Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.mft
File:                     YGFFFZB-jqyZgGYX1facQNuRo_U.mft (raw, json)
Hash identifier:          I18ucjs3vSJYzmEBawtMUk1UCyl7+2OG4LfQ3xVHZtc=
Subject key identifier:   2F:F1:08:3C:71:0C:7C:3E:37:94:A3:92:04:C4:66:6B:76:74:AF:CC
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Certificate issuer:       /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial:       0192087214D4AFE6A0E12EB41F7D826D8CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.mft
Manifest number:          12C3
Signing time:             Thu 19 Sep 2024 04:02:27 +0000
Manifest this update:     Thu 19 Sep 2024 04:02:27 +0000
Manifest next update:     Fri 20 Sep 2024 04:02:27 +0000
Files and hashes:         1: JbcsSUBqJIV7FPCn1O2EvVpPiAg.roa (hash: g6lEGfKHcN08s7P8YNII0sfT3Rs5qiba7Usj06uvh6I=)
                          2: YGFFFZB-jqyZgGYX1facQNuRo_U.crl (hash: lJVpe3nANKF9RwoRluFzVJXB7moGxpSEsfS0ulb8AAI=)
                          3: abo3PxWcu0YqjyfUPkXrD2OcqNA.roa (hash: EwTUAFExkRXkUHD3o64XsgfJeDzD5XQwXYimDZV+pjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:08:72:14:d4:af:e6:a0:e1:2e:b4:1f:7d:82:6d:8c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
        Validity
            Not Before: Sep 19 04:02:27 2024 GMT
            Not After : Sep 20 04:02:27 2024 GMT
        Subject: CN=2ff1083c710c7c3e3794a39204c4666b7674afcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:8b:34:52:b6:5c:a0:05:65:60:24:d9:af:
                    b4:77:df:60:6d:66:11:fb:05:7a:8b:26:0b:6f:b6:
                    e7:97:4e:af:55:51:e1:35:29:22:1b:3e:8e:0d:d5:
                    55:3b:23:76:8b:b5:36:e6:c2:76:18:be:c1:af:3a:
                    b2:d1:a2:c8:3c:cb:be:b9:3f:97:c0:2b:7d:01:39:
                    27:10:80:27:7c:3f:a6:91:02:63:bc:6a:ea:ac:3e:
                    2a:dd:fa:56:8a:b5:21:a7:e6:5a:95:75:af:52:73:
                    81:89:df:3e:78:cb:ac:74:92:21:5e:df:0c:f5:27:
                    db:29:19:7b:b9:2e:42:57:87:8a:a0:64:4b:bb:1f:
                    9f:a9:1d:43:bb:f0:87:39:be:44:5e:98:47:e0:88:
                    ec:50:4d:a1:8d:3d:93:37:1d:9d:af:89:60:93:5d:
                    5c:61:0d:0a:47:3a:13:fe:27:00:7a:ef:f0:3f:bc:
                    1d:c2:9b:85:e4:00:48:b6:38:8b:11:8d:33:5f:6f:
                    37:49:91:81:91:ae:52:1e:5b:47:76:c2:74:a9:99:
                    2b:81:46:c4:5f:04:83:77:3c:17:14:9e:d2:3a:f5:
                    5c:02:bf:b2:f0:da:ab:6e:60:ae:8e:4a:6a:e7:74:
                    b2:1c:63:2f:ff:32:e1:c5:b0:63:ee:16:30:96:96:
                    9a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F1:08:3C:71:0C:7C:3E:37:94:A3:92:04:C4:66:6B:76:74:AF:CC
            X509v3 Authority Key Identifier:
                keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:78:f6:83:dc:26:85:a5:f9:98:81:26:f7:8e:1d:e2:b4:f5:
         1e:a0:0c:1e:65:ed:3e:51:59:67:f4:9c:ec:78:57:ce:af:98:
         09:b3:55:8c:c7:6b:ad:96:49:ed:35:e5:88:c3:de:e4:eb:49:
         4d:a4:c4:7a:a3:4b:fc:49:8b:a4:53:5c:e9:08:11:88:f6:1d:
         bf:88:a0:2c:35:01:52:53:c8:39:b8:7f:09:55:d4:f7:2c:44:
         b8:93:87:62:a8:c1:2f:34:66:4d:3c:95:c4:5c:9d:4c:17:f0:
         ef:06:dc:c8:a5:55:6f:fb:72:0a:70:3b:2e:26:85:fc:2c:7d:
         c7:34:cf:93:c5:5b:e8:4d:27:5b:87:c3:5e:77:ba:2b:35:6d:
         a8:37:a4:a3:30:5d:8a:fe:c3:44:5e:7c:54:95:87:fe:31:25:
         03:91:a6:c6:9e:a5:e8:d6:d6:10:80:27:cb:c2:38:ad:bb:bb:
         5b:bb:2c:47:12:63:73:68:9a:24:3e:42:49:8c:0d:3b:4d:f3:
         23:9f:ef:c7:75:d6:4e:e9:ea:1b:af:fa:9c:e4:b8:e5:2e:c5:
         e0:f5:78:09:cf:bb:90:5b:ea:41:3d:be:8b:4a:1f:53:3d:91:
         f3:65:0b:90:05:6c:e7:7d:d6:de:99:f2:93:46:b7:a0:11:11:
         f2:0d:76:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 09:22:50 2024 by rpki-client on console-fra.rpki-client.org