71:39:d8:7a:df:96:8f:bd:d6:fd:d8:cc:42:
                    54:07:d1:f8:07:d2:b6:d0:bd:e6:9b:b6:2b:03:38:
                    a1:9b:51:f1:94:87:14:a4:e3:da:e1:17:1a:99:b1:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A2:75:55:A2:C3:59:87:25:FF:A2:37:7A:04:4B:6F:08:FB:E5:4A
            X509v3 Authority Key Identifier:
                keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1e:f2:9e:8f:25:fd:b8:5c:24:00:24:3b:49:d3:7d:c7:96:
         c3:9c:ed:c1:77:ea:9c:b4:bb:92:52:4e:b2:fb:d0:16:43:e6:
         c0:1b:df:d9:9a:63:1e:eb:0e:07:2a:1c:a0:53:83:5b:54:01:
         15:e9:28:3d:9d:a8:0d:88:12:83:b6:70:3c:eb:18:4e:59:9f:
         4c:6c:af:42:8d:fd:66:e9:9e:71:b9:25:47:62:cf:25:46:52:
         5a:fd:86:5f:fb:d2:9d:1b:f2:25:ed:59:01:e2:9d:73:1c:5c:
         4a:f6:7b:dd:7e:5c:72:5f:d6:cc:46:c0:49:ff:88:55:7d:1c:
         6e:85:e0:8d:7c:63:d1:c3:42:fd:f4:79:64:87:65:05:22:7d:
         63:43:a3:b1:3d:c9:fe:2b:15:a2:56:21:52:40:6b:7e:0e:c3:
         fd:1b:85:24:a5:a7:14:9a:87:9d:8e:81:13:47:8c:8c:4d:fd:
         fc:38:ff:21:a4:c6:5c:61:24:82:51:55:4e:99:d6:3c:ea:87:
         e3:81:c7:aa:0e:d0:c5:4f:72:e1:d7:20:c7:61:9d:34:88:ea:
         74:22:a9:f3:a0:15:a5:b4:f9:14:65:6f:6c:33:0e:5d:42:e4:
         b7:75:13:9e:2b:1f:c5:4b:41:52:00:df:73:0e:58:e3:00:6c:
         a3:79:03:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwWtpYdDeAAUejBs/l1LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyY2JmYTI0YTQ4ODMyN2I3MzA3NzVlMzI5ZDUxYTE5MjE2
MTI1MzEwHhcNMjUwNDEzMTIwMTUxWhcNMjUwNDE0MTIwMTUxWjAzMTEwLwYDVQQD
Eyg3YWEyNzU1NWEyYzM1OTg3MjVmZmEyMzc3YTA0NGI2ZjA4ZmJlNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc5MQvCeyjW2SpzQRonIkG3djbN8
KWsKMoZdSESyU9+YPNgwFt2Tx36eO0nj6Cr4QUVd3xpaBft3pNdBsDIalxT6vHTP
GnmobZJ/e2W6Tfm2VayJDsYPSTdacrT3CjvSX+6BP+kwwvmbQGaVnJgMvtVM9nY7
kqB3Y19X/VY1+WjsPMT7fEs7HcKDVmnY6xdufwwhomaRX71lkKqXn2TRvHIovzL1
DI3I5dqvvjzxbXPwB8/UMiuOmjqBVNXjU0tlP0WaanxUpXYSAE9YuC8eItMI9XE5
2Hrflo+91v3YzEJUB9H4B9K20L3mm7YrAzihm1HxlIcUpOPa4RcambGARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqidVWiw1mHJf+iN3oES28I++VKMB8GA1UdIwQY
MBaAFGLL+iSkiDJ7cwd14ynVGhkhYSUxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2Qt
NTcwZDE3ZjlmMmE1LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xNWZlZTctZDQxMS00YzFkLWE3Y2QtNTcwZDE3ZjlmMmE1
LzEvWXN2NkpLU0lNbnR6QjNYaktkVWFHU0ZoSlRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsB7yno8l
/bhcJAAkO0nTfceWw5ztwXfqnLS7klJOsvvQFkPmwBvf2ZpjHusOByocoFODW1QB
FekoPZ2oDYgSg7ZwPOsYTlmfTGyvQo39ZumecbklR2LPJUZSWv2GX/vSnRvyJe1Z
AeKdcxxcSvZ73X5ccl/WzEbASf+IVX0cboXgjXxj0cNC/fR5ZIdlBSJ9Y0OjsT3J
/isVolYhUkBrfg7D/RuFJKWnFJqHnY6BE0eMjE39/Dj/IaTGXGEkglFVTpnWPOqH
44HHqg7QxU9y4dcgx2GdNIjqdCKp86AVpbT5FGVvbDMOXULkt3UTnisfxUtBUgDf
cw5Y4wBso3kDUQ==
-----END CERTIFICATE-----