Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
File:                     YyzYf-q-QHUi4GVT8usFoMFgL78.mft (raw, json)
Hash identifier:          fARCKgUhBvcLEhCNKBsuFxtKFavJrTDltWjQjYiEwo4=
Subject key identifier:   1E:CB:AF:10:7F:D8:98:A8:3F:50:EC:4E:1A:54:98:54:F4:6C:02:40
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Certificate issuer:       /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial:       0195E04635DEAABD9A614E4FD2EA2F39DECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
Manifest number:          0695
Signing time:             Sat 29 Mar 2025 05:00:52 +0000
Manifest this update:     Sat 29 Mar 2025 05:00:52 +0000
Manifest next update:     Sun 30 Mar 2025 05:00:52 +0000
Files and hashes:         1: 28EVq9LoXnu9jXQgBHyLpy78Vh0.roa (hash: s2TSP/vV8GiUJDFDJp8qEqZQgIYTh560CsLwBRuqePs=)
                          2: 7g4KdSk0oMEt3rH3ZJ8R3dxMTi0.roa (hash: lxHXvphbzHFD8HzCFhMpWZbKa/TJm7QEqeDzMizn4WU=)
                          3: 7zfngT6RNOq9VJzKUYEpH9T5Ty0.roa (hash: b2pfdzC45GMVipBGZQW2DlQf49+s2YH1i4ZbUxDlU4k=)
                          4: CTBAyqwCpKxb1ZRxTO9b1vwfTow.roa (hash: YN7csTjUba7odlT8rpPJtyZg6f4c8lmK7Q4NG0ex+Os=)
                          5: WklIp3hfI1HzTHDkoGFks_JbMbk.roa (hash: xB951qxbd7olAr14K1W5wjtzX0NDh6MEYCdjwFE2jGY=)
                          6: YyzYf-q-QHUi4GVT8usFoMFgL78.crl (hash: K4JnvDlJLWis/dQ6Fm1S6It9jwH95rCCnxRaKtBrBDc=)
                          7: ZQIkKM0wnsGE09x8Gj2tkKkdvCo.roa (hash: c0JjbeiMwJtgSk02wQ3e/EFSSTEUVi4TY73i+98NKvg=)
                          8: jB110pDZmcuujfQezVUYFypdnk4.roa (hash: Ja58Yq8wHJsWad7BVjuXhBRa5NCGI3uYM6r+ME659AY=)
                          9: nP6Wp7rqjDbaj9VXPjopbJmmZLQ.roa (hash: EDsEYJXVC7X/AF/ZHxiwn2CZKU1Xg1iI8gyvla1QqdM=)
                          10: uUbdbfji1wduoDXh4AqJeaJa564.roa (hash: mcE4tKe136UsFISwUkQg3BCl5f/Ei1vauiMoTq7oiwk=)
                          11: wpHu7PmobROHLnmGNc51P1d5MCE.roa (hash: NBlc1zZHE0+7DuTBtU+rdLWUFogjMMenQ6FPsfb2nas=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:35:de:aa:bd:9a:61:4e:4f:d2:ea:2f:39:de:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
        Validity
            Not Before: Mar 29 05:00:52 2025 GMT
            Not After : Mar 30 05:00:52 2025 GMT
        Subject: CN=1ecbaf107fd898a83f50ec4e1a549854f46c0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:2c:71:8f:42:cc:ff:0b:91:06:09:87:d9:
                    0c:3e:96:9d:f0:44:e6:91:fe:36:27:39:ea:65:2d:
                    32:de:90:20:62:4e:7a:5d:0a:89:c0:70:20:14:a8:
                    bc:67:05:91:21:a0:f8:68:9c:77:3a:87:4e:9f:62:
                    2a:80:79:d6:64:96:6c:75:ce:4b:dc:b4:be:49:3a:
                    d5:d2:04:8e:1e:47:7a:37:de:0b:bf:83:bc:41:3b:
                    c0:aa:e5:23:ad:ff:99:04:30:dd:22:f4:0a:b7:fd:
                    83:69:28:b5:c9:6d:f9:9a:6f:a7:e5:83:a9:e3:d5:
                    f6:fb:6e:de:f8:36:33:cb:6a:9c:fe:9a:f2:cb:93:
                    ac:26:fb:f8:29:cf:58:5b:2e:d8:fa:e1:1e:00:3b:
                    85:28:59:b0:7e:cc:60:79:db:d0:31:6b:79:ce:45:
                    7d:dc:3b:1f:de:3a:55:b4:cc:33:3b:e4:3c:26:00:
                    93:06:83:ec:9b:7c:98:58:19:d3:5e:7b:c0:8a:ee:
                    51:dd:69:8d:d3:a8:2a:a7:56:ea:fb:e0:03:7d:72:
                    91:f0:5f:d4:a6:03:81:a4:2e:64:bc:a5:25:94:40:
                    1b:e5:f2:55:a0:30:37:d7:a1:8b:e6:ed:c9:ea:3e:
                    ad:8a:9f:1a:6c:a2:76:a8:09:cb:5e:fa:fa:ea:b4:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CB:AF:10:7F:D8:98:A8:3F:50:EC:4E:1A:54:98:54:F4:6C:02:40
            X509v3 Authority Key Identifier:
                keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:7a:07:3f:38:e6:42:08:72:44:73:0f:d5:4d:4c:7c:4d:
         63:c7:9b:da:73:ff:58:7f:25:c1:a6:97:a8:bc:c9:24:5f:56:
         c9:83:45:3d:59:17:2c:b5:13:2d:63:d3:1f:a5:4e:04:3f:99:
         d3:f5:3d:7f:94:63:61:77:38:a6:a3:e3:19:b2:8c:cc:74:25:
         86:28:ef:38:46:91:d2:b1:2b:c2:ac:02:a1:bf:b1:ee:1b:76:
         81:fa:a6:63:a0:b2:a7:38:a7:33:80:6f:6d:36:22:03:65:3d:
         6c:82:a4:2f:51:f7:ed:aa:ba:e6:1a:a3:4c:5c:20:a1:2a:3f:
         81:05:40:25:16:71:ba:f5:a3:a5:e0:d9:90:4b:b0:13:8b:78:
         f9:a4:c3:24:d9:94:e1:b9:9c:88:26:62:b6:c5:c3:5a:b5:d8:
         cf:f9:79:d4:38:7b:72:c9:c9:f2:bd:6d:b1:7b:2d:98:bc:e9:
         6f:c0:d4:28:f6:82:ba:98:74:b0:8c:6f:03:86:9b:4a:60:7f:
         ee:c2:ea:12:e4:f9:dc:8f:28:b8:ab:2d:5f:89:ce:7a:d2:e9:
         2b:4b:5f:32:1a:c1:82:97:90:b2:fb:09:93:f2:19:50:f8:c2:
         2b:ff:86:b3:64:56:81:22:55:d2:df:97:22:34:ca:18:28:3c:
         f5:a8:4e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----