Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/yhXVNsDU6KVuFNzBRHfr4mlRb5w.mft
File:                     yhXVNsDU6KVuFNzBRHfr4mlRb5w.mft (raw, json)
Hash identifier:          U8j+BWAxPNee/9JiaWHBQNz3XwZOU+ycT4thqPpgJFE=
Subject key identifier:   9E:9D:56:D9:D2:B5:BE:B6:25:E3:D3:87:F0:E5:D4:41:42:4A:FB:FD
Authority key identifier: CA:15:D5:36:C0:D4:E8:A5:6E:14:DC:C1:44:77:EB:E2:69:51:6F:9C
Certificate issuer:       /CN=ca15d536c0d4e8a56e14dcc14477ebe269516f9c
Certificate serial:       0193FA0B11E58CAF82DFA36FA93E6DEDDA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhXVNsDU6KVuFNzBRHfr4mlRb5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/yhXVNsDU6KVuFNzBRHfr4mlRb5w.mft
Manifest number:          13C8
Signing time:             Tue 24 Dec 2024 19:00:49 +0000
Manifest this update:     Tue 24 Dec 2024 19:00:49 +0000
Manifest next update:     Wed 25 Dec 2024 19:00:49 +0000
Files and hashes:         1: yhXVNsDU6KVuFNzBRHfr4mlRb5w.crl (hash: e8EIXh4ZqKDfusd/fOwPaENbR/SUEZRPCbgMupZKuYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:0b:11:e5:8c:af:82:df:a3:6f:a9:3e:6d:ed:da:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca15d536c0d4e8a56e14dcc14477ebe269516f9c
        Validity
            Not Before: Dec 24 19:00:49 2024 GMT
            Not After : Dec 25 19:00:49 2024 GMT
        Subject: CN=9e9d56d9d2b5beb625e3d387f0e5d441424afbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:17:c5:6a:1d:6d:55:60:d2:a0:36:c3:68:ce:
                    a1:50:5b:0e:6c:d7:a9:3a:96:04:a4:b9:a0:53:f0:
                    98:dc:c7:95:50:25:c9:f7:44:f3:9c:00:cf:c9:c5:
                    4f:45:e6:29:5e:8e:6c:47:34:e3:c9:38:55:b0:f2:
                    ca:75:1e:cb:43:36:ce:21:f6:82:60:fd:93:00:2d:
                    14:c1:9b:39:96:f8:ba:49:e4:ca:74:9c:2a:eb:15:
                    d1:8c:a2:7d:75:f1:49:03:92:1f:d6:36:d9:3a:df:
                    7f:6f:cb:0d:d0:98:0c:56:cc:9a:f8:74:e3:fd:7a:
                    79:a7:94:13:5b:25:94:b1:69:a5:e9:e8:61:b6:4e:
                    ea:3e:88:2a:2a:0a:ad:23:d3:71:3b:af:c8:32:67:
                    0b:aa:46:38:bf:8f:ae:ff:64:12:60:30:92:3e:cc:
                    e3:60:50:36:ff:13:f4:f1:95:df:92:73:f2:5f:65:
                    55:b2:df:87:08:9b:cb:95:d3:ac:45:5f:55:92:4b:
                    e6:b7:ee:7e:ad:8c:ad:9d:5e:eb:da:09:c0:58:7d:
                    46:b4:7c:35:f0:d4:d9:c3:72:e6:43:21:23:bb:a5:
                    2c:75:e5:5e:64:58:f1:fc:cc:5f:e9:c4:2f:80:9f:
                    32:11:24:5c:6e:c3:c2:84:6f:49:66:41:a4:93:4d:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:56:D9:D2:B5:BE:B6:25:E3:D3:87:F0:E5:D4:41:42:4A:FB:FD
            X509v3 Authority Key Identifier:
                keyid:CA:15:D5:36:C0:D4:E8:A5:6E:14:DC:C1:44:77:EB:E2:69:51:6F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhXVNsDU6KVuFNzBRHfr4mlRb5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/yhXVNsDU6KVuFNzBRHfr4mlRb5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2743b7-fa7f-4aba-9ab8-509862a27654/1/yhXVNsDU6KVuFNzBRHfr4mlRb5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:60:47:a2:82:82:5b:e1:a5:e4:ad:7f:d8:22:a4:1a:56:ae:
         7f:1c:00:bf:9c:e5:43:1b:65:48:26:e7:2a:cd:35:7f:8f:b1:
         6a:a6:1b:96:d0:a8:23:68:36:78:d8:bb:17:c6:4a:57:42:22:
         7e:53:31:13:1c:ce:b7:a4:a0:bf:d5:1c:29:b8:62:61:96:2f:
         18:dd:e9:af:a3:01:6d:dd:06:10:61:29:29:b8:6a:a2:46:9e:
         e6:c8:20:61:a5:35:83:e9:8e:e4:31:71:e0:e2:17:fa:f5:66:
         58:a1:aa:ce:98:a7:9a:2f:80:d3:21:5a:a0:50:7c:63:55:9e:
         71:c9:2d:d8:1d:fe:73:f3:77:4b:b0:8d:58:3c:26:1f:61:f7:
         ae:e9:62:a9:6c:2c:ef:d9:79:10:bf:da:67:6f:14:0e:f0:a8:
         66:a4:2e:12:97:28:ea:21:78:59:c5:d3:b9:e1:8e:d9:e4:ef:
         94:fe:66:c7:04:fe:98:3e:53:43:ad:c5:a4:9f:33:ed:6c:c5:
         40:4b:12:50:81:2a:35:22:24:cc:cc:67:59:cd:83:35:3c:02:
         74:3a:8a:d1:f1:3e:df:77:7f:08:92:09:8e:2b:15:b9:34:75:
         ce:e1:6d:6d:6b:90:d5:6b:09:15:2a:0a:11:cb:31:44:29:49:
         40:58:4b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----