Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0939da-4238-427b-b5b9-ecc3e670ad58/1/yyhUSNE7wHLfwpZ6ThrLdd4QkbI.mft
File:                     yyhUSNE7wHLfwpZ6ThrLdd4QkbI.mft (raw, json)
Hash identifier:          EfeFWa6CTPv9fdJ20oCqRNleVu18kYsS1KKuTMPWOvY=
Subject key identifier:   02:E7:09:E4:EF:AA:45:E1:7D:23:26:02:01:77:A7:86:1C:71:30:65
Authority key identifier: CB:28:54:48:D1:3B:C0:72:DF:C2:96:7A:4E:1A:CB:75:DE:10:91:B2
Certificate issuer:       /CN=cb285448d13bc072dfc2967a4e1acb75de1091b2
Certificate serial:       018C7C5E78A1E56B7C8829C7B1D6D748801E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yyhUSNE7wHLfwpZ6ThrLdd4QkbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0939da-4238-427b-b5b9-ecc3e670ad58/1/yyhUSNE7wHLfwpZ6ThrLdd4QkbI.mft
Manifest number:          0443
Signing time:             Mon 18 Dec 2023 10:00:15 +0000
Manifest this update:     Mon 18 Dec 2023 10:00:15 +0000
Manifest next update:     Tue 19 Dec 2023 10:00:15 +0000
Files and hashes:         1: yyhUSNE7wHLfwpZ6ThrLdd4QkbI.crl (hash: EX3xgAFMZbDY0azP8SVqwZT7R6y/njB1o6X+rJBBQbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7c:5e:78:a1:e5:6b:7c:88:29:c7:b1:d6:d7:48:80:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb285448d13bc072dfc2967a4e1acb75de1091b2
        Validity
            Not Before: Dec 18 10:00:15 2023 GMT
            Not After : Dec 19 10:00:15 2023 GMT
        Subject: CN=02e709e4efaa45e17d2326020177a7861c713065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:34:bb:13:ad:7e:d0:5f:d9:be:09:0a:71:8c:
                    0d:0d:09:ae:59:8c:b7:6a:e8:70:9e:50:b5:8f:15:
                    03:1c:03:e2:24:28:c1:e0:e8:5c:82:fc:e9:b5:9b:
                    27:61:5a:b4:6c:3f:4c:28:32:c8:8b:78:e2:4d:a5:
                    bc:b1:dc:30:5f:e7:35:c9:ea:4e:93:f1:b5:1d:a4:
                    be:b6:d9:e8:2e:5b:18:b6:03:df:ac:ef:da:01:3b:
                    e6:1e:82:3e:20:4b:25:f1:ba:1b:a6:ca:6d:83:21:
                    b1:69:9c:b1:4a:91:ac:db:97:78:b4:ff:1f:da:aa:
                    d3:b8:dc:11:1e:98:70:9b:c6:15:09:44:82:e0:4c:
                    2d:84:34:3d:2d:92:a5:8a:8b:70:f6:87:12:68:3f:
                    58:69:09:f5:0e:a1:d1:e1:e3:4d:45:d7:64:a2:50:
                    dc:98:46:d0:bf:1f:da:98:15:87:04:3b:c2:62:dd:
                    53:b9:2a:67:70:8a:c8:1b:84:37:3a:31:4c:2c:25:
                    4a:55:5f:c7:3e:70:14:6c:c0:52:c3:bc:eb:ce:50:
                    b5:77:b1:b3:2f:c8:13:97:d2:31:18:4e:32:f7:3c:
                    47:57:41:32:fa:eb:12:78:33:71:7e:19:6b:79:75:
                    f1:25:c8:90:25:9e:e6:20:86:60:51:f0:54:4e:de:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:09:E4:EF:AA:45:E1:7D:23:26:02:01:77:A7:86:1C:71:30:65
            X509v3 Authority Key Identifier:
                keyid:CB:28:54:48:D1:3B:C0:72:DF:C2:96:7A:4E:1A:CB:75:DE:10:91:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyhUSNE7wHLfwpZ6ThrLdd4QkbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0939da-4238-427b-b5b9-ecc3e670ad58/1/yyhUSNE7wHLfwpZ6ThrLdd4QkbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0939da-4238-427b-b5b9-ecc3e670ad58/1/yyhUSNE7wHLfwpZ6ThrLdd4QkbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:58:48:a9:c4:60:77:ee:68:02:99:c5:cb:a1:29:b6:da:
         a0:c9:16:6b:8a:f2:7d:59:bf:3e:19:59:67:70:73:eb:6a:3e:
         b9:4a:31:38:f4:85:71:5c:bc:4d:ab:f5:a0:4c:fa:ef:c6:70:
         f7:89:cd:5e:ea:36:2e:5b:3a:15:bc:f9:b0:4f:fc:11:5a:6b:
         3b:6d:6a:28:38:b6:e8:ed:82:9d:48:0e:cc:11:e7:ee:2d:d5:
         54:4e:e3:61:42:c9:f5:d3:e6:97:51:61:8b:8b:a9:26:fc:04:
         74:a1:6f:43:39:f4:5c:83:70:69:e1:f0:b9:16:46:d9:1f:2f:
         e9:30:e4:63:19:d3:b5:d6:86:f7:31:f6:09:91:84:42:2f:96:
         94:14:b5:38:de:c6:b9:8c:51:bf:e7:79:08:b4:bd:fb:5f:b1:
         5e:5a:39:86:de:35:20:9a:4e:5a:05:61:cb:4b:fb:34:40:c8:
         26:9c:ba:bc:32:ba:a8:70:dd:b7:1e:4e:f4:a3:ea:b8:18:38:
         f1:c9:25:a4:b6:97:e9:bd:59:d2:3f:3c:63:9e:27:69:09:35:
         e1:a9:69:9c:95:a8:89:6c:88:c6:7c:91:61:2d:e3:da:2f:8d:
         b8:b2:91:ae:1a:0b:a1:7a:ff:f9:85:10:e1:2b:70:e3:bf:7c:
         b6:91:4c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----