Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
File:                     YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft (raw, json)
Hash identifier:          TPUCa7R4nHE7WJfv9bxljn3/2EoqdqNXzSw62bg14v4=
Subject key identifier:   05:26:CB:91:29:A2:D6:D9:81:BA:19:44:73:CF:75:08:6C:9B:63:75
Authority key identifier: 60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21
Certificate issuer:       /CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
Certificate serial:       01962F068267342DCC1405A60E7410103526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft
Manifest number:          0663
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl (hash: t+Yu36/vulGrSKHZEF0C/k8i1dzLeh9oGryMR5hobBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:67:34:2d:cc:14:05:a6:0e:74:10:10:35:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fb55e9ae2632cedefdb55599521c55b8d0b121
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=0526cb9129a2d6d981ba194473cf75086c9b6375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:5a:d9:02:19:a6:f2:2f:c1:26:f0:bc:ab:
                    f6:9b:bf:78:64:e1:92:6f:47:64:68:b4:e0:44:c8:
                    c8:45:04:0e:1a:ab:bd:76:e6:fa:f0:b5:70:76:61:
                    ab:f9:99:b7:37:1f:72:b3:45:64:f9:8e:45:01:af:
                    cc:b1:58:24:d6:6b:ca:c4:57:7a:56:c9:e2:4d:82:
                    c3:43:c4:60:53:d3:30:92:50:9c:b7:c1:b2:43:5f:
                    04:b6:8f:8b:f0:d1:2f:db:76:37:4f:ad:1c:57:2c:
                    5d:f6:2f:bf:21:ca:c2:a8:a7:56:04:28:a7:52:86:
                    c2:71:c7:77:7e:85:ad:5d:66:8d:08:8d:68:f3:81:
                    96:10:8e:0e:0a:85:42:f3:57:0f:ea:b8:a7:0e:c8:
                    39:64:f1:6a:d2:58:68:0d:a4:8f:c2:59:77:dd:f7:
                    fe:65:9d:16:06:1f:0b:ad:38:20:32:71:0b:e1:6b:
                    11:bd:e4:7d:6a:0b:33:99:74:ba:1c:f3:16:e9:94:
                    cd:61:1f:a2:dd:cc:53:87:01:6c:a9:22:c3:5a:f3:
                    4e:3f:91:1a:51:50:b3:26:16:bf:26:c9:65:ec:b4:
                    93:f4:41:4f:5d:f3:57:93:64:3e:f6:94:ec:b4:5e:
                    29:cb:e3:51:e5:f7:1e:9f:fe:c5:6b:ce:f5:cb:4a:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:26:CB:91:29:A2:D6:D9:81:BA:19:44:73:CF:75:08:6C:9B:63:75
            X509v3 Authority Key Identifier:
                keyid:60:FB:55:E9:AE:26:32:CE:DE:FD:B5:55:99:52:1C:55:B8:D0:B1:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPtV6a4mMs7e_bVVmVIcVbjQsSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/df9f01-f08a-4ce8-9429-102067be19f2/1/YPtV6a4mMs7e_bVVmVIcVbjQsSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:8c:ee:67:cf:63:e4:04:a9:b5:fd:ac:f7:31:e0:47:20:
         29:c8:7f:8b:84:08:6b:2b:2b:3b:3c:61:bd:71:60:4f:0d:a2:
         f7:dc:18:95:4a:5a:8a:ae:1c:50:a9:54:73:34:9f:9a:2c:29:
         bd:07:2b:3a:ae:e2:6f:8b:2b:e5:b6:dd:6b:fc:53:e7:89:4b:
         7d:bb:1b:4a:8f:f0:26:22:c4:2b:0e:b5:d5:b3:0c:6c:c0:fd:
         69:82:aa:f0:ad:76:31:ad:4d:fe:47:35:d8:87:39:56:da:18:
         18:09:96:d6:f0:82:4b:aa:7f:e4:d4:56:fb:da:de:71:e8:ea:
         7b:cf:3b:b4:ea:b8:6a:92:e0:ee:75:22:16:c7:3f:ec:84:cf:
         1b:85:6b:15:40:5c:9e:97:88:8a:48:ef:17:c7:92:55:e4:89:
         00:a1:a0:67:83:e8:1f:82:ff:7a:4a:a1:d0:ff:4e:08:71:30:
         d9:8a:19:21:e7:ec:cc:13:10:2d:c2:7e:bb:4f:74:dd:bb:ea:
         49:19:e6:3a:b5:6a:79:4e:a4:9d:ca:28:99:24:f9:fa:66:73:
         0e:a1:a0:c5:73:cd:e0:97:77:18:f1:4d:d7:10:48:fb:96:ed:
         18:4a:d5:dd:84:5d:8c:3b:ec:0c:35:ac:be:e2:26:29:c1:3f:
         0f:81:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----