Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
File:                     mYkvB5PMiUvypMdIda8Iqi0dHJk.mft (raw, json)
Hash identifier:          9PWBhnRnIqzb4hKZXZfUdfWcCgNMxhuDkPuvfvMVfwQ=
Subject key identifier:   62:63:26:3E:0E:EF:37:3A:2D:2D:3F:23:78:DB:D6:9D:2C:DD:95:BC
Authority key identifier: 99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99
Certificate issuer:       /CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
Certificate serial:       01962DF3C4E37B763ECEF9474EF322C40E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft
Manifest number:          0C8D
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: mYkvB5PMiUvypMdIda8Iqi0dHJk.crl (hash: xssca7rUjjbXV99cBwlrVwm5Ye1qg7fM1IKFyliFSXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c4:e3:7b:76:3e:ce:f9:47:4e:f3:22:c4:0e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99892f0793cc894bf2a4c74875af08aa2d1d1c99
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=6263263e0eef373a2d2d3f2378dbd69d2cdd95bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:6b:02:ca:8c:ff:c8:b2:bd:36:00:93:0b:
                    ba:05:0d:b1:1b:92:26:15:eb:bc:fb:17:ca:bc:b3:
                    a4:d8:ce:53:43:5a:75:74:d0:4a:7a:5f:2c:26:ba:
                    f6:26:6f:f2:d5:99:97:d2:83:f2:10:89:63:ad:92:
                    7f:fc:c6:6d:10:74:d1:a2:58:36:39:ca:03:32:fe:
                    95:fc:9f:2e:15:6b:40:bb:92:46:04:40:55:c7:37:
                    86:d7:f2:97:e5:5f:33:0f:e2:0e:3d:72:75:28:68:
                    e3:3f:5b:de:00:1c:fb:3c:ad:e7:da:4f:ba:c7:09:
                    10:19:4b:8b:da:43:8b:4c:55:b2:53:9a:d5:4d:de:
                    c2:7f:99:bf:5c:ab:2c:45:f3:ee:d5:a0:e9:d8:a5:
                    4f:12:c3:15:44:e2:da:4e:cb:96:96:28:b6:b6:74:
                    10:24:88:fb:ed:cb:1c:5c:44:ad:ba:f7:5a:4d:45:
                    99:fc:98:36:8b:1a:cb:58:09:4c:10:46:88:77:5f:
                    7e:3b:b1:9d:92:c8:bb:01:71:36:3a:5e:8d:3c:cb:
                    2b:be:86:5c:b1:56:bd:96:5b:f1:78:95:6c:f0:e3:
                    02:94:65:3f:31:13:fa:b1:ec:11:ba:4c:e8:6b:bc:
                    89:29:5a:98:98:47:62:29:c9:b2:bd:b5:94:bd:66:
                    50:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:63:26:3E:0E:EF:37:3A:2D:2D:3F:23:78:DB:D6:9D:2C:DD:95:BC
            X509v3 Authority Key Identifier:
                keyid:99:89:2F:07:93:CC:89:4B:F2:A4:C7:48:75:AF:08:AA:2D:1D:1C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYkvB5PMiUvypMdIda8Iqi0dHJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bf3230-eda5-4055-870b-9ea80255c592/1/mYkvB5PMiUvypMdIda8Iqi0dHJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:10:18:62:94:42:47:ef:c3:10:5b:06:55:6b:e1:47:57:
         08:04:ea:f5:2c:7f:70:26:6c:68:4c:ed:09:39:42:2f:1a:2d:
         d2:b9:b5:54:7e:50:e4:0b:96:37:eb:6b:b2:ad:6b:00:17:8b:
         2f:bb:84:45:06:13:17:c3:0e:51:f7:67:f9:db:20:7b:26:ae:
         c1:e3:f3:b6:fd:4b:6a:a0:a3:5f:28:01:a9:3a:ff:fb:bc:23:
         94:7f:ff:be:53:a6:62:e1:7d:3e:56:21:70:8a:f0:6c:ee:2a:
         6b:c8:63:52:68:a3:d3:c4:e6:34:31:ec:8e:3a:02:88:d6:3d:
         ec:48:95:c2:e9:ce:d5:df:95:cb:23:3b:f0:92:fe:93:83:8e:
         74:cf:ae:af:29:6f:70:33:8d:58:a0:0d:02:df:8b:13:3b:cc:
         ff:37:1a:d7:a9:44:f4:e2:b9:cf:22:f3:99:e9:3a:36:e3:da:
         6d:c2:7a:7b:a1:41:1f:71:54:4f:51:c8:f7:b4:cf:5a:0c:12:
         99:60:81:ff:76:de:a2:2a:a7:84:4f:b7:b5:c9:a3:04:70:64:
         66:32:64:b8:a5:e9:9a:17:7e:5a:07:73:0b:96:ba:fa:48:0e:
         2f:db:0c:2a:85:4a:c6:a2:7c:60:15:73:d2:78:27:40:36:ef:
         98:0c:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----