Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft
File:                     YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft (raw, json)
Hash identifier:          7AyGPco2likkRSKLyoObPjmW31cNH2L51DP7gDgSGL0=
Subject key identifier:   F6:BA:B9:E2:50:DE:C6:E5:22:31:F4:F4:2C:B2:CA:EB:25:9D:16:24
Authority key identifier: 60:62:B2:1F:B6:65:5B:89:79:23:E2:9D:6F:CB:64:4A:B1:0A:C5:30
Certificate issuer:       /CN=6062b21fb6655b897923e29d6fcb644ab10ac530
Certificate serial:       01962F74E497BBBEA1291A7FA03EBE3C21FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.crl (hash: kdNWgCV0uY1fh4zwNdeZEuaTraVPTugWVtYTYLkyK7E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e4:97:bb:be:a1:29:1a:7f:a0:3e:be:3c:21:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6062b21fb6655b897923e29d6fcb644ab10ac530
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=f6bab9e250dec6e52231f4f42cb2caeb259d1624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d4:54:d5:ca:3b:aa:e8:28:d6:f1:02:8a:48:
                    bf:48:58:75:d4:d6:95:1d:0c:e0:b2:63:cd:c5:cb:
                    9f:9c:50:7e:32:26:e1:65:05:65:fc:ea:58:58:6b:
                    65:bf:14:ad:99:fa:17:e1:ac:d8:8d:52:0f:de:2f:
                    f4:b7:3d:6c:eb:3b:81:1f:cf:2d:71:99:86:a6:7b:
                    51:7d:b4:d0:99:f0:ef:b4:ae:99:2a:0d:31:c6:87:
                    a8:90:02:6f:3a:fd:3e:7b:1a:17:89:1e:f1:b9:73:
                    64:d6:12:fc:05:7f:00:8d:a5:6b:db:ba:0c:67:b2:
                    56:fe:d7:ab:94:8c:23:ef:82:81:f8:0a:96:50:a0:
                    d7:be:65:aa:79:fb:b3:0e:bc:ac:b5:29:11:2f:46:
                    70:b2:4c:04:3f:59:19:3e:fd:2e:48:4f:83:2f:ac:
                    01:de:f8:d6:2a:75:b1:dc:3b:33:72:2f:53:10:79:
                    3b:28:f8:08:a5:f9:8c:54:9a:86:4a:97:85:eb:7d:
                    bd:5a:2d:f7:7c:e4:a6:bd:68:35:82:d8:64:35:c7:
                    98:3b:10:5f:b8:72:db:3a:58:22:0d:07:0d:f3:4c:
                    50:63:d7:b1:b4:c3:4a:f8:fc:5d:04:d4:a7:8a:54:
                    33:9d:14:cd:2b:f1:41:8a:7e:be:a9:97:12:0f:30:
                    2b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:B9:E2:50:DE:C6:E5:22:31:F4:F4:2C:B2:CA:EB:25:9D:16:24
            X509v3 Authority Key Identifier:
                keyid:60:62:B2:1F:B6:65:5B:89:79:23:E2:9D:6F:CB:64:4A:B1:0A:C5:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b974-fb18-40af-afa6-b520beda6626/1/YGKyH7ZlW4l5I-Kdb8tkSrEKxTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:2e:f2:23:9f:d4:4e:d0:00:a9:4f:b4:b2:80:8e:d0:a6:
         be:b5:0d:29:e8:26:91:b0:a4:ca:9d:7c:da:9a:ef:ad:03:ea:
         dd:5c:29:bf:bb:12:b7:46:ad:f9:b5:51:6a:aa:b9:52:fb:40:
         60:3a:cc:ba:1e:2f:a9:30:a3:2a:dd:e2:09:a9:83:db:a3:d8:
         fe:92:92:bc:f1:a6:2a:ee:21:87:c4:6e:65:74:5f:7a:e1:11:
         87:fe:14:a5:9c:e0:b3:0d:7e:b6:8c:7c:a9:a3:c7:0b:d2:0f:
         05:ee:99:4c:97:4c:a3:7e:3c:38:ac:62:eb:97:25:30:6a:ce:
         1e:4e:a6:56:c7:1b:82:18:85:2c:1c:58:33:7e:1a:af:df:2c:
         2d:6c:bc:87:bc:f1:59:e9:43:68:e2:22:2c:68:3a:1b:c6:9d:
         7a:e5:aa:dc:73:71:76:00:79:90:c3:2c:7a:b6:bf:ca:c9:b8:
         1c:45:37:f5:78:b3:dd:14:f3:73:1b:cb:86:b0:ad:81:52:c2:
         27:71:be:ea:23:7a:2d:62:63:fe:07:8d:17:4b:c7:75:75:d7:
         06:49:78:0b:89:4a:e1:0e:6a:8a:7d:ab:2b:71:d8:17:9a:d2:
         97:52:d9:cf:ba:d0:2a:3a:1f:86:7b:8d:13:a0:b5:2a:fd:42:
         51:80:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----