Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
File:                     YhcForItk4GoI8l5xvTnc0I1I20.mft (raw, json)
Hash identifier:          VBFC/p1G2qihTwnI13NNlCY91upMcfZafxCT0y/7VEk=
Subject key identifier:   98:6F:5E:8B:CC:0B:E9:47:4C:DD:5E:7E:3D:E0:5C:CF:A1:3C:7F:C0
Authority key identifier: 62:17:05:A2:B2:2D:93:81:A8:23:C9:79:C6:F4:E7:73:42:35:23:6D
Certificate issuer:       /CN=621705a2b22d9381a823c979c6f4e7734235236d
Certificate serial:       01962F74847432BDE3F3C4B9C54B1137AA90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
Manifest number:          0DCC
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: YhcForItk4GoI8l5xvTnc0I1I20.crl (hash: 1BOq/bnY6/cz6Af9CDjUdG3aWDgp4QSpGxEKdIQdQw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:84:74:32:bd:e3:f3:c4:b9:c5:4b:11:37:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=621705a2b22d9381a823c979c6f4e7734235236d
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=986f5e8bcc0be9474cdd5e7e3de05ccfa13c7fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f2:9b:fe:70:c9:76:4c:59:94:47:bb:10:13:
                    96:b3:8c:00:21:43:75:31:65:bf:12:50:ff:f7:53:
                    1f:25:53:80:32:cd:b3:29:56:5e:aa:81:e8:21:4a:
                    da:d3:5c:9e:dd:08:7c:f7:d6:3e:1c:d3:41:9c:3b:
                    6f:11:ef:e0:87:99:00:1b:38:72:6a:4e:44:d4:f6:
                    ac:80:9d:d4:cb:1a:06:f6:6e:aa:f1:6a:52:86:70:
                    c0:82:62:f1:11:4e:cb:7d:31:b3:28:62:df:77:cf:
                    99:27:cf:ee:fc:37:63:63:7d:8e:ee:97:55:a4:09:
                    db:99:8c:16:8e:4b:84:78:2a:03:d7:0e:cc:c1:0b:
                    ee:c9:3d:d0:0a:71:1f:4a:66:f3:5f:c8:3e:e4:9d:
                    c3:16:93:8f:57:f2:60:b0:10:8b:c5:21:a5:89:31:
                    75:b7:70:2b:ea:b5:77:3c:0a:aa:79:f7:08:ce:38:
                    ab:f5:86:4e:b7:eb:16:7b:93:8d:82:e7:54:58:81:
                    f1:eb:2d:df:b1:cf:5d:77:1f:46:06:2e:af:71:a8:
                    25:ea:e2:bf:8a:0a:89:76:27:f5:8c:b5:0b:92:77:
                    bd:3c:64:48:c7:36:38:62:00:78:b3:04:87:c3:30:
                    d5:3b:8c:c4:04:0a:ac:30:8c:b2:6b:ab:0c:7a:c4:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:5E:8B:CC:0B:E9:47:4C:DD:5E:7E:3D:E0:5C:CF:A1:3C:7F:C0
            X509v3 Authority Key Identifier:
                keyid:62:17:05:A2:B2:2D:93:81:A8:23:C9:79:C6:F4:E7:73:42:35:23:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5a:a6:10:a2:e8:ad:b4:94:f6:cc:46:ef:43:03:04:81:6d:
         7c:88:cd:c0:d8:f9:8f:bb:03:db:d6:c6:42:0a:c8:5a:d4:88:
         e5:a0:7f:16:c9:a2:a8:1d:68:f5:e1:ae:4f:02:46:99:62:83:
         93:4a:51:9b:35:33:55:88:8f:d1:3b:b4:f1:78:87:1e:de:50:
         02:8b:b6:a2:1c:3f:34:08:b7:6b:5b:c6:13:73:93:ab:d8:d4:
         8b:6d:41:d5:2a:a3:9b:99:fc:44:6a:f0:90:96:09:56:fa:d6:
         23:fd:3e:2f:45:1f:23:7c:45:90:ae:17:72:16:80:31:a2:0f:
         62:2b:c3:c4:11:b1:2f:3a:e7:ea:54:1e:c0:32:a2:87:19:b3:
         d3:4a:b1:4b:15:57:97:b2:75:7f:63:5d:fc:d5:44:12:2a:bc:
         20:60:e5:12:43:9b:79:4c:1e:d7:94:40:93:29:ae:bc:76:cb:
         b9:2c:10:c1:16:2e:29:a7:c1:83:6a:fd:ff:7c:8c:95:a5:ec:
         8c:a5:49:bf:ec:99:1f:4d:09:aa:22:a5:c4:57:2a:99:84:90:
         0a:61:01:2f:fb:54:0f:87:04:03:1a:b9:aa:89:61:bd:ce:c7:
         89:b6:28:ea:08:0a:39:6a:3c:c1:47:74:2f:33:4b:f3:83:49:
         f3:67:02:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIR0Mr3j88S5xUsRN6qQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMTcwNWEyYjIyZDkzODFhODIzYzk3OWM2ZjRlNzczNDIz
NTIzNmQwHhcNMjUwNDEzMTQwMTI3WhcNMjUwNDE0MTQwMTI3WjAzMTEwLwYDVQQD
Eyg5ODZmNWU4YmNjMGJlOTQ3NGNkZDVlN2UzZGUwNWNjZmExM2M3ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvKb/nDJdkxZlEe7EBOWs4wAIUN1
MWW/ElD/91MfJVOAMs2zKVZeqoHoIUra01ye3Qh899Y+HNNBnDtvEe/gh5kAGzhy
ak5E1PasgJ3UyxoG9m6q8WpShnDAgmLxEU7LfTGzKGLfd8+ZJ8/u/DdjY32O7pdV
pAnbmYwWjkuEeCoD1w7MwQvuyT3QCnEfSmbzX8g+5J3DFpOPV/JgsBCLxSGliTF1
t3Ar6rV3PAqqefcIzjir9YZOt+sWe5ONgudUWIHx6y3fsc9ddx9GBi6vcagl6uK/
igqJdif1jLULkne9PGRIxzY4YgB4swSHwzDVO4zEBAqsMIyya6sMesQpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhvXovMC+lHTN1efj3gXM+hPH/AMB8GA1UdIwQY
MBaAFGIXBaKyLZOBqCPJecb053NCNSNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWhjRm9ySXRrNEdvSThsNXh2VG5jMEkxSTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jOTIzNGQtZTEzMy00MTk0LTg0YWMt
NzFhMzlkYjg4YTIzLzEvWWhjRm9ySXRrNEdvSThsNXh2VG5jMEkxSTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jOTIzNGQtZTEzMy00MTk0LTg0YWMtNzFhMzlkYjg4YTIz
LzEvWWhjRm9ySXRrNEdvSThsNXh2VG5jMEkxSTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFqmEKLo
rbSU9sxG70MDBIFtfIjNwNj5j7sD29bGQgrIWtSI5aB/FsmiqB1o9eGuTwJGmWKD
k0pRmzUzVYiP0Tu08XiHHt5QAou2ohw/NAi3a1vGE3OTq9jUi21B1Sqjm5n8RGrw
kJYJVvrWI/0+L0UfI3xFkK4XchaAMaIPYivDxBGxLzrn6lQewDKihxmz00qxSxVX
l7J1f2Nd/NVEEiq8IGDlEkObeUwe15RAkymuvHbLuSwQwRYuKafBg2r9/3yMlaXs
jKVJv+yZH00JqiKlxFcqmYSQCmEBL/tUD4cEAxq5qolhvc7HibYo6ggKOWo8wUd0
LzNL84NJ82cCrg==
-----END CERTIFICATE-----