Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
File:                     1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft (raw, json)
Hash identifier:          Rr6T+vySCk5Yo1YQNjlYq3Cb3ur6IbQzIyZ7PaWYTBQ=
Subject key identifier:   4E:6C:40:06:1D:9C:09:EF:A7:E3:41:DE:9E:FD:B2:A0:3F:1D:34:AE
Authority key identifier: FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96
Certificate issuer:       /CN=fb280c05b76912a09cb12934db33c8e520acdd96
Certificate serial:       01962E997128A226E80A39B508E596C9BB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft
Manifest number:          0819
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: 1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl (hash: cYV1M4rwSOmaQ7rEuBE6ryOczTgLBBV3AF9uq1UMqVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:28:a2:26:e8:0a:39:b5:08:e5:96:c9:bb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb280c05b76912a09cb12934db33c8e520acdd96
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=4e6c40061d9c09efa7e341de9efdb2a03f1d34ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:86:b1:fb:2c:4f:ff:4b:86:ae:3d:db:07:
                    ab:f9:7b:b3:ce:17:76:c6:a4:dd:04:ae:2a:3e:f7:
                    6a:d1:5f:f5:e5:12:cd:1d:09:9e:62:b0:96:bb:85:
                    ce:10:a5:15:e7:8f:33:b7:3c:7b:60:de:5c:42:e1:
                    90:24:4a:72:2e:58:e3:c3:b0:60:e2:f2:fd:82:24:
                    07:e2:f5:e5:e6:37:c5:44:71:2e:f5:bc:e4:10:39:
                    17:f2:91:f2:53:18:55:01:4d:23:54:24:c9:66:08:
                    40:d3:3c:c4:35:5c:48:42:43:a0:ef:6a:bd:62:da:
                    5c:19:78:c9:c2:21:7c:f0:7f:96:99:8c:54:dd:02:
                    d1:78:f1:3a:db:73:b6:00:d1:e5:6e:3c:eb:97:c6:
                    ca:54:b5:92:0d:f7:da:55:ea:b5:ca:f3:fb:4b:5f:
                    a5:db:84:26:0f:08:d2:98:b5:4a:5e:c6:0c:41:21:
                    65:e5:e1:98:0a:4e:be:2e:c0:c2:98:54:46:ed:f3:
                    a9:eb:65:9f:a3:88:50:a5:20:e8:79:39:60:d8:c8:
                    69:99:67:22:ec:4f:71:66:41:f1:84:a9:91:1d:bb:
                    b4:6e:94:ac:22:78:b8:4b:3c:f1:80:4d:18:8f:e0:
                    27:af:4c:73:52:fa:08:76:b7:dc:11:68:30:de:3a:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:40:06:1D:9C:09:EF:A7:E3:41:DE:9E:FD:B2:A0:3F:1D:34:AE
            X509v3 Authority Key Identifier:
                keyid:FB:28:0C:05:B7:69:12:A0:9C:B1:29:34:DB:33:C8:E5:20:AC:DD:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f48784-f589-4ab6-be26-25d2fdbea7d2/1/1-ygMBbdpEqCcsSk02zPI5SCs3ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:55:36:28:c5:4c:b9:c5:fa:23:51:b6:f2:c0:2b:4e:83:10:
         a1:a7:80:99:55:f0:f1:30:6c:29:4f:ec:ab:86:5a:4f:7f:55:
         c6:5f:9f:9a:f4:32:7f:7c:eb:84:31:52:9f:af:fc:da:29:2f:
         c5:06:ac:32:1d:27:5b:fc:30:75:71:73:1f:d2:50:5d:2e:93:
         d6:7a:a0:27:ef:a1:0b:73:4f:ad:8c:72:43:0e:18:29:90:e0:
         5b:6d:3a:83:51:37:c2:1a:d5:7e:36:db:d6:a0:20:2b:31:42:
         c8:65:74:6b:86:89:33:6e:56:b0:90:4d:c0:a5:85:5a:98:f2:
         88:42:e4:73:a8:af:23:6a:48:fd:77:f9:ef:ed:8f:ac:ad:b2:
         8c:80:36:52:ee:9e:4d:84:0b:3c:c0:13:c4:c0:78:67:c6:f6:
         29:d7:19:78:44:5c:cd:0b:5c:ca:f8:70:d1:0b:cd:29:5b:8a:
         39:b5:c6:c0:54:08:2a:8c:3c:a2:a5:e0:e4:35:a8:5a:fe:99:
         92:35:b4:7e:ce:e3:5f:1b:51:80:fa:62:6a:e2:3e:64:7d:38:
         cb:ff:7c:50:ff:39:10:49:8f:24:05:15:58:a1:fd:dc:e5:ef:
         56:85:a0:0d:9f:81:b1:f7:09:d1:d5:11:f6:17:7f:1b:55:8e:
         a7:ad:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----