Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
File:                     Yg0Py0uU5BGo3iYgncFeMt-omqA.mft (raw, json)
Hash identifier:          /GIvHZykUerqdsE6FW4oY/XmTkEqDP8Vh63Qc9+wGCo=
Subject key identifier:   95:CA:AB:19:BB:8B:75:62:B0:DE:68:B6:EC:9C:2B:62:62:AD:4F:04
Authority key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Certificate issuer:       /CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Certificate serial:       01981C56292017DE2FE5CAE25B618C13614B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
Manifest number:          09B2
Signing time:             Fri 18 Jul 2025 07:01:05 +0000
Manifest this update:     Fri 18 Jul 2025 07:01:05 +0000
Manifest next update:     Sat 19 Jul 2025 07:01:05 +0000
Files and hashes:         1: Yg0Py0uU5BGo3iYgncFeMt-omqA.crl (hash: KxGg3NXNEShOZU0ZFCnXVB1IC435oBmFm9FKInQ3dmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:1c:56:29:20:17:de:2f:e5:ca:e2:5b:61:8c:13:61:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
        Validity
            Not Before: Jul 18 07:01:05 2025 GMT
            Not After : Jul 19 07:01:05 2025 GMT
        Subject: CN=95caab19bb8b7562b0de68b6ec9c2b6262ad4f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2c:0b:96:7c:2e:36:ba:dd:50:b5:1e:23:fc:
                    af:52:4f:9d:a2:2c:48:4c:9a:22:dc:df:87:e5:65:
                    3d:ae:d3:e3:79:b6:68:4b:80:83:7e:98:0a:6d:4c:
                    5e:f1:b7:45:f5:3b:19:df:87:e6:32:af:dc:d6:85:
                    77:53:36:a5:4d:3d:1f:fb:61:d0:90:32:57:07:32:
                    2f:76:52:12:e3:bb:f4:a6:81:8c:4d:ac:9e:5d:d5:
                    75:e5:de:23:b4:26:bb:87:bb:f3:21:08:2e:18:f0:
                    c7:5d:d2:8a:04:51:c3:e0:ab:16:b4:ae:89:88:67:
                    8b:83:c6:62:92:3a:05:0d:2d:9a:0b:34:7a:46:56:
                    23:88:70:e2:81:7e:bb:63:77:84:2e:99:8d:67:46:
                    f3:cf:e1:74:a9:d8:b1:12:40:76:7d:9f:2f:14:3f:
                    86:f7:1e:17:c4:c3:a6:cb:6a:5d:8c:04:73:e1:b1:
                    98:cb:dc:a6:e8:cf:bb:35:58:84:a6:ac:c8:5c:5b:
                    b5:f3:5f:44:2a:6a:d9:08:43:28:90:ca:c5:de:37:
                    04:76:5c:7c:a6:81:55:8c:1b:16:98:47:7e:eb:70:
                    b9:6d:cd:b7:e1:fd:57:64:d9:3d:d4:0f:9a:cb:96:
                    58:4f:65:de:1a:32:73:10:a2:bf:f1:c2:88:dd:20:
                    ca:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CA:AB:19:BB:8B:75:62:B0:DE:68:B6:EC:9C:2B:62:62:AD:4F:04
            X509v3 Authority Key Identifier:
                keyid:62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:33:ca:7c:8d:f5:6a:9d:0f:3a:6a:2d:cc:66:be:7d:79:92:
         f4:1d:89:4e:86:70:9d:4e:ca:f1:09:df:b2:97:88:90:1c:21:
         a7:54:26:14:f5:a2:f1:1c:10:c1:06:0b:66:5c:73:d5:e1:f2:
         bb:fe:68:f0:57:28:0a:77:65:14:ed:e5:f7:dc:bf:b0:cd:2c:
         f6:6f:5b:ed:5d:86:ab:b9:c4:b7:23:55:61:61:49:f4:73:72:
         3e:45:f8:c5:e0:cb:d0:74:c3:0b:57:c2:3d:55:86:36:35:0a:
         d7:a7:e3:bd:aa:e4:fa:6b:d4:02:5f:81:07:56:87:8f:dd:46:
         ab:24:f2:ed:ad:9d:67:e3:17:36:0f:5b:89:48:c9:eb:b4:64:
         f5:42:9e:53:49:fa:89:cd:80:8b:ee:22:7d:7b:34:25:2c:e2:
         6d:a3:ec:d6:0a:b4:48:52:2d:1c:c0:c6:a9:7b:8a:4c:8c:3d:
         6e:97:2a:2b:75:71:32:46:41:a1:b3:42:e8:4c:2d:82:99:a5:
         6d:dd:72:2a:a6:02:fb:b2:1e:94:d1:7f:9e:8c:c1:07:e1:20:
         40:8d:c5:63:4f:02:c4:aa:e2:0f:6b:a7:03:df:86:22:70:ae:
         3a:b7:8b:67:4a:9c:f3:92:f4:23:da:9f:b8:08:10:8d:6c:7d:
         67:e9:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----