Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
File:                     yYDRnDv8xARxVndvAqNJiY5GuQ0.mft (raw, json)
Hash identifier:          AY70sv+IhfA0IEY3OeDYx7Y7A7DMZeqBxkQVOn94c+0=
Subject key identifier:   C8:21:72:F5:53:C9:80:AB:5C:2F:62:3C:75:0B:92:0F:D7:DC:4F:B4
Authority key identifier: C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D
Certificate issuer:       /CN=c980d19c3bfcc4047156776f02a349898e46b90d
Certificate serial:       01962E99471A403F0396EC3ACF4B3A1785C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft
Manifest number:          0805
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: yYDRnDv8xARxVndvAqNJiY5GuQ0.crl (hash: nx5QlDf/BqeUoLTAthihI4Seb4oUfuKfbC3LqH4wFbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:47:1a:40:3f:03:96:ec:3a:cf:4b:3a:17:85:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c980d19c3bfcc4047156776f02a349898e46b90d
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=c82172f553c980ab5c2f623c750b920fd7dc4fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:52:cf:ae:09:f3:a1:e4:50:9b:80:06:1e:
                    df:2f:46:88:d3:03:fc:b2:89:c7:ab:13:0e:39:29:
                    6c:8b:89:ca:cb:60:96:66:91:70:aa:90:25:54:ce:
                    16:bb:4a:06:1a:ab:5f:a3:21:fa:ad:45:e9:8e:aa:
                    db:95:1e:44:5b:7d:c7:1b:e2:e5:19:3c:aa:da:b1:
                    8d:1f:00:ce:df:40:73:3a:b9:d8:27:7a:e1:83:d3:
                    c0:14:ee:4d:c2:70:62:db:f0:d5:5b:a7:e4:38:81:
                    22:9f:33:fa:ad:83:f0:55:08:7f:88:b1:ea:36:59:
                    ce:ef:4c:82:e4:6f:46:70:05:08:8e:d6:9d:3c:84:
                    23:56:93:2a:21:d7:be:97:b4:a7:f6:25:92:9a:34:
                    e3:ec:89:d5:5d:67:dd:c0:a1:97:0f:92:93:6b:cd:
                    e8:3d:d9:29:33:b5:fa:c5:e6:1a:5c:d4:a3:e7:1d:
                    07:0d:67:02:e0:ce:3e:27:5c:41:b7:9b:33:4b:53:
                    f2:6a:88:c5:88:07:de:89:b1:82:92:fa:35:81:76:
                    02:5d:dc:49:ca:6b:48:86:8a:2d:34:b3:b6:10:5a:
                    0f:36:24:dd:77:47:b2:20:b8:1e:6a:8d:3d:89:e4:
                    05:98:bd:33:35:39:ae:d2:90:93:5c:6d:25:13:16:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:21:72:F5:53:C9:80:AB:5C:2F:62:3C:75:0B:92:0F:D7:DC:4F:B4
            X509v3 Authority Key Identifier:
                keyid:C9:80:D1:9C:3B:FC:C4:04:71:56:77:6F:02:A3:49:89:8E:46:B9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYDRnDv8xARxVndvAqNJiY5GuQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/68c063-400a-4ed1-9fbf-b86619752039/1/yYDRnDv8xARxVndvAqNJiY5GuQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:cf:e7:58:f3:c6:92:cd:0c:a6:30:bc:53:b5:eb:88:7a:
         9c:50:79:f1:ac:1e:38:f6:63:6b:1d:f0:79:d2:a9:78:1e:71:
         29:38:d2:a0:66:8f:22:c0:ee:5d:03:57:ba:ad:10:4b:bd:9e:
         48:0e:1c:db:a3:b3:8d:88:99:55:7b:96:70:0e:b5:77:69:08:
         b7:cf:b4:bb:49:31:fc:17:dd:83:c6:29:67:87:57:6c:b4:b7:
         5c:d0:1f:02:a9:ad:95:09:ba:4f:ba:97:58:17:e8:1b:e0:53:
         99:1e:81:1f:21:c0:08:d3:7b:92:b7:e3:99:af:6b:2d:ef:23:
         f1:c1:89:db:21:ae:b9:30:77:3d:1f:ef:7e:43:4d:e8:58:cd:
         23:94:c5:1e:fe:a8:28:65:a4:4a:23:99:e0:3d:3f:40:28:29:
         b1:9a:33:9c:de:46:c2:07:d4:cd:0d:0d:12:44:52:57:5e:f8:
         77:37:ae:a7:ba:79:0f:ee:1b:f4:b3:09:be:8a:c9:7b:d4:29:
         64:1d:fc:ff:bd:52:ba:d0:9d:a5:c7:c7:c8:de:0d:ff:90:3a:
         28:08:75:92:88:1b:97:6c:51:d9:a2:e2:e0:70:ba:fb:c8:73:
         5e:2a:03:3a:ba:39:21:d7:57:0d:fd:40:2c:bf:f4:8a:14:a9:
         a4:42:0e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----