Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File:                     N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier:          1A9ExV5EBHwza87ctw1tnkGlqLh/+FrOG3MEo1aG6Bk=
Subject key identifier:   78:16:DB:F8:60:3C:CA:85:38:5A:59:7E:B6:EE:BB:35:94:6B:06:78
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer:       /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial:       01962E9944D8AD738F040E423B93CF266F5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number:          09F4
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: snfXQI/I8Y59ujUwXonYz0li5CCtj8MK7Sn4mqIpXX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:44:d8:ad:73:8f:04:0e:42:3b:93:cf:26:6f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=7816dbf8603cca85385a597eb6eebb35946b0678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:89:82:0d:2d:80:01:c2:3e:10:66:29:be:
                    a5:70:c6:2e:1b:17:38:9f:0c:15:ed:23:6a:aa:ef:
                    d1:2f:aa:04:1c:88:d1:b7:fb:fa:c6:58:86:dc:f6:
                    c0:bd:8f:60:c4:ad:48:92:f9:a5:51:6a:bd:8b:ec:
                    97:7a:f9:67:87:f3:b6:10:ec:65:d1:67:47:e9:5d:
                    42:22:ac:36:ea:4b:f3:65:90:80:c2:78:08:80:c1:
                    97:90:2b:92:22:7a:d2:43:e4:e6:19:9a:e2:90:2f:
                    38:bf:36:1f:da:bd:ea:b0:86:15:1f:c5:95:3a:e5:
                    76:70:c8:86:47:45:c9:dd:1e:23:96:86:b2:5e:95:
                    dd:57:2a:78:1b:14:c5:48:13:70:96:56:68:c0:83:
                    9c:6e:76:a9:9d:b2:2b:58:9f:41:32:49:4a:40:9e:
                    7c:6f:ff:27:b0:9a:3c:f8:42:d5:ea:14:e7:04:a7:
                    cf:5d:26:9b:e9:5a:65:f7:9a:09:bf:0d:48:47:c1:
                    0c:fc:9a:4e:a6:dd:f5:18:18:a9:d4:97:b0:0e:14:
                    92:20:84:6a:bb:6e:47:99:8d:d4:b5:af:51:d2:da:
                    d8:bd:2c:dc:82:9c:56:e5:5a:4d:23:3a:53:b0:b9:
                    81:65:f4:d8:2a:7b:97:1c:25:35:82:ea:c3:40:5d:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:16:DB:F8:60:3C:CA:85:38:5A:59:7E:B6:EE:BB:35:94:6B:06:78
            X509v3 Authority Key Identifier:
                keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:94:aa:bc:4a:43:90:67:4d:8a:95:e4:8c:60:e7:1c:a3:2d:
         18:11:63:29:14:58:f0:fa:38:b9:b0:ef:b2:f2:a9:ba:48:f8:
         8f:33:ed:94:b5:c6:19:4d:04:a6:89:9e:52:00:80:af:a1:f0:
         ea:d1:87:32:78:e9:97:f0:48:34:7b:7f:38:8c:5e:66:47:3e:
         bc:28:5d:a3:4c:38:c0:38:34:07:e3:15:73:4f:9c:48:22:36:
         68:20:c2:6e:2d:21:78:0f:16:a7:a5:fe:49:f2:bd:54:00:9e:
         95:c6:b8:ec:d7:1c:6c:b8:62:fc:f3:78:52:b7:a0:6f:3c:95:
         f6:8c:d5:cf:78:cf:01:a5:2f:1d:2a:45:30:96:cd:16:0d:b5:
         62:b3:a0:f8:59:86:8e:76:c3:dc:64:66:82:e3:46:18:c9:d9:
         ae:28:9b:6b:50:2f:0e:1d:ec:a5:13:e0:23:31:94:b3:5d:02:
         6f:53:ca:34:5d:8e:1f:72:54:92:99:f3:a3:43:dd:4d:5f:08:
         26:44:44:f9:51:37:6a:95:dd:c7:83:63:a0:bb:85:16:97:45:
         6c:37:7b:eb:1d:3c:de:d9:f0:dd:8f:30:52:e5:7d:bb:c7:c9:
         7b:49:14:68:15:6f:d6:8a:a0:b4:d4:3e:06:29:e3:20:7c:80:
         11:7b:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----