Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/NDLzVG3kPONceHHFVLizDvY1wlE.mft
File:                     NDLzVG3kPONceHHFVLizDvY1wlE.mft (raw, json)
Hash identifier:          TVnisAj3fpJ+JtdUrl4Sx3FvRz/Kuw+ZhKWiR+zhqtY=
Subject key identifier:   13:7B:30:E6:4F:8B:F2:BA:9B:68:80:9A:8B:FB:79:9B:7E:71:63:CE
Authority key identifier: 34:32:F3:54:6D:E4:3C:E3:5C:78:71:C5:54:B8:B3:0E:F6:35:C2:51
Certificate issuer:       /CN=3432f3546de43ce35c7871c554b8b30ef635c251
Certificate serial:       01962F06A715F42D6698851BEBC061DC3886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDLzVG3kPONceHHFVLizDvY1wlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/NDLzVG3kPONceHHFVLizDvY1wlE.mft
Manifest number:          91
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: NDLzVG3kPONceHHFVLizDvY1wlE.crl (hash: t602Abkm5/UDAfpoGOE2raEdL3VzGdXYKlZb4ljWYFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:15:f4:2d:66:98:85:1b:eb:c0:61:dc:38:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432f3546de43ce35c7871c554b8b30ef635c251
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=137b30e64f8bf2ba9b68809a8bfb799b7e7163ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:61:43:50:b1:c6:6f:2d:2c:73:cd:0e:21:
                    e0:dc:d6:d0:d7:92:61:3a:ec:6f:68:a1:06:27:1c:
                    5f:d6:87:e6:6d:36:4b:aa:05:5e:bf:8e:94:5d:25:
                    38:6e:73:0b:d0:62:95:02:8f:81:7a:6e:d3:40:d0:
                    d6:0a:7e:f7:aa:f1:ed:33:0c:b9:2b:c0:d1:2e:d4:
                    81:fc:f4:bb:34:45:d6:02:34:04:c2:27:1c:d8:98:
                    25:fb:ed:63:ef:86:1a:fa:8e:b7:b8:b7:7c:eb:af:
                    2a:e8:9a:25:91:df:cb:6c:74:bb:cc:1b:84:04:73:
                    f4:14:f2:40:ee:98:b8:e6:5d:8c:f0:2a:f8:0a:06:
                    41:1f:86:85:ab:b4:af:ad:c8:48:f2:2a:42:12:b4:
                    ab:0e:b7:18:4d:18:00:d5:de:12:f2:ba:4a:7e:8a:
                    d0:b5:41:4f:57:44:e9:b3:96:4b:98:84:b7:16:9c:
                    d0:66:a4:b5:b4:81:f8:71:2f:0e:95:fa:c5:3c:41:
                    4a:c2:62:25:66:d2:b9:a8:38:89:69:0f:5e:0c:75:
                    ab:29:cf:4d:9e:c2:ac:60:b0:4e:d0:26:66:bd:98:
                    72:ed:f0:d1:a4:55:0c:16:96:0e:34:99:4e:d9:df:
                    5f:dc:7b:3b:6e:ca:4a:85:c8:1d:28:c2:dd:7c:c5:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7B:30:E6:4F:8B:F2:BA:9B:68:80:9A:8B:FB:79:9B:7E:71:63:CE
            X509v3 Authority Key Identifier:
                keyid:34:32:F3:54:6D:E4:3C:E3:5C:78:71:C5:54:B8:B3:0E:F6:35:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDLzVG3kPONceHHFVLizDvY1wlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/NDLzVG3kPONceHHFVLizDvY1wlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/de77ae-29e3-4a04-a027-6638c3eb4027/1/NDLzVG3kPONceHHFVLizDvY1wlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:40:78:c1:e5:05:31:8b:5e:06:1d:9f:5b:fb:6b:74:d2:
         2e:61:88:e0:c9:27:78:8f:1e:96:1e:3b:b2:71:a0:00:7b:c1:
         55:a2:82:15:32:1d:cf:d5:05:27:87:e8:f0:6f:fc:91:9d:81:
         87:f3:ac:a6:e1:33:9f:df:ae:9a:fc:bc:59:d5:fb:05:89:16:
         7e:94:b9:df:23:fe:83:6b:59:d5:c9:a7:30:9d:0d:db:b2:4d:
         04:81:bb:a7:8a:32:ba:6b:3f:74:1d:f9:88:e8:a4:b3:a3:6f:
         c5:8d:4a:65:b2:b4:0d:af:8b:46:a5:7e:9c:67:96:82:ec:d3:
         e3:36:36:9d:31:74:3e:b2:61:84:f1:b3:e8:2d:07:27:d6:22:
         2f:02:0a:21:d7:64:12:78:4f:07:7c:fa:3d:33:01:4e:18:48:
         04:71:d7:88:62:2e:13:21:26:1a:28:24:b4:cf:74:28:9e:7d:
         7a:88:3f:c3:48:81:4b:8f:ca:15:23:9f:4d:6d:ee:7c:8f:97:
         9d:25:a1:b7:65:76:d5:c8:b8:dc:a3:15:b3:84:05:a0:7a:fd:
         fa:65:98:37:a9:49:b2:8a:71:0f:95:6b:20:df:a7:45:ac:e7:
         8d:e2:da:d6:61:d0:5f:ef:ab:50:e4:d4:16:f4:14:55:8e:ce:
         fd:b5:44:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqcV9C1mmIUb68Bh3DiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzJmMzU0NmRlNDNjZTM1Yzc4NzFjNTU0YjhiMzBlZjYz
NWMyNTEwHhcNMjUwNDEzMTIwMTI3WhcNMjUwNDE0MTIwMTI3WjAzMTEwLwYDVQQD
EygxMzdiMzBlNjRmOGJmMmJhOWI2ODgwOWE4YmZiNzk5YjdlNzE2M2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFZhQ1Cxxm8tLHPNDiHg3NbQ15Jh
OuxvaKEGJxxf1ofmbTZLqgVev46UXSU4bnML0GKVAo+Bem7TQNDWCn73qvHtMwy5
K8DRLtSB/PS7NEXWAjQEwicc2Jgl++1j74Ya+o63uLd8668q6Jolkd/LbHS7zBuE
BHP0FPJA7pi45l2M8Cr4CgZBH4aFq7SvrchI8ipCErSrDrcYTRgA1d4S8rpKforQ
tUFPV0Tps5ZLmIS3FpzQZqS1tIH4cS8OlfrFPEFKwmIlZtK5qDiJaQ9eDHWrKc9N
nsKsYLBO0CZmvZhy7fDRpFUMFpYONJlO2d9f3Hs7bspKhcgdKMLdfMWjVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBN7MOZPi/K6m2iAmov7eZt+cWPOMB8GA1UdIwQY
MBaAFDQy81Rt5DzjXHhxxVS4sw72NcJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRMelZHM2tQT05jZUhIRlZMaXpEdlkxd2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kZTc3YWUtMjllMy00YTA0LWEwMjct
NjYzOGMzZWI0MDI3LzEvTkRMelZHM2tQT05jZUhIRlZMaXpEdlkxd2xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kZTc3YWUtMjllMy00YTA0LWEwMjctNjYzOGMzZWI0MDI3
LzEvTkRMelZHM2tQT05jZUhIRlZMaXpEdlkxd2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqNAeMHl
BTGLXgYdn1v7a3TSLmGI4MkneI8elh47snGgAHvBVaKCFTIdz9UFJ4fo8G/8kZ2B
h/OspuEzn9+umvy8WdX7BYkWfpS53yP+g2tZ1cmnMJ0N27JNBIG7p4oyums/dB35
iOiks6NvxY1KZbK0Da+LRqV+nGeWguzT4zY2nTF0PrJhhPGz6C0HJ9YiLwIKIddk
EnhPB3z6PTMBThhIBHHXiGIuEyEmGigktM90KJ59eog/w0iBS4/KFSOfTW3ufI+X
nSWht2V21ci43KMVs4QFoHr9+mWYN6lJsopxD5VrIN+nRaznjeLa1mHQX++rUOTU
FvQUVY7O/bVECw==
-----END CERTIFICATE-----