Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
File:                     Y31k1HJWO36HP1t5-RydP__D2_k.mft (raw, json)
Hash identifier:          Fo2YNo9zGIDI47v4qiAxRf/U9ZVwElUEO//nIvnaXpg=
Subject key identifier:   A0:94:45:03:90:AA:09:66:0C:5D:4F:61:FD:88:D0:30:64:CE:D4:5C
Authority key identifier: 63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9
Certificate issuer:       /CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
Certificate serial:       01962F06BDC6581160155C5AB5B60814A732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft
Manifest number:          0DA5
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: Y31k1HJWO36HP1t5-RydP__D2_k.crl (hash: H6ks6kw5JTr1V/w8tuNQDM5MALzEgKkvNrS4OYbB0Ns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bd:c6:58:11:60:15:5c:5a:b5:b6:08:14:a7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637d64d472563b7e873f5b79f91c9d3fffc3dbf9
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=a094450390aa09660c5d4f61fd88d03064ced45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:76:5b:c5:fa:30:62:9c:94:07:a1:04:89:
                    7a:10:b0:02:46:77:1e:2e:fc:d3:bf:ad:21:64:ed:
                    61:19:5e:0f:2b:23:77:52:82:aa:b7:fd:5a:3e:01:
                    0a:f6:f2:4d:e5:bd:b5:29:ab:dc:b7:2a:99:e7:7d:
                    c2:9b:c3:da:0a:20:5d:d8:32:28:36:96:4b:18:b8:
                    69:d3:dc:7a:71:0f:87:25:2c:f3:c2:b9:04:c9:81:
                    79:66:61:8d:14:b3:31:ff:ed:5e:45:25:c0:6c:cf:
                    8e:91:b4:ef:75:d1:45:ba:35:ae:0b:da:a1:6f:7f:
                    6a:e6:8d:17:92:73:9e:60:49:af:66:ad:71:88:ac:
                    1e:43:b7:c3:32:11:9e:b8:f0:ae:45:ab:12:11:7b:
                    e4:2f:68:d1:30:1a:79:fe:ca:5e:b5:bc:36:8e:69:
                    9b:43:10:52:80:e1:4a:44:7f:d1:85:7f:22:2b:e7:
                    a5:3f:50:ca:35:b8:49:58:9f:c5:11:2a:fb:1c:52:
                    3f:a4:11:3a:24:49:77:cd:f6:58:90:74:8d:5d:c8:
                    20:b7:70:c9:81:3d:4e:0f:28:41:1c:14:d7:e8:3d:
                    86:37:a1:74:c3:1a:cd:f3:30:fc:e0:52:3f:79:cd:
                    09:bd:38:27:f1:3d:95:46:d9:02:46:05:b8:88:28:
                    7d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:45:03:90:AA:09:66:0C:5D:4F:61:FD:88:D0:30:64:CE:D4:5C
            X509v3 Authority Key Identifier:
                keyid:63:7D:64:D4:72:56:3B:7E:87:3F:5B:79:F9:1C:9D:3F:FF:C3:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y31k1HJWO36HP1t5-RydP__D2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2bd6b4-eeb2-4f1b-8aaf-817af8a76250/1/Y31k1HJWO36HP1t5-RydP__D2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:c0:21:c8:4d:cb:0a:b8:8a:1a:c1:9f:b2:7b:ab:22:75:
         2d:6e:3e:f3:44:fd:ab:24:1d:a2:9d:65:7a:fa:8b:92:e6:fd:
         86:66:2e:d4:52:ae:94:bb:48:78:5d:01:6e:10:1d:dd:81:53:
         25:60:31:50:81:4c:6e:74:5e:91:01:f2:e0:7d:66:57:6e:e5:
         00:25:2d:c6:27:38:75:68:f8:9a:de:c1:79:10:c0:20:22:b2:
         ee:10:e1:db:2b:57:55:7d:67:bb:93:a4:3e:eb:95:e1:b1:e9:
         78:22:d1:c5:24:6d:13:69:09:e3:af:53:ba:8c:6a:66:bc:6d:
         53:b0:ba:07:94:45:fb:a8:9a:47:d1:c9:e1:f3:b0:15:a8:ca:
         58:b4:78:1d:3d:a8:ea:8a:94:86:f9:e8:86:20:e8:e9:d9:27:
         55:15:b9:bd:11:2d:9f:14:47:38:a5:03:a1:95:c7:72:c0:5f:
         41:4d:af:b4:b4:bb:85:94:33:e5:a5:0b:e2:f0:6a:f9:5b:3f:
         af:7f:7a:a6:5c:c2:57:e8:89:92:f8:4b:50:58:d0:cc:74:5f:
         6f:da:e7:05:35:ea:36:1c:6e:33:c7:bb:d9:e8:87:45:4b:68:
         f5:44:2f:8d:84:0f:f6:fc:9e:5a:31:ac:73:3f:9f:d8:82:1c:
         e2:97:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----