Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
File:                     yAp-jsR8rdhlNy3lA_h5DvYscUE.mft (raw, json)
Hash identifier:          rmW39fWElCaFBhxauRkIaop8kIP4vXt36XiX+jYj9nU=
Subject key identifier:   F5:05:81:86:89:74:87:23:F7:FC:7E:E9:9D:43:D1:D7:A3:41:9C:9B
Authority key identifier: C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41
Certificate issuer:       /CN=c80a7e8ec47cadd865372de503f8790ef62c7141
Certificate serial:       01962F3D3719C9A7223DE228C0A50AC9DCAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft
Manifest number:          0BDE
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: yAp-jsR8rdhlNy3lA_h5DvYscUE.crl (hash: mlYEMsJ4i5zhpPz2KEiBjJ6Ghm1kLquZCmXkKhrYrdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:37:19:c9:a7:22:3d:e2:28:c0:a5:0a:c9:dc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80a7e8ec47cadd865372de503f8790ef62c7141
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=f505818689748723f7fc7ee99d43d1d7a3419c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:c3:64:87:b3:d8:d7:b9:22:a2:20:c2:4d:
                    04:83:96:6f:a4:e0:6b:10:2c:d9:9e:6e:63:b9:40:
                    d5:e1:08:1a:b7:f1:57:16:1c:2b:d6:fa:a6:b2:91:
                    ea:a9:fa:6c:4b:bf:3e:0e:80:c3:3c:1e:93:34:a0:
                    3b:5d:81:08:c5:dc:54:c7:74:e3:54:17:d5:86:06:
                    8a:e8:18:41:e4:1b:44:dd:49:be:68:d2:80:d2:dd:
                    2b:5b:69:ab:d7:5d:7a:4c:85:c3:6d:d9:b8:59:42:
                    6a:23:c0:54:bf:b9:3b:16:c6:16:a3:69:62:34:6f:
                    70:ae:42:72:a7:f2:24:80:33:46:85:c1:0d:d1:84:
                    18:de:5e:4f:05:43:08:ea:65:59:83:8d:a9:bb:07:
                    79:6c:09:74:5d:db:d5:49:af:17:a4:c9:08:1c:c1:
                    88:9f:8d:8c:6a:b0:27:b8:d7:5a:73:04:3c:d4:7b:
                    ba:c6:b5:31:fc:fa:59:10:0d:9f:c2:f4:9f:75:2a:
                    7b:0d:f5:94:15:96:82:3c:89:61:11:e5:ea:ed:92:
                    75:cf:88:ce:38:83:63:00:28:05:12:5b:c6:80:58:
                    81:b5:bd:18:bb:e2:5a:d6:91:63:dd:d3:de:fa:2c:
                    e1:6b:50:92:db:68:8a:d4:a2:03:36:07:8e:35:f0:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:05:81:86:89:74:87:23:F7:FC:7E:E9:9D:43:D1:D7:A3:41:9C:9B
            X509v3 Authority Key Identifier:
                keyid:C8:0A:7E:8E:C4:7C:AD:D8:65:37:2D:E5:03:F8:79:0E:F6:2C:71:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAp-jsR8rdhlNy3lA_h5DvYscUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cb5bef-7e8a-4392-a9c6-e12fab185540/1/yAp-jsR8rdhlNy3lA_h5DvYscUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:2a:a8:c0:1e:f1:f7:67:73:7a:c2:c4:dc:3c:7c:3b:20:
         ad:ca:cb:78:ee:84:12:68:d2:51:c5:9e:db:59:a8:be:61:34:
         2e:33:4e:42:d9:8e:d8:64:85:f8:99:2f:c1:6e:99:2a:81:dd:
         99:5d:fe:a6:6c:12:02:9b:3e:12:f6:71:de:ee:4e:04:f6:be:
         60:ff:b0:8e:12:bd:59:f1:26:28:c4:4a:12:3d:3b:78:e7:36:
         5d:b2:fb:ea:30:e3:60:04:49:f7:cf:b5:8e:8f:9b:5a:b2:b5:
         1e:ff:02:c4:62:5b:d9:c6:5b:0e:8d:70:39:aa:de:38:2c:4d:
         ac:3f:56:78:de:49:ab:8c:70:7a:17:12:1a:dd:6f:4d:8e:80:
         9d:b2:64:ec:c8:b3:f0:1d:e1:9d:be:d6:37:d8:cb:d1:0b:cd:
         b3:12:b8:f2:31:b3:d7:e5:01:ce:2c:c2:89:ce:00:43:b0:53:
         3c:bd:89:2c:7b:11:3b:af:3f:2e:8d:bc:aa:28:f3:d5:3c:81:
         5a:02:9a:ea:5e:2d:d5:c7:90:6a:f9:64:96:cd:71:79:2e:6a:
         17:18:97:23:14:3a:0a:2d:78:da:20:9b:ad:be:b3:fa:b8:fe:
         d5:90:ab:e5:0e:e8:99:48:30:7b:47:ff:6c:84:d2:0f:84:96:
         41:03:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----