Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          oQdokXgV63IK/o+WEZRZ5FoJZTsF17lZuJbgheoFLqI=
Subject key identifier:   23:05:C6:43:C1:FB:5B:4C:DE:EB:DC:89:FA:CE:5A:F2:C1:45:88:01
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       01962E99484039DED89E3D2406E83CE5E8DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          0A6E
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: 4yb+vu2i1lZbSZZ95TPfaml07QNEqE+h1M2ThaeRGVM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:48:40:39:de:d8:9e:3d:24:06:e8:3c:e5:e8:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=2305c643c1fb5b4cdeebdc89face5af2c1458801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:ed:b3:f0:d5:16:37:f5:5e:65:d6:74:22:
                    98:ce:c9:00:59:01:3a:3c:1d:d5:d7:a0:63:79:e4:
                    14:03:c2:2d:77:99:cc:df:52:1f:f7:c3:68:e1:8d:
                    4a:af:38:a8:aa:03:ee:94:48:49:16:4f:d7:cc:8e:
                    20:28:2b:09:74:b0:76:28:e7:3f:9c:9a:74:9e:db:
                    22:32:c1:5e:bf:e8:21:04:5f:8b:21:01:fe:fc:fd:
                    16:46:ea:29:58:57:9b:83:77:be:4b:8a:6a:15:1e:
                    85:52:cb:a5:4b:62:94:9c:a9:86:ea:2b:0f:ca:b6:
                    40:ac:a6:00:87:46:ad:e2:bf:d1:24:fe:f6:5f:ce:
                    19:eb:7b:80:3d:28:1a:10:01:b4:e8:84:6a:70:9e:
                    18:3f:72:37:f0:f1:10:88:ca:ff:4b:72:cf:a4:58:
                    b9:bf:6e:08:af:13:6d:e7:34:ef:17:2e:11:41:89:
                    20:aa:d5:5d:c3:8c:7e:47:fd:e4:d1:84:bb:2a:99:
                    c0:c7:aa:f5:37:3c:67:f3:e2:0f:56:7f:cc:7e:f0:
                    ca:e6:a0:cf:70:12:40:33:54:5e:08:83:23:8b:27:
                    3c:29:3e:62:35:8f:25:72:20:6f:f5:16:c2:06:f2:
                    c2:de:82:59:8a:49:b5:ac:c9:c5:42:ef:55:ec:29:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:05:C6:43:C1:FB:5B:4C:DE:EB:DC:89:FA:CE:5A:F2:C1:45:88:01
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:1b:2e:e6:71:7f:d5:e3:32:04:0f:60:6f:86:c8:88:78:
         87:e8:94:44:57:15:ec:85:cf:49:c3:4b:0d:1a:79:5c:6a:a8:
         c8:4d:5a:38:9c:0d:93:ed:d5:b8:d6:c9:2d:69:ea:2f:c3:56:
         b0:0d:08:a2:ef:72:da:49:75:2f:e2:ce:2c:43:c0:8e:5f:97:
         47:2c:2e:7f:04:a1:31:07:6d:ce:5c:56:ed:f5:d7:bb:4c:43:
         43:cc:3c:59:72:8c:04:ee:c1:07:a1:dd:43:8e:f2:33:d6:77:
         35:69:27:86:8a:98:a5:35:08:8c:10:27:d0:44:10:40:86:61:
         70:24:29:53:37:ff:34:2f:a4:96:4f:51:05:59:06:85:98:6e:
         bd:fc:b7:fd:91:10:21:18:e5:ee:70:2e:8a:20:d7:6f:a9:9a:
         f3:1e:39:69:cf:d4:f9:1b:42:a9:cb:86:66:27:c5:b8:61:ee:
         e2:8a:cf:28:91:6a:cf:18:e5:07:be:05:f5:d3:b0:41:ff:4b:
         79:09:5f:fd:6d:b2:7c:f9:39:1b:c1:6a:c8:e6:b1:41:38:81:
         ca:34:f4:af:ff:ca:bd:9e:8d:24:64:48:1d:b4:e1:58:6b:b9:
         db:6b:25:5a:a1:77:0e:d8:62:07:e2:0c:fe:18:85:ad:ac:60:
         93:2b:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----