Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
File:                     YzMz1xUm9TOxwc8L6fwyG2IzltM.mft (raw, json)
Hash identifier:          vB65wIb5q5794R5rkfLdCKK4cxOLItMTqHmWrX6xeC8=
Subject key identifier:   C4:1C:0D:54:6B:AF:C0:65:BB:AF:58:4A:D4:19:AF:B5:8F:3C:53:50
Authority key identifier: 63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3
Certificate issuer:       /CN=633333d71526f533b1c1cf0be9fc321b623396d3
Certificate serial:       01962F3D561778385E3E5F9CEC346C9E74F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft
Manifest number:          057F
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: YzMz1xUm9TOxwc8L6fwyG2IzltM.crl (hash: iKKa1+YmLF2PIZm5u52ykHd1XVTte/I2T0Rk5SJ9dPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:17:78:38:5e:3e:5f:9c:ec:34:6c:9e:74:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633333d71526f533b1c1cf0be9fc321b623396d3
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=c41c0d546bafc065bbaf584ad419afb58f3c5350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:f1:38:ec:1d:11:8e:fe:a8:2f:42:e9:bd:
                    b9:bd:8d:3e:04:ad:c6:f3:03:e4:db:2d:62:a6:1e:
                    95:bb:40:46:97:8f:14:8e:af:25:58:a2:28:29:1d:
                    87:7a:73:0f:67:4d:bb:cb:d6:a1:65:03:a3:9a:64:
                    42:6a:3d:6e:f4:9d:fe:7f:18:2a:35:6c:9a:c1:59:
                    6f:68:70:ec:1a:38:30:28:3d:8a:db:3f:b5:ee:9e:
                    b5:49:6b:90:2b:4a:81:af:14:6d:33:71:7f:b7:6d:
                    94:1d:b2:9e:bd:e1:8a:35:b5:76:8e:2c:c3:96:55:
                    40:cf:d7:ff:89:04:dc:46:3f:0c:ed:83:97:4b:20:
                    01:50:2d:7d:22:f6:35:71:d1:61:4a:12:35:34:8d:
                    fa:c6:2a:78:0a:1a:75:92:57:a3:71:39:34:a3:85:
                    cf:2d:34:22:b0:00:0d:ca:be:a9:b4:9b:a1:17:8f:
                    e5:8b:58:56:e5:a1:1a:c4:8d:4a:9b:67:72:cd:24:
                    03:47:01:9f:65:74:26:4c:32:2e:07:59:9f:9e:c3:
                    77:59:35:71:9a:de:3c:d7:5f:68:2e:0f:ae:79:44:
                    f9:5d:f9:2b:d8:2e:60:ba:34:8a:d6:ec:58:a2:19:
                    9b:cb:88:d6:2a:69:2d:62:5f:18:34:f4:0b:20:54:
                    34:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1C:0D:54:6B:AF:C0:65:BB:AF:58:4A:D4:19:AF:B5:8F:3C:53:50
            X509v3 Authority Key Identifier:
                keyid:63:33:33:D7:15:26:F5:33:B1:C1:CF:0B:E9:FC:32:1B:62:33:96:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzMz1xUm9TOxwc8L6fwyG2IzltM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f50950-0039-4e74-be41-9cfc4838d3ec/1/YzMz1xUm9TOxwc8L6fwyG2IzltM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:5d:e5:a3:c1:17:c7:6e:cb:29:b2:43:5d:5d:e8:59:14:
         72:90:df:70:cc:d4:f4:f7:1c:c6:19:65:24:75:1a:2b:51:31:
         00:0f:f7:93:e9:be:6d:d3:8e:c4:14:00:21:87:0e:08:f3:37:
         64:7b:11:97:6b:35:6c:64:1f:d2:50:84:11:ad:44:f8:98:e3:
         1e:69:e5:ac:1b:05:0a:42:22:7e:64:f1:c9:33:a7:20:92:5f:
         1c:fa:67:54:fa:fd:62:21:a7:b4:2d:50:5c:71:84:49:22:7e:
         59:4f:c5:58:00:62:34:74:e9:d3:79:da:e6:36:89:4d:09:d9:
         3e:2c:29:24:7e:d6:46:d0:a6:4b:fa:99:27:fb:ec:ae:79:e2:
         6c:99:ec:b9:00:f5:19:a1:77:4c:cd:15:3b:a8:f0:8c:36:6e:
         3e:34:66:f5:bf:24:d1:b6:80:3b:ae:24:79:87:e2:2a:ac:c0:
         49:9d:1a:79:da:4c:ad:8f:86:9c:ff:da:29:bb:90:0a:d3:72:
         3c:1b:c8:a7:8a:5a:2a:7f:31:ec:c8:10:28:a8:00:3a:17:cb:
         27:e9:8d:c6:6b:1b:81:13:1e:87:d2:b8:71:d1:c9:ae:29:45:
         3a:0e:b6:bd:28:e4:8f:c6:c6:12:b5:ae:e0:77:96:22:0f:60:
         9b:4d:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----