Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File:                     yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier:          QFNw3iZsMSOkmZ56oKPihgHnnBVdwpJy+nU1NJKoVZ0=
Subject key identifier:   FD:B4:D8:C6:D9:F4:11:B3:1D:1C:90:ED:9A:16:5E:E6:7F:CA:5F:F3
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer:       /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial:       01962F749488C3ECB9E9C088AC2D1C792E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number:          0E4B
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: uyqUjp08OaC0laBmAo/nfPgPC2y0vo/VonpWVmEk49I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:88:c3:ec:b9:e9:c0:88:ac:2d:1c:79:2e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=fdb4d8c6d9f411b31d1c90ed9a165ee67fca5ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:3f:e4:05:f7:bc:7a:62:5b:43:bc:63:5f:
                    8f:1f:b3:60:34:3f:08:cc:da:aa:88:1c:91:35:80:
                    ea:3a:39:ff:12:47:dc:43:98:6e:33:e0:d8:7a:8a:
                    11:8b:f9:c0:b2:cf:1d:81:13:bd:b2:d0:63:3b:8e:
                    22:67:36:e0:41:a1:f7:88:e6:74:ec:07:79:f2:2e:
                    b8:09:16:49:13:c4:9d:24:ab:1f:36:c6:48:37:50:
                    92:82:e0:c9:03:50:32:28:e9:27:e6:c5:13:c4:7f:
                    79:95:ee:d6:b5:77:ae:7d:f8:61:45:33:f7:36:da:
                    b6:2f:60:ef:d1:f9:e0:b1:29:c4:cf:de:e1:72:5e:
                    48:ca:88:7e:a1:70:22:59:35:d6:f3:05:f9:1c:db:
                    4b:7b:53:e8:de:49:5f:fc:9f:a9:47:24:da:2b:b3:
                    dc:5a:43:71:df:bc:bb:4c:c5:07:5e:3a:29:5e:71:
                    fb:14:c0:25:57:16:09:f8:56:54:9c:77:bb:7d:f8:
                    58:05:6c:a0:43:f6:7e:55:87:5d:d8:f5:cf:d5:ac:
                    af:4f:bb:da:36:b0:33:b2:b9:36:2b:d9:de:32:a1:
                    6f:b5:e6:64:5c:55:5e:5c:34:8b:db:72:31:05:82:
                    3a:61:13:cb:0d:e5:e7:ab:6b:42:4f:85:7f:19:41:
                    27:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B4:D8:C6:D9:F4:11:B3:1D:1C:90:ED:9A:16:5E:E6:7F:CA:5F:F3
            X509v3 Authority Key Identifier:
                keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:55:3e:df:57:0f:5e:a6:71:02:5b:02:87:05:a7:bb:3e:
         cb:0f:12:4f:f9:53:93:1f:a8:ad:5d:8d:2f:51:fc:d3:5f:e4:
         1f:4d:4e:f1:a9:b2:3e:59:92:4b:ba:03:56:fa:bd:a7:6b:a9:
         4b:b0:39:18:e3:74:ac:43:67:e0:ab:83:f9:de:e5:04:b0:0e:
         81:06:f8:c1:3e:53:65:3e:59:fd:8a:a4:06:ea:68:d3:ad:24:
         73:9a:a4:6c:8d:08:d5:af:1c:9e:f4:e2:94:2b:c8:3d:37:a4:
         62:cc:f4:92:01:b9:14:fc:83:c3:b2:6b:45:ea:6c:91:a5:0d:
         ed:2b:e8:b6:20:b0:3a:02:bc:ec:43:72:e5:34:63:a9:20:07:
         13:c3:72:ca:77:07:dd:41:81:0a:61:d3:34:a9:96:32:99:af:
         da:c6:48:0a:86:d8:19:cc:79:0c:94:93:0d:82:6b:7b:41:43:
         2a:21:ce:a5:76:01:e6:8b:02:16:fb:40:6c:a0:f3:c6:99:f7:
         6d:e3:c8:1a:c3:32:45:3d:41:f5:e9:64:4a:fc:d0:59:29:c4:
         77:51:7b:b9:0a:f7:13:76:df:f2:5e:92:06:41:e8:51:45:1f:
         60:63:6b:9c:d6:e6:c7:7f:ee:0a:d1:21:67:4d:4f:e1:29:87:
         1f:4c:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----