Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
File:                     Ywmu_236ieZ1g35FRSEjXJmxvi8.mft (raw, json)
Hash identifier:          NhXZ0APU4Z23KALtNhmWrD+4vbHmacvvgETGhggV7hs=
Subject key identifier:   48:0D:8C:DD:31:5C:35:14:35:68:59:E3:2E:BF:77:59:F1:A0:4A:CB
Authority key identifier: 63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F
Certificate issuer:       /CN=6309aeff6dfa89e675837e454521235c99b1be2f
Certificate serial:       01962E2B120583F4580052E7A4F507D06C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft
Manifest number:          0115
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: Ywmu_236ieZ1g35FRSEjXJmxvi8.crl (hash: 6AWswsiCuSlssLvD3MIFGq9Gm5Fsm4mc9HsWKkOXZ1E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:12:05:83:f4:58:00:52:e7:a4:f5:07:d0:6c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6309aeff6dfa89e675837e454521235c99b1be2f
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=480d8cdd315c3514356859e32ebf7759f1a04acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:4b:e0:5a:44:7e:f4:c8:ef:b5:17:d1:0c:
                    4e:96:b0:24:37:aa:72:b5:7a:94:7c:cc:e1:02:f3:
                    47:93:8c:4a:9a:25:74:5a:2e:86:32:15:a0:c7:db:
                    82:b8:18:42:c9:8e:b6:04:f8:30:50:80:f4:1b:7c:
                    d1:7c:fc:3c:b0:2e:2f:38:8f:71:e5:1c:8d:3e:bb:
                    eb:79:57:0f:14:5e:9b:34:c9:f6:5b:0d:90:ac:dd:
                    36:ff:9e:93:73:b8:b7:f8:8a:a8:bc:67:63:8d:25:
                    5a:d9:32:32:e8:cd:75:f3:c1:ff:0f:c4:cf:49:76:
                    99:be:48:c7:02:2c:24:26:e2:d1:ec:9a:b0:8a:e0:
                    f9:45:f1:1b:57:24:90:dc:ec:96:b9:d2:e0:4f:f9:
                    fd:8c:6c:76:41:e0:a4:98:16:aa:bc:57:8c:68:43:
                    1d:59:19:4b:70:20:20:4f:0c:e0:05:59:6b:e1:fa:
                    07:4c:79:f5:36:bf:b0:fe:74:28:1f:16:08:74:8f:
                    5a:63:82:65:39:e8:cb:38:81:1e:46:97:82:8b:4a:
                    d1:c3:4c:f1:65:51:0f:31:32:1a:20:32:20:4a:72:
                    65:14:6e:f1:aa:b6:1a:10:37:03:87:74:1a:e2:71:
                    b6:a8:77:97:66:b2:78:a9:ae:5f:3d:b8:38:dd:5d:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0D:8C:DD:31:5C:35:14:35:68:59:E3:2E:BF:77:59:F1:A0:4A:CB
            X509v3 Authority Key Identifier:
                keyid:63:09:AE:FF:6D:FA:89:E6:75:83:7E:45:45:21:23:5C:99:B1:BE:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ywmu_236ieZ1g35FRSEjXJmxvi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/79c59d-fdb0-4b77-9a51-b8dab2908ff1/1/Ywmu_236ieZ1g35FRSEjXJmxvi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:4f:4e:b9:4f:39:7a:d7:6e:8c:20:e7:34:67:10:50:bf:
         e8:b7:8e:18:35:24:b4:7d:09:dc:c1:3a:fd:72:2a:de:d0:4b:
         50:fb:c4:0c:27:23:4c:03:f4:97:ba:65:55:f7:15:30:14:2f:
         2e:37:20:2e:ee:54:1f:26:0f:61:db:2b:9d:15:46:26:84:a1:
         36:1a:ce:20:4c:7a:ed:6c:3a:7e:aa:c3:2d:86:48:0c:46:a5:
         ce:3c:0b:10:37:05:50:0e:08:a9:f3:09:ce:93:b9:8b:a6:b6:
         dd:55:59:13:79:b6:b6:dd:20:a5:f0:ee:7a:ac:fc:a2:5a:4e:
         f1:3c:ee:b8:c5:8a:8a:af:ae:fe:49:e2:ce:1a:ce:99:d9:1a:
         03:ee:94:aa:0e:62:69:fd:8b:99:7f:98:b0:ef:49:f0:5a:79:
         9c:36:1b:5a:f8:cd:d3:8c:b6:39:e2:6c:cd:39:4a:5a:d9:2f:
         f9:31:27:8c:7e:a7:91:a6:c5:28:88:31:6a:05:0d:64:94:ec:
         a5:04:e9:bf:17:93:72:cf:aa:e0:fe:5d:b3:f0:38:63:37:11:
         d3:ea:2c:b3:ae:ad:55:61:13:fd:2a:69:6d:72:95:cd:78:01:
         65:a1:5b:d0:62:2a:2f:94:74:2d:14:08:5b:80:8a:7b:89:20:
         93:34:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----