Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
File:                     ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft (raw, json)
Hash identifier:          BKr/IezTWPMrGwedGW7sGVym9nVhUjMcJMyo/kEIU3A=
Subject key identifier:   03:4E:9F:B9:F8:42:71:5C:E9:F8:C4:79:9D:79:2E:7E:B0:E0:42:A5
Authority key identifier: CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9
Certificate issuer:       /CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
Certificate serial:       01962F74A7F5FCBF2F33672152C1D3DED0BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl (hash: 2nZDKsYwO33pfxfHipyJ/OTIDQGrw+kiIMAGyZBIXZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a7:f5:fc:bf:2f:33:67:21:52:c1:d3:de:d0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca457e1173c4e851b92d3c8ee9967151948a9ae9
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=034e9fb9f842715ce9f8c4799d792e7eb0e042a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:1a:18:82:0c:b5:7e:fa:af:fe:85:15:60:
                    95:ec:a7:1d:f9:d9:8d:dc:e4:c3:d8:a6:61:08:98:
                    97:17:98:8f:c7:09:d7:f2:67:e8:9a:f8:78:24:a7:
                    2c:48:b5:88:f8:1c:80:73:da:af:ad:e5:a3:d9:fd:
                    28:f1:45:01:1a:3e:8b:bc:f3:62:ca:c9:c0:cd:59:
                    6b:b7:89:1b:c1:6e:3a:6f:c4:57:d7:de:f8:3f:9c:
                    3c:d0:ff:af:07:6e:50:1d:f9:59:2a:ca:95:4f:ba:
                    7f:03:b1:20:93:03:48:19:a2:81:c0:77:67:88:b6:
                    9d:62:c4:81:c8:be:d1:79:a8:14:23:3e:ee:71:d7:
                    7a:3c:da:78:b7:24:d4:a2:f8:a1:71:f8:9c:18:fc:
                    21:27:67:47:70:41:c0:f2:98:fa:a6:5c:57:6a:e7:
                    db:13:82:67:1f:e1:05:8c:10:04:45:fe:b5:cf:1a:
                    f0:9d:66:fd:82:50:3e:35:88:ff:d5:dc:71:cd:19:
                    a4:65:ef:4b:36:23:8b:5f:b6:6d:8d:ba:4d:e1:83:
                    88:0c:17:65:c7:b7:e2:78:e1:98:48:9b:9e:35:3f:
                    3f:6f:d9:67:d2:79:8f:a8:1b:a5:57:2a:f3:d2:a9:
                    6b:53:a6:75:af:59:50:99:c9:72:01:f6:fc:7f:b3:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4E:9F:B9:F8:42:71:5C:E9:F8:C4:79:9D:79:2E:7E:B0:E0:42:A5
            X509v3 Authority Key Identifier:
                keyid:CA:45:7E:11:73:C4:E8:51:B9:2D:3C:8E:E9:96:71:51:94:8A:9A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5fbb69-9b7e-43be-8904-19de2c183c05/1/ykV-EXPE6FG5LTyO6ZZxUZSKmuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:91:62:01:62:4f:31:1e:7f:6d:09:94:22:1c:d3:27:fc:e3:
         2a:d2:cf:0e:ae:a8:ef:7c:84:1c:f5:6b:41:23:29:1a:41:9e:
         1a:72:d2:c9:2f:66:78:af:05:7b:7d:18:3b:e2:c6:5e:2a:d4:
         14:fa:1b:10:b7:5f:37:a5:26:dc:b6:65:dd:1c:69:e9:d2:6e:
         58:0d:e5:8e:b8:78:66:ac:91:9d:ba:4e:34:a9:3e:4f:5c:fe:
         10:4d:62:dd:18:8f:bb:bc:33:d8:40:ac:0b:d4:ef:ba:dc:d5:
         6a:8c:de:21:b5:5b:66:12:f8:71:32:84:39:4c:5d:0a:37:2a:
         1a:6f:c2:01:ab:34:56:91:28:70:52:3f:6e:33:dc:38:3a:cf:
         91:74:89:81:24:57:b4:94:55:3e:4a:24:14:35:bf:bb:3e:77:
         4c:56:41:f3:73:7e:89:28:d5:74:ed:7a:d9:a8:66:29:40:e1:
         e8:c3:f3:7e:0d:76:c8:f6:05:29:07:62:17:4f:6d:51:d4:e7:
         ca:67:bd:b7:1e:8a:e2:6f:68:c0:dc:61:b3:7c:63:ed:07:75:
         c5:a0:4e:71:d2:06:d5:89:fc:24:70:4a:14:84:c8:3a:ba:9b:
         ee:60:93:3d:ad:04:b4:b7:23:0d:2e:a2:f5:0a:33:77:c7:67:
         56:7a:a2:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKf1/L8vM2chUsHT3tC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNDU3ZTExNzNjNGU4NTFiOTJkM2M4ZWU5OTY3MTUxOTQ4
YTlhZTkwHhcNMjUwNDEzMTQwMTM2WhcNMjUwNDE0MTQwMTM2WjAzMTEwLwYDVQQD
EygwMzRlOWZiOWY4NDI3MTVjZTlmOGM0Nzk5ZDc5MmU3ZWIwZTA0MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOsaGIIMtX76r/6FFWCV7Kcd+dmN
3OTD2KZhCJiXF5iPxwnX8mfomvh4JKcsSLWI+ByAc9qvreWj2f0o8UUBGj6LvPNi
ysnAzVlrt4kbwW46b8RX1974P5w80P+vB25QHflZKsqVT7p/A7EgkwNIGaKBwHdn
iLadYsSByL7ReagUIz7ucdd6PNp4tyTUovihcficGPwhJ2dHcEHA8pj6plxXaufb
E4JnH+EFjBAERf61zxrwnWb9glA+NYj/1dxxzRmkZe9LNiOLX7ZtjbpN4YOIDBdl
x7fieOGYSJueNT8/b9ln0nmPqBulVyrz0qlrU6Z1r1lQmclyAfb8f7OvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANOn7n4QnFc6fjEeZ15Ln6w4EKlMB8GA1UdIwQY
MBaAFMpFfhFzxOhRuS08jumWcVGUiprpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWtWLUVYUEU2Rkc1TFR5TzZaWnhVWlNLbXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZmJiNjktOWI3ZS00M2JlLTg5MDQt
MTlkZTJjMTgzYzA1LzEveWtWLUVYUEU2Rkc1TFR5TzZaWnhVWlNLbXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZmJiNjktOWI3ZS00M2JlLTg5MDQtMTlkZTJjMTgzYzA1
LzEveWtWLUVYUEU2Rkc1TFR5TzZaWnhVWlNLbXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJFiAWJP
MR5/bQmUIhzTJ/zjKtLPDq6o73yEHPVrQSMpGkGeGnLSyS9meK8Fe30YO+LGXirU
FPobELdfN6Um3LZl3Rxp6dJuWA3ljrh4ZqyRnbpONKk+T1z+EE1i3RiPu7wz2ECs
C9TvutzVaozeIbVbZhL4cTKEOUxdCjcqGm/CAas0VpEocFI/bjPcODrPkXSJgSRX
tJRVPkokFDW/uz53TFZB83N+iSjVdO162ahmKUDh6MPzfg12yPYFKQdiF09tUdTn
yme9tx6K4m9owNxhs3xj7Qd1xaBOcdIG1Yn8JHBKFITIOrqb7mCTPa0EtLcjDS6i
9Qozd8dnVnqixA==
-----END CERTIFICATE-----