Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/868837-2de1-49b3-9af9-0534958759ac/1/ydD7lgitlbS_5q4unxPgAv2raA0.mft
File:                     ydD7lgitlbS_5q4unxPgAv2raA0.mft (raw, json)
Hash identifier:          Q7Y8dL3KleBlmYMt/0xjvWDd4MQBsviFhXWq4t+LU+M=
Subject key identifier:   0F:CA:48:97:34:94:BB:ED:5C:ED:46:22:40:86:B8:99:E0:66:1E:98
Authority key identifier: C9:D0:FB:96:08:AD:95:B4:BF:E6:AE:2E:9F:13:E0:02:FD:AB:68:0D
Certificate issuer:       /CN=c9d0fb9608ad95b4bfe6ae2e9f13e002fdab680d
Certificate serial:       01962E2ACDE4E3E5912F814F4F5C48C34FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydD7lgitlbS_5q4unxPgAv2raA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/868837-2de1-49b3-9af9-0534958759ac/1/ydD7lgitlbS_5q4unxPgAv2raA0.mft
Manifest number:          0383
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: ydD7lgitlbS_5q4unxPgAv2raA0.crl (hash: 73BTiSuAzw6PCr7pjwEL7VCGYuV6P5LM7XqxAriV5gE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:e4:e3:e5:91:2f:81:4f:4f:5c:48:c3:4f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d0fb9608ad95b4bfe6ae2e9f13e002fdab680d
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=0fca48973494bbed5ced46224086b899e0661e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:19:3a:27:fe:a1:7d:15:b9:83:30:84:6b:
                    32:5c:ed:0e:a9:78:18:47:ce:2a:69:82:a9:29:ed:
                    33:da:f4:e5:64:1e:88:0d:f4:f3:bd:26:5d:9b:99:
                    95:55:fd:8f:c9:bb:05:a6:32:df:d2:58:bd:48:36:
                    e9:50:1b:1c:dc:38:46:86:f6:15:e3:d4:6c:2f:95:
                    5e:1e:4f:2b:43:44:a8:65:79:3f:41:ab:0c:8d:61:
                    0a:eb:95:97:1c:cd:f1:12:24:40:df:48:f0:c3:b0:
                    29:30:8e:18:07:0f:84:ec:b1:fc:fb:e9:10:64:df:
                    9a:94:15:44:9a:62:11:5c:e0:5f:d8:53:2a:75:32:
                    2c:d6:5f:9f:44:c2:75:c3:c5:e0:68:14:ae:23:be:
                    d0:1d:d8:f5:6b:c2:a0:c1:40:49:0b:96:21:90:46:
                    67:b8:7c:10:dc:7f:82:7b:e4:c5:f4:9c:ba:f1:fa:
                    ec:2c:06:b0:05:c2:ec:6c:cb:3a:06:0e:32:6e:b3:
                    6f:18:a3:a6:80:84:9a:83:e5:bb:22:98:54:00:e3:
                    1f:c1:5f:06:72:a7:86:d8:c7:8d:f5:68:bb:57:c1:
                    db:19:b6:9c:3b:f4:d1:9f:04:ed:89:b5:08:4d:0f:
                    04:73:fd:f1:ff:85:70:c4:3f:b7:f1:f6:09:12:b1:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CA:48:97:34:94:BB:ED:5C:ED:46:22:40:86:B8:99:E0:66:1E:98
            X509v3 Authority Key Identifier:
                keyid:C9:D0:FB:96:08:AD:95:B4:BF:E6:AE:2E:9F:13:E0:02:FD:AB:68:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydD7lgitlbS_5q4unxPgAv2raA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/868837-2de1-49b3-9af9-0534958759ac/1/ydD7lgitlbS_5q4unxPgAv2raA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/868837-2de1-49b3-9af9-0534958759ac/1/ydD7lgitlbS_5q4unxPgAv2raA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:95:19:93:72:ca:41:4c:13:eb:7e:88:9a:42:f4:5d:bd:08:
         58:fc:39:4c:b5:52:7c:87:36:ed:32:ec:59:ea:5c:c1:e4:e1:
         91:a6:39:63:f3:13:9d:e8:eb:01:c9:1f:40:ef:5a:55:4c:ac:
         a1:c9:cf:b2:4e:8c:e6:13:b3:e6:59:d2:9a:37:a0:99:07:52:
         55:c6:68:8c:d4:6e:8a:10:0e:45:99:d6:2b:55:9c:6b:f4:7c:
         63:ef:8d:8e:fc:5e:fc:61:bf:8e:58:ab:b4:87:2d:d0:d8:39:
         a1:89:70:a3:c9:63:11:4a:e8:bd:42:4c:d7:0b:15:b8:b4:cb:
         0b:47:1a:ba:d4:27:eb:91:b2:0a:2e:0f:3b:ce:2d:50:5b:2a:
         77:e5:8a:ed:48:e8:b0:6a:59:d7:2a:ec:31:20:68:f0:14:46:
         c4:5e:9c:cc:4e:63:f7:99:14:7e:53:50:2b:d8:70:3b:08:f7:
         b2:d9:de:da:74:8c:ca:30:dc:3e:6c:0f:7d:ec:bb:8a:41:d2:
         7e:49:8a:e0:5e:a8:23:a7:f6:12:59:02:e2:b9:7e:f7:c5:7d:
         1d:61:6c:f6:a8:a1:25:18:2d:54:18:78:4f:49:74:a6:f6:3a:
         b2:79:1f:6a:eb:84:ca:73:af:65:06:19:a6:51:34:c1:c9:07:
         ac:91:7e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----