Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
File:                     0Yx5_S1sxF7htYD5OgUFxZffbYk.mft (raw, json)
Hash identifier:          7FZ9yXqjYJMtFyZ1h7ZajBLcOhVLnls8HSdwx7PEX5k=
Subject key identifier:   C9:B0:79:40:61:CA:54:C7:8A:8F:FA:F7:B1:05:F9:79:00:6B:06:FB
Authority key identifier: D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89
Certificate issuer:       /CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
Certificate serial:       01962F06521FD23AA6AAA99B4C49B71B5B8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft
Manifest number:          03FC
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: 0Yx5_S1sxF7htYD5OgUFxZffbYk.crl (hash: GESPPH3ru5cPrmhH4oToQpBpYyGjS8OGWx0XhnjcGog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:52:1f:d2:3a:a6:aa:a9:9b:4c:49:b7:1b:5b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c79fd2d6cc45ee1b580f93a0505c597df6d89
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=c9b0794061ca54c78a8ffaf7b105f979006b06fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b3:f6:74:5e:3d:34:85:ef:3a:43:d2:21:7c:
                    b9:6d:19:c2:98:cd:35:c2:2f:a4:30:8f:d4:78:bd:
                    4b:5d:f5:c1:7f:55:2a:dc:ff:5c:74:d5:41:9d:1a:
                    4d:19:44:00:4c:4d:68:37:df:a4:c6:7b:fc:81:2f:
                    80:95:1c:13:79:24:e0:3c:a9:08:df:31:3d:1e:81:
                    a3:b4:f9:6e:c7:14:22:26:f9:8a:c1:a9:92:71:c5:
                    7f:fb:2f:82:8c:aa:8c:8d:3c:f9:03:42:f1:69:18:
                    f6:e7:bf:92:8d:e5:2f:b4:40:0d:05:61:f4:df:d2:
                    41:2f:0b:4a:7c:7a:38:bf:e7:85:39:bd:91:3b:48:
                    b3:03:82:84:9a:63:2b:9b:ae:c7:9d:70:86:50:4f:
                    9f:49:d3:4a:bf:64:5e:c6:fb:9b:be:08:2c:3d:22:
                    7c:05:4b:3b:9b:19:a8:f6:61:8b:00:66:73:5d:4f:
                    76:c0:56:c1:17:12:7e:34:fd:d5:fb:b5:cb:ac:ff:
                    81:49:2f:b2:58:ea:74:0c:f0:8b:37:96:bf:88:c9:
                    2f:69:c0:00:d8:0c:8d:8d:9d:b0:a1:b2:40:25:06:
                    83:43:cc:38:28:c8:1f:66:0d:57:6e:c2:a7:8a:7d:
                    7d:2a:c5:27:ff:d0:32:a7:be:70:d2:c7:e9:fd:65:
                    9e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:79:40:61:CA:54:C7:8A:8F:FA:F7:B1:05:F9:79:00:6B:06:FB
            X509v3 Authority Key Identifier:
                keyid:D1:8C:79:FD:2D:6C:C4:5E:E1:B5:80:F9:3A:05:05:C5:97:DF:6D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Yx5_S1sxF7htYD5OgUFxZffbYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/02669d-9f6c-4bc1-ae4b-9a11c34c2fe2/1/0Yx5_S1sxF7htYD5OgUFxZffbYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:8b:72:42:2f:ca:83:61:fe:6c:34:44:9c:bc:de:d8:18:
         bb:ea:6e:da:64:59:08:c6:e1:61:98:ce:73:a7:66:b3:43:ba:
         5e:63:fc:df:fa:86:46:cd:c3:09:34:ae:90:fd:a9:c9:d3:93:
         24:01:74:a5:aa:84:1c:9a:e3:3d:d1:ff:ac:ee:a7:65:6f:6d:
         ba:d4:2f:ac:77:75:12:cf:83:7e:e4:2b:da:63:30:73:90:17:
         1c:af:54:a4:8a:80:a1:2b:4a:98:6e:9b:d0:93:df:04:20:d7:
         a9:5a:9d:9c:f6:7a:0d:0e:2f:c2:c8:8e:8c:dc:a9:6b:1a:89:
         d0:9a:42:06:a4:ed:ae:a2:d2:fd:83:14:39:4a:e3:88:24:f5:
         02:29:79:f8:b6:7a:3a:c8:9a:d2:69:aa:c2:84:63:0a:5d:74:
         1d:35:79:22:26:db:66:ec:4d:d3:7b:7e:40:85:9d:3f:d0:93:
         e0:32:14:47:28:23:88:6e:7e:f8:66:91:80:7b:68:51:37:bc:
         62:e5:54:de:31:bf:d2:20:be:54:09:c9:7a:fd:90:61:3d:e2:
         6d:a1:9d:89:66:05:4f:ee:aa:d1:1e:23:c1:d6:d3:c7:53:a2:
         81:d5:86:bd:56:c5:c6:e5:80:9b:25:48:31:a9:df:99:88:68:
         6a:9c:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----