Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
File:                     yjzk270E4HrOGTf4ChWvc5m4Aw4.mft (raw, json)
Hash identifier:          f4e1ygoyvQm5W/lYIZE7c+JjuT6DK0mI4pitGg8Ml8A=
Subject key identifier:   3A:3D:2E:B0:01:70:D8:E2:64:D8:13:02:70:6E:E0:9A:CD:01:FC:08
Authority key identifier: CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E
Certificate issuer:       /CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
Certificate serial:       01962FAB3E6E32EEAF50D7F7716757F385E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft
Manifest number:          0481
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: yjzk270E4HrOGTf4ChWvc5m4Aw4.crl (hash: UnOCZIMKvXnVfF1mlCB4WB9G4C8Z7Bwp86xCO9uUAIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3e:6e:32:ee:af:50:d7:f7:71:67:57:f3:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3ce4dbbd04e07ace1937f80a15af7399b8030e
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=3a3d2eb00170d8e264d81302706ee09acd01fc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0c:75:6b:ae:8b:30:e6:68:c9:32:f4:33:4e:
                    f3:73:ed:76:7d:e7:74:1f:bb:4d:d8:97:99:50:27:
                    49:3e:93:9b:95:4f:06:82:3b:c2:22:58:ad:30:10:
                    d9:ee:dc:b9:ce:10:64:18:38:9d:cc:71:52:9a:05:
                    9b:82:0b:54:1d:64:b8:b6:ce:5c:d3:7b:0e:28:ea:
                    7b:27:a3:96:ad:bf:49:32:c3:9a:7b:7f:9a:d8:b7:
                    29:ac:6d:78:d7:d5:d7:59:d0:4d:78:5c:2c:f6:af:
                    5c:7a:c6:10:83:2c:1a:ae:9c:f2:31:4d:4a:25:07:
                    fd:54:5d:9b:b0:e3:75:55:f2:c7:54:d8:16:c0:3d:
                    18:91:2a:52:44:d2:2b:4f:d7:66:a4:59:3b:cd:e1:
                    ce:bd:b9:16:ed:81:ab:07:01:60:88:5f:25:86:62:
                    cd:83:16:0e:b8:99:66:f5:c3:1d:39:5b:82:6c:21:
                    fd:d6:50:a7:53:94:cb:0e:90:b9:72:77:42:e7:5e:
                    64:d5:13:48:92:ca:aa:a8:2b:f0:d8:dd:70:c9:ea:
                    5b:1a:18:b0:63:25:58:9e:e6:b9:2c:99:37:48:dd:
                    c2:4f:d9:08:d9:5e:f8:c2:09:3e:b2:4c:61:37:84:
                    5f:9c:c8:04:1c:43:a2:a3:31:b5:33:e6:87:14:f5:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3D:2E:B0:01:70:D8:E2:64:D8:13:02:70:6E:E0:9A:CD:01:FC:08
            X509v3 Authority Key Identifier:
                keyid:CA:3C:E4:DB:BD:04:E0:7A:CE:19:37:F8:0A:15:AF:73:99:B8:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjzk270E4HrOGTf4ChWvc5m4Aw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a5d9a3-c454-4b7e-800d-617cd3df395b/1/yjzk270E4HrOGTf4ChWvc5m4Aw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:47:ee:c1:80:58:c4:6b:8d:4e:ef:00:b5:b4:e0:45:c4:a2:
         eb:d2:af:40:a6:d5:2e:7e:f2:3a:cf:e5:c3:8a:2a:c5:c0:4c:
         74:dc:64:e4:d4:fb:ca:90:92:1e:bd:d4:e2:9d:71:79:10:6d:
         d0:71:32:26:a3:63:35:47:2b:6f:9f:44:d7:99:7d:c3:00:a2:
         21:2d:b3:64:c9:e1:5f:30:02:c5:0f:1e:a6:5f:9e:c9:f1:64:
         44:08:95:1a:65:3b:fe:ed:1c:0b:9d:ea:24:fd:8c:38:e6:04:
         48:3e:56:73:34:09:9a:33:2a:06:4c:38:e1:b7:13:c1:b3:e4:
         58:87:67:88:3c:2f:be:2b:ad:ad:90:9e:91:7c:0a:72:c4:eb:
         88:66:2e:56:38:ea:80:96:23:0d:ee:ff:be:1b:a0:8f:77:ab:
         a5:37:b8:a9:0b:39:49:8b:13:98:70:c0:21:a7:35:76:32:d4:
         8d:89:07:90:22:f4:19:53:eb:2a:08:76:ae:62:27:4d:7a:66:
         0c:b2:66:d3:55:2a:4d:6e:76:79:15:62:c2:a4:0d:63:a0:08:
         cf:a5:ea:54:dd:99:32:4c:42:05:f3:77:8b:2f:04:9b:d8:6d:
         08:d4:47:0a:06:69:29:64:fe:ce:d0:86:32:5e:7a:8d:11:ce:
         e9:61:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----