Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
File:                     yJtbKWmeLdQYBAwO33UAhdhyBEI.mft (raw, json)
Hash identifier:          UdhDYh3X13bJX8yRAwvWuBTJPFSnkByxv/aSoPuphRI=
Subject key identifier:   AD:58:F1:E4:AE:08:DA:51:97:EB:65:14:D2:9C:A4:EC:4F:C9:E0:46
Authority key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Certificate issuer:       /CN=c89b5b29699e2dd418040c0edf750085d8720442
Certificate serial:       01962F74B2785860B0B3E3E9AAFD22B5A8B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
Manifest number:          0BBC
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: yJtbKWmeLdQYBAwO33UAhdhyBEI.crl (hash: Z7o96MqiuXRuCfjfZ2HwCDSOg3d+zcZ94p5D352R5h4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b2:78:58:60:b0:b3:e3:e9:aa:fd:22:b5:a8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89b5b29699e2dd418040c0edf750085d8720442
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=ad58f1e4ae08da5197eb6514d29ca4ec4fc9e046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:32:21:97:f0:fe:4d:86:be:46:c6:02:88:
                    65:2b:6a:37:9c:b6:51:76:c8:91:89:d4:53:e4:39:
                    35:01:2d:b3:7a:d7:04:81:0b:8d:5e:37:33:6e:d5:
                    b7:e2:85:b1:a3:47:b1:85:ec:f4:c0:9d:f5:1f:ea:
                    a2:f6:b5:19:be:2a:18:3d:21:f6:e7:b9:8e:58:33:
                    7f:fd:78:34:6c:88:69:d6:58:31:27:8d:02:2d:35:
                    11:b2:85:cf:33:58:2e:7c:18:f0:4d:60:34:d1:07:
                    fd:86:d7:f3:99:1e:78:06:6c:22:e6:bb:05:6f:fb:
                    8d:6f:2c:56:f2:53:b9:2d:ba:1d:9e:ee:12:a8:1f:
                    15:de:ee:b9:e8:99:46:29:4c:2d:f7:44:af:45:66:
                    c2:1a:83:59:1f:16:98:b0:8c:7b:57:74:ef:76:87:
                    58:ce:ef:c2:34:a8:c2:ea:ac:94:47:c4:44:0a:91:
                    8f:9c:24:b3:1b:1b:ab:ac:ad:f9:3e:d6:f1:0d:59:
                    42:47:db:f1:63:08:15:e6:a8:5d:8e:ad:58:94:90:
                    43:8c:0c:c3:ca:d9:28:e2:32:a2:f1:3a:9a:ba:da:
                    99:90:31:0a:aa:dd:ce:49:e9:2e:53:eb:a3:a5:8b:
                    21:5d:44:f9:a8:82:ee:31:a7:d3:75:e4:cf:4d:be:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:58:F1:E4:AE:08:DA:51:97:EB:65:14:D2:9C:A4:EC:4F:C9:E0:46
            X509v3 Authority Key Identifier:
                keyid:C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c3:0b:11:f6:b4:62:2d:82:e6:fb:22:67:57:0a:46:95:94:
         10:9e:cc:53:8a:8c:a5:73:08:55:fc:f7:2b:ed:5a:e9:9f:79:
         92:ef:0d:5c:0b:ed:a4:51:89:28:3d:90:a3:08:2a:84:fa:b9:
         ef:57:25:ef:b5:f8:41:40:40:99:72:d1:33:fb:5b:f7:be:90:
         f5:f8:34:11:74:3a:6b:f8:65:a6:2b:00:b0:f2:68:ac:fa:17:
         64:3b:20:8e:64:1c:93:67:d6:61:74:33:ed:49:70:43:65:82:
         5f:c4:7e:57:ac:ff:27:79:55:c9:1f:ef:8d:da:dd:c2:2c:d7:
         50:e8:05:12:1e:69:c2:2c:e7:10:94:88:93:d8:20:43:21:e1:
         a2:7a:b1:e1:3e:c5:64:d4:d0:66:2e:e8:e3:00:36:87:99:c8:
         44:db:26:e7:bd:e2:9a:cf:43:6b:12:57:2f:0e:f4:2a:78:11:
         d4:e0:0b:92:8d:fe:98:85:83:60:51:1b:1f:fa:d5:29:aa:1a:
         74:33:0b:84:40:f7:09:78:b6:ff:c9:34:7a:7d:ad:9f:43:c8:
         6e:cc:9b:47:ed:fa:f1:9c:58:46:46:e4:40:25:9e:49:d8:9d:
         67:a6:61:79:ca:0e:02:62:e8:17:f2:3a:bf:41:30:c1:0b:3b:
         46:7c:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----