Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
File:                     2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft (raw, json)
Hash identifier:          K+HwKeWeLAvWTEtboHKtw4DyJg7uP8X2szetcOaBD90=
Subject key identifier:   3C:63:5F:26:B2:7C:34:22:44:60:C5:2A:E3:11:9D:78:85:EA:32:F6
Authority key identifier: D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9
Certificate issuer:       /CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
Certificate serial:       01962F74379E4A34AA8E1C2E866FD5EF05C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft
Manifest number:          120C
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl (hash: n0T1HF52KRq3zVCY+e1kdCeIzkTSCx3CxDeUpis/704=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:37:9e:4a:34:aa:8e:1c:2e:86:6f:d5:ef:05:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98ffa045b35b16dc99419e3e0e6e16e6edb47e9
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=3c635f26b27c34224460c52ae3119d7885ea32f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:14:49:4a:6c:75:2b:ad:cc:90:c1:30:ce:
                    4f:4e:3e:cf:23:b2:83:20:08:cb:12:be:61:90:5a:
                    78:52:3a:94:60:43:05:2b:25:00:2b:5f:b4:16:f8:
                    13:c5:c5:44:c8:76:83:c8:24:f8:6c:55:2f:4d:9a:
                    94:b0:58:51:df:41:40:25:98:b5:77:50:b2:bb:a2:
                    0c:eb:3a:c5:e0:fd:5f:1a:f3:f1:b6:9f:93:71:e1:
                    f7:70:86:18:53:ce:5b:a7:e3:1b:dc:a6:01:28:39:
                    9f:9a:cd:15:21:4c:b0:80:8f:de:a8:9d:3a:8b:55:
                    54:65:11:6e:c0:8a:5c:1c:99:1f:62:f3:3e:37:c3:
                    53:c4:94:50:29:c1:50:00:c8:2b:82:01:6e:8f:ff:
                    96:90:6b:f2:44:f3:5e:e2:e4:9c:8a:ac:08:36:7e:
                    5e:6f:bc:ea:3a:da:4a:d3:61:21:20:13:3a:74:a2:
                    97:f2:8a:a4:33:e6:b2:d9:57:1c:a0:48:15:50:2b:
                    d9:5b:bb:85:e9:4c:1e:f1:69:62:e4:b1:77:a9:a7:
                    2d:a3:f1:57:15:1d:b5:8b:cf:d8:1b:9d:88:26:77:
                    3e:d5:3f:56:03:1f:0e:f1:6b:70:a3:b0:3c:d9:6c:
                    d7:df:a7:d5:b7:aa:b2:68:8e:c5:b5:e6:39:c4:a0:
                    e6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:63:5F:26:B2:7C:34:22:44:60:C5:2A:E3:11:9D:78:85:EA:32:F6
            X509v3 Authority Key Identifier:
                keyid:D9:8F:FA:04:5B:35:B1:6D:C9:94:19:E3:E0:E6:E1:6E:6E:DB:47:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/814115-0993-4a1f-ae10-ee25d2c5b410/1/2Y_6BFs1sW3JlBnj4Obhbm7bR-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7f:a4:1e:79:46:6a:53:f2:a0:2a:16:ac:0a:b8:4a:9f:d0:
         d1:41:81:7c:0c:b1:7e:40:e0:c1:76:92:6b:a8:4a:cb:9e:04:
         3c:54:09:94:94:ee:7a:09:c9:03:90:ef:50:1d:60:8c:6e:66:
         fc:79:e3:dc:72:be:74:4d:b5:d3:f1:06:03:b3:66:e7:29:b5:
         57:2d:be:e0:f1:ea:bf:46:c7:4f:91:df:11:54:9a:ce:1e:db:
         01:41:26:fd:68:c2:95:7e:a4:2f:90:51:78:ab:30:4a:d4:50:
         68:c7:f8:46:b7:6d:aa:c0:aa:d3:77:a6:58:41:de:f6:71:16:
         bc:eb:bd:64:3b:62:c2:6e:3d:48:cb:c7:68:5c:8c:20:b1:2e:
         fb:83:b8:81:24:55:89:da:0d:af:75:3b:ba:cc:15:29:32:66:
         2c:9b:1e:f7:96:5e:50:1e:80:31:a8:09:28:e3:49:81:a2:78:
         be:15:ec:28:35:1a:fb:3e:bc:3e:35:46:e2:28:e7:87:a6:b0:
         cf:cf:da:a4:87:f9:e7:68:fb:fd:17:06:08:8b:f2:41:e0:6b:
         d6:3f:ed:2d:48:73:b0:1d:b1:f1:a2:ff:45:18:24:b6:50:59:
         36:1b:84:6c:67:16:7f:16:9e:09:87:df:90:2a:8f:6a:17:56:
         2d:71:eb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----