Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File:                     Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier:          fHI1LgfuTePmBXBEZrzd7eZa8CW50cZTOBh/hH2GnLI=
Subject key identifier:   F8:FD:57:1F:73:96:AB:C5:4B:27:90:37:57:17:1A:EC:2D:CF:69:78
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer:       /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial:       01962E9970B178B858A736C17195022913D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number:          0831
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=)
                          2: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: /w3Fr99gUipRMpaTGVIKg3+wzp+5Ho7VuSwq/NbC6mA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:70:b1:78:b8:58:a7:36:c1:71:95:02:29:13:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=f8fd571f7396abc54b27903757171aec2dcf6978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:e3:19:3d:87:cc:61:ab:21:9f:18:7c:b7:
                    6d:e5:85:dd:f3:36:99:53:d8:93:76:54:f3:22:a3:
                    61:66:15:30:a3:c9:5c:db:46:8f:1e:81:83:87:a9:
                    5d:08:1c:e3:74:1c:5c:08:1f:ba:4f:cf:fe:23:73:
                    f0:85:c1:a2:34:a5:6a:20:66:36:e4:f2:1a:9b:ce:
                    b4:33:ea:9c:5a:7c:bc:e9:56:51:2c:07:a0:9f:1d:
                    81:42:d4:40:ca:25:8c:0b:8d:b8:83:6d:0b:1e:3a:
                    98:ff:07:48:87:87:78:28:7d:4c:66:92:9d:bf:b5:
                    36:a6:46:00:15:36:87:6b:4f:b4:b0:62:16:5d:0f:
                    a8:b8:15:1f:12:99:36:91:48:24:3e:ac:bf:c9:01:
                    e3:ab:d6:d9:18:b7:98:df:d7:da:28:32:6e:b2:57:
                    34:f7:fd:0a:94:2f:88:a5:d1:06:43:7b:9d:32:b7:
                    8c:1e:48:0a:a9:8a:a3:df:ee:cc:8f:87:60:00:13:
                    42:ba:66:36:19:d7:2f:2c:8d:f4:c0:7e:a1:b0:6c:
                    3c:ac:0e:5a:bd:52:6c:e3:a0:8e:81:bd:1f:30:c8:
                    fb:a9:15:b8:6e:d7:96:4e:90:50:55:c8:d4:41:9c:
                    a0:a3:71:38:5b:60:d4:72:07:33:8d:de:f9:70:70:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:57:1F:73:96:AB:C5:4B:27:90:37:57:17:1A:EC:2D:CF:69:78
            X509v3 Authority Key Identifier:
                keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:99:2b:05:80:88:e9:29:bc:d5:f9:cb:9b:57:6e:db:97:19:
         44:6a:fa:26:18:38:ce:1a:49:ad:77:22:48:3d:b0:60:8c:c9:
         04:f9:f8:0d:17:16:25:36:90:4b:9e:6e:63:1b:48:a3:53:76:
         1f:ae:52:4d:67:d0:24:ec:01:09:e7:d2:da:09:35:c2:6b:e5:
         23:13:88:34:2d:2c:dd:43:34:0c:13:ff:69:f6:c9:31:0d:82:
         c3:35:60:c3:b4:0a:ad:ac:dd:08:d9:b3:82:94:4e:82:2e:68:
         d1:75:1a:e2:f5:7a:33:03:cc:08:ec:b5:63:f6:48:c0:88:35:
         4c:35:37:57:7e:a6:82:e4:73:5b:63:dc:c0:ed:f8:46:dc:91:
         cc:39:1f:92:45:02:48:8a:7e:03:5f:d7:14:63:39:57:28:a1:
         9b:3a:35:5b:99:7b:a9:b7:4c:ad:f3:6d:0f:49:b4:fa:b8:c2:
         b6:8f:1e:9b:da:33:31:21:82:5c:4a:f7:57:61:a1:6e:30:bb:
         2c:22:36:7d:2a:30:30:17:60:60:d5:f4:67:96:d5:d7:c6:2d:
         19:38:cb:36:6d:4b:69:1a:c5:92:03:bf:10:a1:8d:e7:a3:79:
         0a:a6:90:fc:b1:52:f8:9a:30:7e:09:e7:b1:d6:73:5a:82:49:
         2d:ac:70:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----