Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
File:                     YTChAogFFzqiJUSk67mECskbyNA.mft (raw, json)
Hash identifier:          G4/DYAgaqBHO0BcrV0TzxsvdaJPYPmaBQiTiLKvWhjk=
Subject key identifier:   71:3B:1A:6F:C2:9F:1D:34:FF:3B:CD:C1:EB:25:01:62:11:C9:3B:43
Authority key identifier: 61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0
Certificate issuer:       /CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
Certificate serial:       01962E997F643227AC0558B3788394B671D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: YTChAogFFzqiJUSk67mECskbyNA.crl (hash: 8JNmj/kBhBCpHdGSF35n+fPDYs2VjbEASZ24/An4zKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7f:64:32:27:ac:05:58:b3:78:83:94:b6:71:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6130a1028805173aa22544a4ebb9840ac91bc8d0
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=713b1a6fc29f1d34ff3bcdc1eb25016211c93b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5f:1a:ce:ce:80:68:45:23:1b:2a:eb:30:a0:
                    1f:f2:fc:8a:46:0d:3c:f2:c8:17:76:11:ff:57:a4:
                    5b:f8:c5:f9:8c:1d:3d:85:d8:3c:b1:de:aa:fd:5e:
                    75:e4:4f:f5:e9:b9:59:72:75:99:3a:46:ea:1c:f0:
                    bb:18:63:61:36:ab:b9:0b:e6:c4:8f:5c:c2:1a:9b:
                    67:4c:8c:24:33:6c:68:85:77:f6:60:e1:d8:c1:4c:
                    7b:1f:e7:09:41:03:f1:ce:00:2e:1e:d0:20:8d:2e:
                    ca:34:67:3c:49:91:5f:2b:11:40:f5:51:ab:6e:7d:
                    36:1a:ce:89:85:ff:70:9f:52:7f:d0:fa:fd:c1:9e:
                    0e:57:0c:0e:c5:82:09:02:d0:44:04:ed:ec:c8:46:
                    9e:10:67:83:0b:95:f0:e1:2f:37:bd:51:49:0a:b4:
                    d2:f2:ff:17:b9:fe:cd:e7:22:f4:e8:d1:ff:b7:8f:
                    83:30:bd:25:6c:2e:bc:04:b8:d9:c2:07:24:96:b2:
                    bb:9a:28:c1:7a:e9:36:a1:5b:d8:96:41:39:0d:9b:
                    c8:94:f5:b9:e1:9d:f4:7a:cb:ea:8e:e0:7a:7f:85:
                    15:8e:43:8c:96:ee:cd:59:cb:ac:44:e1:a7:7f:b7:
                    ff:68:88:a1:2c:72:d4:fc:70:84:73:31:de:07:48:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3B:1A:6F:C2:9F:1D:34:FF:3B:CD:C1:EB:25:01:62:11:C9:3B:43
            X509v3 Authority Key Identifier:
                keyid:61:30:A1:02:88:05:17:3A:A2:25:44:A4:EB:B9:84:0A:C9:1B:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTChAogFFzqiJUSk67mECskbyNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/3ae863-690e-4631-9120-a53b5e979131/1/YTChAogFFzqiJUSk67mECskbyNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:0a:29:0a:23:23:fb:ce:c6:d2:b5:1f:c7:10:3f:19:0f:04:
         79:f9:f1:c4:8c:48:56:63:6c:98:b6:87:76:ba:15:4a:55:3e:
         41:ac:cb:5c:5b:05:e5:88:78:94:f1:1c:2d:51:c9:ce:8c:82:
         5e:e8:d7:26:6c:21:d5:c7:a6:6a:de:f5:9d:e6:b3:dd:f1:87:
         ca:6d:c9:c2:d8:5e:e3:82:21:ca:9e:ad:22:e0:80:e7:1e:1c:
         33:55:9f:1f:58:eb:21:98:de:95:12:4b:18:d4:06:45:e4:49:
         df:cc:d8:7a:69:9f:31:1a:23:78:5c:8d:21:c8:b7:93:14:a6:
         bb:df:ce:7e:64:f1:4b:b9:31:be:97:d0:d5:a7:cc:8b:04:03:
         42:2a:b0:0c:51:ab:39:d8:cb:d4:10:c2:6a:49:49:5c:a3:9a:
         4c:f0:f4:a1:22:fd:b5:39:cb:e0:55:13:f2:3b:f6:48:0b:7c:
         ff:11:0a:14:b9:2f:cd:98:1e:ba:e2:19:cd:cb:1e:19:c2:61:
         c2:44:7a:57:a0:e4:2a:f5:a2:d3:97:ec:b1:a2:17:b5:06:93:
         02:d9:6a:09:f0:09:51:64:3f:38:0d:8a:a5:de:d2:67:c2:7d:
         d2:f4:1d:e9:34:a5:ad:bf:52:f8:08:3d:0b:1d:e7:b3:a8:ca:
         98:42:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----