Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
File:                     yRh69xD2KF4TVTBxMoudmUhSxHE.mft (raw, json)
Hash identifier:          TI8DWWP2FILZ6BFlB9oApnHVzQrxYxwamPKt9aZR2NI=
Subject key identifier:   AC:2F:C6:A0:23:E4:7E:E3:26:AA:F4:41:98:AC:E8:E6:90:10:FB:C2
Authority key identifier: C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71
Certificate issuer:       /CN=c9187af710f6285e13553071328b9d994852c471
Certificate serial:       01962E99A1DD124E14243F03949B17CB7EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: yRh69xD2KF4TVTBxMoudmUhSxHE.crl (hash: Iz283/Wp0XYZSCt8T4PVhjKyMOE83wWD4rr42apR/4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a1:dd:12:4e:14:24:3f:03:94:9b:17:cb:7e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9187af710f6285e13553071328b9d994852c471
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=ac2fc6a023e47ee326aaf44198ace8e69010fbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:00:d1:01:5e:98:16:b6:bb:63:fb:f0:51:
                    ea:57:ee:a5:d3:be:a2:bc:32:78:20:b4:35:31:7f:
                    eb:27:19:43:e2:6f:eb:30:93:a8:94:2f:c9:42:5f:
                    78:df:9d:a6:74:24:2a:41:2b:e4:d3:c3:74:b0:aa:
                    d8:16:9d:11:c4:a1:49:6f:4a:c3:55:3b:d1:41:c0:
                    18:fe:01:17:a6:f9:07:ca:89:2e:f9:5e:b3:42:51:
                    7e:21:90:93:a3:1a:8d:f4:79:c3:33:8c:c8:b4:cf:
                    82:0d:21:20:9e:f7:7f:aa:be:2b:ae:70:46:b8:99:
                    bc:f5:17:c6:fd:ba:8d:a5:38:e7:fc:25:1e:70:83:
                    60:4d:fa:ba:32:6d:f4:6c:87:e9:b5:48:2b:32:06:
                    34:c7:06:1b:1c:1c:95:9a:16:70:9b:fe:32:56:ec:
                    f7:6b:b0:1c:4d:24:d1:c5:69:6c:26:b3:49:88:90:
                    b4:fe:6e:90:5e:be:17:47:f5:e3:fb:5f:a2:64:3d:
                    66:3f:7c:70:a7:e5:87:9f:4c:d3:ea:4b:05:30:c6:
                    11:d9:90:d3:49:05:0e:d5:82:d5:0a:bb:6b:e5:ad:
                    52:8e:68:84:da:6f:71:46:ef:c6:97:1f:9d:a9:fc:
                    a3:34:90:76:7a:1f:40:b8:a4:5b:c3:b0:d0:64:4b:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2F:C6:A0:23:E4:7E:E3:26:AA:F4:41:98:AC:E8:E6:90:10:FB:C2
            X509v3 Authority Key Identifier:
                keyid:C9:18:7A:F7:10:F6:28:5E:13:55:30:71:32:8B:9D:99:48:52:C4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRh69xD2KF4TVTBxMoudmUhSxHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/330f6b-2ea5-48a0-8415-464e59c8f485/1/yRh69xD2KF4TVTBxMoudmUhSxHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:fa:82:5d:da:d8:cc:a2:37:13:be:09:04:58:28:a1:7e:
         94:36:dc:60:25:75:16:4b:0c:14:14:a3:88:d0:cc:9c:9d:fe:
         24:e5:38:3c:92:58:be:b1:dc:c6:0a:77:86:ba:4b:c6:bb:51:
         34:30:1b:6e:5e:1f:bf:10:9e:4a:fe:a8:69:73:d2:c1:97:20:
         74:34:85:0f:86:d0:5e:c7:ea:b6:d2:30:91:50:4e:ea:9d:0e:
         47:2a:b0:1a:99:88:8e:86:b0:3f:49:01:24:c5:1a:94:4e:73:
         dd:d1:a4:43:47:a1:96:00:a4:2c:52:e7:da:a4:13:07:82:0d:
         c4:f2:3d:1a:7a:0b:f4:1c:aa:b1:c8:d4:5c:98:c1:59:2b:8d:
         a1:0a:ec:1c:20:ff:73:05:d3:27:8e:10:61:4c:11:b0:9e:d0:
         65:14:1f:6e:93:e5:1f:45:40:0c:5c:43:40:7b:de:27:10:2c:
         da:51:ad:c5:95:12:6c:1f:bf:bd:95:97:2e:3a:9b:11:54:22:
         db:8d:c3:28:38:d1:2e:91:32:de:51:d8:96:7d:c7:b2:23:41:
         91:66:c7:d2:d4:1d:03:a1:b3:dc:7d:e2:3c:85:70:0c:f9:1b:
         02:f4:d8:f7:cd:61:6c:87:30:07:d9:be:4d:e1:87:db:f0:45:
         9b:75:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----