Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
File:                     ny4CE8HB23M97spK4mFsqv-lFXA.mft (raw, json)
Hash identifier:          6auD7wjj6+Uh+812VMipgeRAJp5fxZuYIsOqY477h64=
Subject key identifier:   BC:38:6E:2B:D2:6C:16:15:A8:35:C0:A9:86:0C:5B:D5:FD:AD:DA:D6
Authority key identifier: 9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70
Certificate issuer:       /CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
Certificate serial:       01962F74CC80EB09D4577F49C1E67AE5D7E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft
Manifest number:          1198
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: ny4CE8HB23M97spK4mFsqv-lFXA.crl (hash: kIaygJmaOQfxHEv6TqO9mLNO/TJ7jNMJq0XnYJF93C4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cc:80:eb:09:d4:57:7f:49:c1:e6:7a:e5:d7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f2e0213c1c1db733deeca4ae2616caaffa51570
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=bc386e2bd26c1615a835c0a9860c5bd5fdaddad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:49:cb:26:dd:2e:d3:bd:04:e5:db:18:64:
                    4f:cd:bc:c5:55:1f:81:3e:49:6f:c5:84:97:7b:24:
                    35:82:5b:e1:26:f1:e8:e6:10:75:34:7a:d4:25:07:
                    49:dc:dc:2a:da:d8:95:2e:37:9f:28:d7:b8:6f:83:
                    bd:c3:ec:79:fa:ef:28:dd:24:d3:33:88:6d:8f:f1:
                    a1:55:64:4b:de:b7:df:c3:26:25:15:bc:74:85:e0:
                    f4:8a:19:98:a4:73:9e:d7:61:35:11:f3:b4:20:e9:
                    a2:ae:f9:0c:03:6d:37:8e:87:0c:45:c5:ff:97:83:
                    c1:9f:6f:c7:96:12:cf:c1:ce:3d:38:d9:f8:e4:ba:
                    07:40:a3:f6:99:51:78:47:67:cb:88:4c:c8:41:db:
                    1a:7e:2f:53:d0:c9:23:b9:d8:1e:24:c8:5d:af:6b:
                    81:86:f0:7b:fa:d3:99:0d:a1:a8:ac:f9:f8:8f:0d:
                    55:4a:05:a3:3b:78:75:74:dd:f2:e4:67:1a:4a:16:
                    5c:38:d8:c5:e7:84:a3:f8:a0:2c:08:c2:71:1b:16:
                    53:75:65:d7:4c:94:2a:bf:49:ac:50:28:c8:ec:9e:
                    85:40:51:6b:65:21:6d:e3:1e:40:41:be:0a:00:9f:
                    88:39:70:49:c8:ff:44:94:dc:65:0d:ad:73:47:4c:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:38:6E:2B:D2:6C:16:15:A8:35:C0:A9:86:0C:5B:D5:FD:AD:DA:D6
            X509v3 Authority Key Identifier:
                keyid:9F:2E:02:13:C1:C1:DB:73:3D:EE:CA:4A:E2:61:6C:AA:FF:A5:15:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ny4CE8HB23M97spK4mFsqv-lFXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b1388f-3aeb-40d6-b4b7-9e852f3301c0/1/ny4CE8HB23M97spK4mFsqv-lFXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:a8:6e:ec:e5:5d:53:0d:fd:db:d9:92:58:5b:d8:2b:91:
         ef:5e:57:b0:ae:5b:ba:eb:3a:b6:09:c0:05:85:57:a5:ab:40:
         2a:e5:ea:a8:0c:f2:b5:e5:af:d5:8f:12:86:00:70:bc:24:6b:
         1f:2f:40:cf:e4:6d:4f:86:27:78:48:0c:1a:1b:b6:c6:ce:96:
         9c:75:db:2a:63:f3:74:0e:5c:7e:97:f6:86:d3:29:f4:9a:dc:
         da:e5:d3:12:21:6c:7e:f8:c2:b8:b1:31:42:80:11:67:a9:25:
         e6:04:5d:e9:44:92:db:98:d9:75:46:9a:39:a8:35:fe:9f:3c:
         62:e5:2b:3b:a1:1e:fb:8e:e3:d2:09:71:82:54:f1:e1:2c:5e:
         bf:cd:43:21:f4:09:41:95:e8:39:18:63:2d:82:d4:78:13:85:
         71:ea:db:60:f5:06:22:47:68:a6:37:e9:33:79:4b:0c:0a:24:
         c2:ac:76:8c:a8:06:63:4d:43:4d:57:5a:70:c8:b4:4f:2c:05:
         46:f9:e2:18:c6:07:1d:f2:08:64:e3:30:7b:a9:b6:0c:41:7d:
         0b:47:c2:11:e5:5a:75:1d:e4:23:9a:18:b8:fa:8a:a5:e6:d3:
         af:21:39:3c:b5:0c:e2:1b:61:ae:ce:e3:44:8e:b9:fd:82:01:
         0e:81:1a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----