Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
File:                     ya3PjO-lllmLJLm2q2UHDdkcp5w.mft (raw, json)
Hash identifier:          oOYSkOMIClU8i6blaoQ+Th1YcWJydYlpCjFiLwEbyRs=
Subject key identifier:   A1:02:1D:57:E0:20:F9:70:6A:49:98:D9:DC:0E:80:41:40:A6:8E:09
Authority key identifier: C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C
Certificate issuer:       /CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
Certificate serial:       01962E99458C92B531115453F1EE0530A693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft
Manifest number:          0591
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: ya3PjO-lllmLJLm2q2UHDdkcp5w.crl (hash: EY3Kx+aJ0/vz0XaE3v5Rs0JLH5rplXCZZX1Ha2ulHe8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:45:8c:92:b5:31:11:54:53:f1:ee:05:30:a6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9adcf8cefa596598b24b9b6ab65070dd91ca79c
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=a1021d57e020f9706a4998d9dc0e804140a68e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:20:a8:fa:7d:91:e9:4e:97:e8:b8:fd:2c:
                    24:3a:d3:38:ab:79:00:1a:a7:59:5d:f1:23:ca:39:
                    91:b9:05:ff:fd:04:43:11:96:34:fc:23:27:80:94:
                    e8:ff:d1:8b:ba:57:be:6e:cb:67:7b:9d:34:1c:2c:
                    4a:e7:bd:47:7b:06:83:5a:76:dc:9b:2c:16:7b:5b:
                    61:b5:21:cc:63:cb:e9:78:be:48:67:53:bf:e0:89:
                    69:b7:5e:32:80:f4:26:59:5e:85:07:0d:88:18:55:
                    48:77:87:22:90:cc:93:43:35:12:aa:89:b9:63:26:
                    2a:27:44:b9:94:61:a2:50:06:4d:2a:63:3c:72:50:
                    16:cd:a9:19:ea:52:13:7a:da:ce:7d:ae:64:83:23:
                    a6:f8:ed:9a:ae:e7:6a:12:07:59:48:5d:20:d5:ea:
                    16:33:e8:5c:f6:70:6d:26:e6:91:8b:f3:97:2b:98:
                    bd:36:b1:e7:d4:85:b5:f9:66:e5:3f:9d:1f:76:9c:
                    46:7a:f3:7e:76:6b:3d:53:61:00:25:bc:c2:00:d4:
                    b3:4f:b7:fb:f0:3d:48:fc:b8:c8:19:8d:c1:2b:ae:
                    f5:b7:06:5b:c1:8b:7a:eb:9c:e2:b0:14:5c:30:9b:
                    89:65:26:99:10:de:90:ce:87:42:eb:50:44:4e:2e:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:02:1D:57:E0:20:F9:70:6A:49:98:D9:DC:0E:80:41:40:A6:8E:09
            X509v3 Authority Key Identifier:
                keyid:C9:AD:CF:8C:EF:A5:96:59:8B:24:B9:B6:AB:65:07:0D:D9:1C:A7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya3PjO-lllmLJLm2q2UHDdkcp5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b0057c-5472-48d5-b107-c55372fab335/1/ya3PjO-lllmLJLm2q2UHDdkcp5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:4f:bb:d5:4c:4a:ee:54:b4:09:5f:f1:3d:2e:ac:39:62:
         20:2c:f5:5c:01:bc:e5:9b:43:c7:f1:39:af:06:5b:39:49:9f:
         dc:75:b6:ce:60:03:0f:32:4e:c2:a2:3f:14:da:db:9f:dd:67:
         ed:cf:fb:8f:77:45:c4:6f:38:e4:42:85:96:17:f3:55:0d:d4:
         31:c7:00:94:8f:c8:04:4e:a0:a4:8a:e2:e0:0b:0f:32:a5:cf:
         c1:0f:99:0c:5b:d5:e6:9e:91:9d:cf:5b:59:c7:13:cd:31:d2:
         4d:6d:5d:a8:1f:86:c2:d0:dd:3c:79:c4:17:e5:47:d4:d7:13:
         07:91:ad:0a:36:8d:0a:ce:ce:03:92:0a:6b:60:b3:47:16:57:
         15:ee:69:bc:63:3e:97:13:7a:10:40:6f:ef:74:27:db:5b:f0:
         c3:e3:13:d4:4e:03:dd:6a:c0:52:c1:dc:95:27:90:dd:01:cd:
         54:d1:42:cc:47:f4:cc:f3:8d:5d:92:eb:9c:80:db:99:5d:e1:
         43:e0:0a:00:6e:52:22:55:3c:35:e9:3b:c0:3a:3a:3b:ec:8a:
         73:7e:6a:1f:45:9b:98:b4:2d:37:c7:9d:c4:f9:0a:d8:d1:f7:
         bc:d6:54:1a:49:0f:f7:10:9a:0e:e8:1b:22:44:7d:39:53:bb:
         9b:dd:0e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----