Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
File:                     20YNIBeVpqmS7UrBi7fFLBCLeFI.mft (raw, json)
Hash identifier:          Iwz28BFVcHFZ6Dey4fkV1U34KHH41mK0MUHnG/yAOUw=
Subject key identifier:   FD:E7:CB:DD:6A:14:68:71:39:D8:77:DD:7D:92:6F:92:CD:3F:D3:58
Authority key identifier: DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52
Certificate issuer:       /CN=db460d201795a6a992ed4ac18bb7c52c108b7852
Certificate serial:       01962F3D5F3DD7978A9347E404C6289356B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:13 +0000
Files and hashes:         1: 20YNIBeVpqmS7UrBi7fFLBCLeFI.crl (hash: /rnWFOnc9QUjYGqTofgA56BD/h/E14lE9x0pPV3FiXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5f:3d:d7:97:8a:93:47:e4:04:c6:28:93:56:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db460d201795a6a992ed4ac18bb7c52c108b7852
        Validity
            Not Before: Apr 13 13:01:13 2025 GMT
            Not After : Apr 14 13:01:13 2025 GMT
        Subject: CN=fde7cbdd6a14687139d877dd7d926f92cd3fd358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f3:79:42:b0:03:35:eb:8c:77:8f:ad:0a:ae:
                    80:aa:c2:58:bb:3f:ab:54:08:c1:a9:32:fb:5e:89:
                    4a:fb:e2:b5:b6:1b:cf:72:27:79:16:3b:41:76:6a:
                    94:f9:b7:23:15:70:0f:c5:85:74:e7:33:5b:4c:87:
                    c0:c6:91:9a:b1:fc:db:0a:79:e5:df:4f:f2:aa:46:
                    5f:82:a8:cb:a1:8a:61:72:16:06:d8:a6:01:5c:27:
                    06:76:73:57:38:72:89:44:39:41:eb:1a:e8:11:e9:
                    a6:fb:ed:2e:8d:20:ee:68:1b:b0:83:fb:aa:86:90:
                    1a:78:b3:a8:67:13:77:13:89:a6:36:e8:eb:79:42:
                    e1:4f:37:19:8a:a1:19:a9:3a:92:44:b7:8c:69:34:
                    93:7e:26:56:03:27:62:ca:8c:af:38:f0:28:7e:76:
                    72:c0:c0:ff:b9:61:f1:58:66:4b:72:12:e6:5b:3b:
                    09:75:7c:37:f0:41:96:da:c7:5f:f9:7f:ac:3d:1c:
                    6e:05:ac:32:e6:ce:d5:c5:75:e0:2f:98:74:4c:b1:
                    a3:23:b4:84:dd:88:63:c7:24:c4:bc:ac:19:0a:ce:
                    0c:d9:a7:f1:7d:9a:1a:d3:e3:d9:63:b8:92:00:63:
                    a8:2b:e9:94:4f:02:7e:ea:10:1e:06:58:ec:57:b2:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:CB:DD:6A:14:68:71:39:D8:77:DD:7D:92:6F:92:CD:3F:D3:58
            X509v3 Authority Key Identifier:
                keyid:DB:46:0D:20:17:95:A6:A9:92:ED:4A:C1:8B:B7:C5:2C:10:8B:78:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20YNIBeVpqmS7UrBi7fFLBCLeFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f346a-a87d-4957-a4ce-e82ed3d76a87/1/20YNIBeVpqmS7UrBi7fFLBCLeFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:6d:c5:27:14:23:f0:36:96:b1:6d:f1:ad:0a:27:48:3d:
         23:24:f3:5d:40:fa:b2:32:94:ce:95:b7:03:cc:95:dd:98:79:
         da:32:62:1a:6d:76:b6:e4:4a:d9:e9:48:26:f7:a4:fc:af:8d:
         ef:e6:fd:29:a2:68:d2:4e:6d:61:5f:58:94:eb:63:54:ed:b0:
         ed:52:88:82:59:d4:e5:9f:32:68:40:e6:15:2a:82:16:8a:7f:
         5d:8f:f9:af:0c:9b:3a:ac:cb:ba:79:bb:3b:21:34:8e:28:3b:
         11:97:2f:5a:3a:f6:41:52:f4:12:48:5d:9d:08:8c:82:c9:e0:
         41:fc:b8:12:3f:43:aa:4b:0b:81:e4:f0:eb:16:25:eb:ca:15:
         9d:5a:bf:a5:e2:52:68:59:34:c1:be:fa:bb:50:f8:12:bd:35:
         76:4a:60:31:3b:b6:a7:59:a8:8f:75:e9:98:e3:b0:b1:a0:f5:
         5c:b6:50:00:1e:23:f0:08:54:53:63:ae:04:98:c4:df:3c:65:
         18:bc:ab:1f:7c:ba:da:fb:19:00:7b:ce:84:54:f7:b9:35:70:
         16:1c:89:30:71:9d:20:75:0f:a0:a4:2e:e0:91:75:da:1d:7e:
         80:21:73:66:e5:e0:e5:5c:1e:fb:3c:ab:bf:7f:e5:a6:a8:4c:
         a8:0f:f0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----