Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
File:                     y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft (raw, json)
Hash identifier:          V7hkaz4WghMAVP24kaPqoJO0RSknRg9ff7/y2aNVefQ=
Subject key identifier:   31:E9:4A:D2:36:51:80:5A:08:04:F5:09:EE:C8:F0:27:CF:43:0A:6F
Authority key identifier: CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA
Certificate issuer:       /CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
Certificate serial:       01962E98EB97A3A71C4ACFA65E9EBD817E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft
Manifest number:          144C
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl (hash: dJSR7vZ4POv0rpcKLhnxxrYshEU8XOax3XZ68tX41OQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:97:a3:a7:1c:4a:cf:a6:5e:9e:bd:81:7e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb556ab12990f1871a9e1ee743969aa8a2799fca
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=31e94ad23651805a0804f509eec8f027cf430a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:c0:63:db:ec:ac:63:9e:c6:bb:5d:cc:ef:
                    85:d1:75:47:28:1c:a1:2b:5a:7f:cc:3c:1e:6a:1d:
                    69:99:2e:b7:7a:62:89:79:92:e2:b7:9e:a5:bf:59:
                    1e:33:16:68:0a:3c:61:07:c1:21:c9:a2:9d:c4:4a:
                    fa:4d:60:c7:e7:eb:19:9b:d4:77:08:40:93:53:a6:
                    40:18:84:de:78:dc:87:e3:a9:8d:f1:bb:f9:2f:0f:
                    da:54:a1:45:e6:44:bc:7b:e5:86:cb:40:c2:28:ba:
                    4f:71:4c:8d:b1:28:06:89:97:b1:79:6a:c0:e7:fd:
                    52:41:b1:9f:84:7f:cd:64:f9:fa:c7:8e:ca:f9:38:
                    d5:0f:91:b6:27:88:fd:c1:d9:a8:d0:be:ea:34:c3:
                    19:75:83:dc:c9:10:c7:cf:fe:d3:77:04:ce:9b:1a:
                    57:bf:ee:51:63:81:dd:0d:8f:54:0e:26:ae:a2:16:
                    b2:1a:c0:2d:d6:56:f5:69:25:7c:e6:cd:43:0a:ed:
                    2d:8f:4f:0b:fe:6e:f1:ca:d8:ae:b5:bc:7f:26:1b:
                    44:5f:ed:4a:e1:b9:98:26:54:17:0e:c7:a4:07:26:
                    98:e7:df:f3:95:a7:00:7e:b1:7d:06:b9:e4:80:9e:
                    a1:96:f3:4c:71:1c:9d:82:e8:de:57:51:10:ea:61:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E9:4A:D2:36:51:80:5A:08:04:F5:09:EE:C8:F0:27:CF:43:0A:6F
            X509v3 Authority Key Identifier:
                keyid:CB:55:6A:B1:29:90:F1:87:1A:9E:1E:E7:43:96:9A:A8:A2:79:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b9686e-6580-450d-9c22-9c581591ec91/1/y1VqsSmQ8Ycanh7nQ5aaqKJ5n8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:36:33:0d:c2:a6:26:39:b2:df:c1:04:85:93:01:f6:99:
         05:5b:f9:4f:8b:c6:73:d2:fa:68:4e:bd:db:68:77:30:13:87:
         5a:05:e4:53:ca:65:d1:20:ee:ff:7a:cc:0a:d2:53:80:56:68:
         fd:1e:36:20:7a:54:7d:02:3f:15:55:1c:43:56:df:6e:22:ab:
         1e:24:3c:a8:3a:64:f3:80:06:8e:f7:fc:ac:4c:e0:2b:03:e8:
         17:b8:f9:85:7e:08:b3:5d:97:8b:c6:ec:a4:65:06:3d:32:ed:
         b9:fb:e3:3b:3e:a0:76:01:47:94:8e:80:58:2b:74:01:c2:42:
         5a:c3:3c:f3:a6:ae:35:8b:dc:3f:45:51:1b:fa:e4:12:4f:a3:
         bf:14:ad:9c:37:26:c0:bf:f3:1a:10:34:b5:3c:ea:cb:ec:bc:
         1f:d2:eb:d7:4a:71:9b:16:8e:94:da:d4:01:97:47:db:e3:f0:
         cf:1f:50:91:7f:06:c5:fa:52:6d:8e:bb:2a:c1:e0:3f:34:e6:
         8a:63:50:f2:32:0a:cf:b0:73:a2:2e:b8:81:fc:b3:3e:ab:92:
         8b:65:9b:b5:d9:a2:9d:ee:1a:d7:93:4f:72:0c:22:f9:72:64:
         3a:e1:67:2d:33:79:13:9c:5e:4e:28:8a:5d:86:91:cc:20:d8:
         5e:5a:8b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----