Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
File:                     yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft (raw, json)
Hash identifier:          m3WTcxzupXhxKEg/SJKOYD3/fta1YafZhsW6+C7xsa0=
Subject key identifier:   55:79:BC:E4:4C:52:EB:30:ED:07:C8:C9:46:9F:AB:8C:9A:7D:FD:FE
Authority key identifier: CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21
Certificate issuer:       /CN=cb268b529393018d4bc9fc54073030a03d929721
Certificate serial:       01962DF3D13856A112F236EF210E7D09133B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft
Manifest number:          117E
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl (hash: bCENSZEdY3xm8khutbClWjdMF6X3UsXyXDKnv0ekLUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:38:56:a1:12:f2:36:ef:21:0e:7d:09:13:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb268b529393018d4bc9fc54073030a03d929721
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=5579bce44c52eb30ed07c8c9469fab8c9a7dfdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:df:3e:7c:2c:ba:8a:60:10:b5:60:a4:31:
                    5e:e5:9f:86:7a:d4:fd:f4:2f:1b:4e:7c:76:af:01:
                    d9:33:d5:c3:e0:29:fd:33:28:d1:1b:2e:0c:64:c7:
                    c1:6a:f5:3e:37:5e:f7:d5:f8:62:09:18:d9:9f:96:
                    12:90:39:02:22:74:fe:22:fc:e7:bf:80:7b:26:dc:
                    82:3a:15:73:b5:69:1e:9b:d0:14:8e:d9:30:c2:ce:
                    c2:42:cc:40:01:9e:9e:0d:b4:c1:67:0b:00:3e:cd:
                    d2:32:81:db:74:ac:80:fe:12:9d:d0:8f:8f:d5:5d:
                    28:63:75:b5:77:e3:db:9a:ea:43:17:79:a9:12:bd:
                    56:0c:a3:5e:59:2b:b4:d0:fb:04:b9:ac:60:78:d3:
                    a6:8e:b5:aa:2c:c8:14:da:2e:36:e3:13:63:24:6f:
                    84:38:32:81:ae:43:db:ec:57:97:ea:69:4c:07:f9:
                    ba:30:0f:44:46:92:e4:da:c9:f8:91:42:d7:de:d6:
                    14:23:8a:22:ed:c2:50:7a:af:4f:24:42:18:a3:66:
                    5a:5c:94:c8:a6:db:a0:67:da:7e:b4:0c:bb:78:97:
                    a3:e0:3e:6c:95:b3:d8:3e:91:7b:a2:aa:e1:3d:8b:
                    67:62:58:72:ec:28:68:8a:e4:62:20:71:2e:08:e6:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:79:BC:E4:4C:52:EB:30:ED:07:C8:C9:46:9F:AB:8C:9A:7D:FD:FE
            X509v3 Authority Key Identifier:
                keyid:CB:26:8B:52:93:93:01:8D:4B:C9:FC:54:07:30:30:A0:3D:92:97:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyaLUpOTAY1LyfxUBzAwoD2SlyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/39a6d4-b937-4d5f-8016-f2700864c187/1/yyaLUpOTAY1LyfxUBzAwoD2SlyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:41:99:a6:8c:1a:46:6e:11:56:0d:4a:d4:84:a0:35:dd:fd:
         a8:bc:ae:f2:2a:f8:1e:9e:3e:60:88:be:0b:41:c4:6e:15:64:
         db:72:28:14:68:b7:5d:44:69:26:a9:f1:52:dd:04:64:3b:0b:
         10:84:4a:c0:02:91:88:ce:72:88:1b:ff:1f:07:9f:40:51:ae:
         c2:b6:20:b0:a4:45:0e:34:d8:a1:0c:72:19:03:40:9e:9c:08:
         0f:65:de:89:ff:50:e2:aa:fe:36:26:7e:09:54:c0:07:de:20:
         e3:11:54:30:04:55:39:54:01:4e:89:12:40:af:b6:a7:c0:c4:
         22:0d:71:49:be:98:d9:45:b0:51:83:4e:fb:cf:bf:79:d5:74:
         f7:ab:e4:aa:49:44:47:02:7b:7c:fe:18:b8:6a:55:60:db:8a:
         56:41:42:86:c6:86:78:02:99:b5:e1:03:87:cf:10:3f:a2:ba:
         58:59:28:36:47:43:83:f2:72:37:44:b0:2b:15:f2:45:69:ae:
         25:68:5e:0d:05:d7:52:11:05:29:11:81:4e:a9:23:b6:a7:e3:
         7d:7b:92:de:9b:6f:a6:0a:57:8a:2b:d1:80:76:64:d4:af:a4:
         a9:9e:9a:d1:a8:13:24:72:48:a0:a9:62:e7:57:da:16:be:99:
         bd:d2:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----