Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
File:                     YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft (raw, json)
Hash identifier:          Covv5O/a3GNaycvLH3xUXrZgOzwDDzGBxhyg4cjtXRY=
Subject key identifier:   DA:68:7E:1F:1D:B3:91:63:86:39:4C:3F:AF:70:1B:D4:98:A4:17:AC
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Certificate issuer:       /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial:       0194BC7285A6430594D5EFFEEE92649E9166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
Manifest number:          0BA6
Signing time:             Fri 31 Jan 2025 13:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:09 +0000
Files and hashes:         1: 7Hb0cxDKgEME9YU1nJ9t4uvfRA8.roa (hash: AkQY9ppbVhy4tGFhPFQeNdZuvfoba48WrfFAMllJVEc=)
                          2: 98yJd6CKF69Dg_9ycsUvR-BETQs.roa (hash: 3Ev+3DyYqmisojiXYuD5v3lmrru0HzcvSLE+oEhCf8E=)
                          3: CP5sV6hwKPPrFY5ssKzLxRDP72o.roa (hash: iGdJHjf6CqwTU/xy4cIPz3bE82CjxmDjP95RDzpcBGQ=)
                          4: X_Ut-l0xhlEJvQgpdE-Wt_wnoh0.roa (hash: RiDSm9rAEdX7bPFLKHKCwnSrmCrkLs82wHgdAdw6izg=)
                          5: YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl (hash: t+qHvvvK/tzNb6Kz8p8azpAwgFZdxtSAP3G0GpNU92M=)
                          6: a3OhTk5g6QRoPs_CCUBX0uChhBo.roa (hash: lG8T1hAW8NZfF6ZlPoDh/CDMn5Tu6TOfp3k+eTFPhPI=)
                          7: ip9eSePm8Y75YEH12AjUg5YYt1Q.roa (hash: Zh/noVMEWF/EQrP9CnaEuMBJgWDLkVvWB4iaEU0MbS8=)
                          8: jvff6WGoYFxaA4PYboUwWnOfv3c.roa (hash: +TXfc4B1fLIeKgxG681JTLQSo3SYOu7646Py3pWF6TA=)
                          9: r-SEcegHXv0xgVPmVK5FNkrtRLY.roa (hash: v2dXKgRdYBORQji5ctYjWOfXCnsGc158HDC6A+NIWtM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:85:a6:43:05:94:d5:ef:fe:ee:92:64:9e:91:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
        Validity
            Not Before: Jan 31 13:00:09 2025 GMT
            Not After : Feb  1 13:00:09 2025 GMT
        Subject: CN=da687e1f1db3916386394c3faf701bd498a417ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:57:d7:15:26:12:16:19:04:94:82:47:13:
                    1d:81:6d:e7:ce:19:fa:57:54:d2:cf:d0:1a:36:21:
                    ec:c7:72:eb:59:32:c4:a7:81:ab:35:6b:36:9a:16:
                    13:f1:82:7b:7f:76:5f:45:49:85:0d:93:c8:52:2c:
                    6b:eb:51:be:5e:cd:8a:b9:e9:57:34:64:78:fe:46:
                    09:1b:91:fa:65:90:8f:62:17:fb:86:27:9e:71:34:
                    cc:07:41:33:dc:ad:95:fb:81:a3:69:85:3c:d2:e5:
                    30:95:d5:91:e7:16:60:d9:e3:22:85:de:6a:36:c3:
                    b4:71:27:f5:31:aa:4a:03:d6:f3:5e:3a:3f:e4:7e:
                    0b:f4:34:6a:2e:19:81:38:33:01:99:90:72:09:5b:
                    a5:71:a3:32:e1:ba:1a:b3:08:c4:c4:ed:50:14:40:
                    f6:0e:e0:2c:84:a6:4a:28:f4:c8:42:f2:05:8f:e9:
                    b8:4f:d4:fe:01:af:58:d4:55:e0:c3:5c:a8:a8:f2:
                    17:67:3d:63:2e:b8:ef:7c:0d:15:1a:b0:0d:52:0d:
                    8a:7f:a8:73:5c:ba:89:1d:01:ff:9b:38:23:2c:89:
                    5b:78:68:67:08:e0:93:c0:ed:c1:52:0e:65:63:a9:
                    23:17:49:40:9e:38:3e:99:13:7d:f4:37:ca:94:7d:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:68:7E:1F:1D:B3:91:63:86:39:4C:3F:AF:70:1B:D4:98:A4:17:AC
            X509v3 Authority Key Identifier:
                keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e4:53:f8:4a:44:0b:ee:09:69:cb:53:f1:dc:0b:72:89:d9:
         7b:cf:fa:80:de:0f:d2:69:15:52:0c:60:7f:5e:db:74:9d:3c:
         b7:c9:09:ee:62:fe:03:d6:60:0a:24:1d:53:a7:f2:98:b9:45:
         86:a4:d1:eb:6a:e4:6b:96:83:a3:21:05:d3:13:3e:cc:c0:cb:
         cf:fc:ab:96:da:6f:7a:68:e7:5c:c5:ab:02:b5:e4:c9:84:5a:
         5b:9a:40:06:39:8d:d0:bb:49:b9:40:7d:63:50:e0:a1:de:88:
         ed:c6:4b:38:72:ab:99:5a:e2:62:af:84:6c:00:81:0e:51:8c:
         20:4a:54:69:59:93:4e:10:79:29:89:9b:94:5b:a1:3f:db:10:
         15:81:f7:6b:4b:a4:57:48:d6:75:50:80:d9:16:b4:cc:a2:1c:
         98:0f:86:ff:68:1a:5e:cf:22:23:22:7d:3c:1a:24:a6:bb:aa:
         95:3d:0c:22:35:71:15:4f:99:5e:9c:2e:af:0b:cc:9f:14:bf:
         1d:98:96:07:6a:6d:49:67:83:c4:c5:05:eb:68:4c:c6:b3:86:
         73:df:7b:d3:15:4b:b7:30:50:f6:00:a7:a0:8e:91:d3:16:2f:
         75:76:a5:45:fe:e4:75:4a:00:3f:6e:e6:66:50:ee:62:df:24:
         a1:90:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----