Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
File:                     nxuJ5urGEf1TMtcOuvUxH61lErg.mft (raw, json)
Hash identifier:          BEvXCCBRmeiIrshwMbhYAF6QQXhci7TaCjXL+jMJRec=
Subject key identifier:   97:DE:11:F2:DC:36:05:27:6A:63:80:2A:29:94:E8:2A:4A:46:7A:20
Authority key identifier: 9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8
Certificate issuer:       /CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
Certificate serial:       01962F3D7998CB07DACFB0257AFF713E4771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft
Manifest number:          0E18
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: nxuJ5urGEf1TMtcOuvUxH61lErg.crl (hash: JR8KeRenjEXqYe0K3llDJ6if65wgULwDt8ewZ4C9Fvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:79:98:cb:07:da:cf:b0:25:7a:ff:71:3e:47:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1b89e6eac611fd5332d70ebaf5311fad6512b8
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=97de11f2dc3605276a63802a2994e82a4a467a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:86:ed:dc:e7:1a:7b:8a:44:02:4e:05:61:
                    cc:b0:2d:bd:cd:50:a7:2c:3e:f4:9a:3e:b6:bf:4f:
                    70:70:dd:ef:f8:37:53:60:05:6a:44:4a:ac:85:80:
                    4c:09:89:42:86:62:bd:7d:6d:85:e4:ee:b2:ff:67:
                    1f:68:85:68:42:aa:d3:fb:12:d8:a7:40:d6:2d:2b:
                    fa:51:6c:d2:fb:70:36:af:55:ec:51:2c:da:11:0f:
                    bb:53:65:6d:08:8a:74:06:ba:56:7f:cd:aa:e0:ef:
                    60:ee:6e:91:c0:34:2d:90:99:4b:13:7d:1f:0e:ec:
                    fb:70:92:9e:95:21:f6:21:b9:a3:51:68:14:ff:e2:
                    bb:a1:e0:92:3c:1e:ab:b3:8d:b3:17:08:9b:6f:2d:
                    c6:63:f3:17:3e:e4:be:0c:43:66:94:54:5a:33:f4:
                    04:5c:74:54:19:e3:f3:f4:ce:f4:ea:16:de:4e:43:
                    07:66:54:8d:2e:6f:36:35:73:73:ea:57:47:e8:c8:
                    1a:7e:dc:97:7b:a9:d5:8f:9d:de:f8:c6:24:1d:2c:
                    b2:0c:17:c2:c7:f9:d4:74:2c:4a:b5:da:6e:84:56:
                    8f:7f:38:7c:6b:d5:73:50:6d:67:77:4a:74:e6:6c:
                    03:14:3e:45:0e:d7:9f:ee:dc:13:4c:ff:dc:13:b6:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DE:11:F2:DC:36:05:27:6A:63:80:2A:29:94:E8:2A:4A:46:7A:20
            X509v3 Authority Key Identifier:
                keyid:9F:1B:89:E6:EA:C6:11:FD:53:32:D7:0E:BA:F5:31:1F:AD:65:12:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxuJ5urGEf1TMtcOuvUxH61lErg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a1841e-0106-47de-923b-744fb21b5598/1/nxuJ5urGEf1TMtcOuvUxH61lErg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:bf:87:87:63:6d:2d:a6:68:62:11:f5:10:55:14:68:b1:
         4e:b8:59:27:fe:7e:a1:ae:c5:05:e3:57:6a:4c:ec:23:c0:3c:
         2e:68:46:dc:ba:1c:ce:39:1b:a6:1a:e1:ed:f9:d9:b7:62:51:
         6b:b2:42:30:0b:e0:46:61:3e:c9:76:5d:64:07:5b:f4:c5:96:
         2d:89:d3:cf:54:8a:35:a9:15:8e:ce:19:a6:b4:75:12:c6:ea:
         cc:f5:87:d9:c4:d9:f2:52:09:4d:b2:8b:e3:d8:1b:5f:58:11:
         ba:22:7d:4f:30:4a:c8:e6:1e:05:b7:61:b6:20:c0:75:9c:13:
         dd:c9:0f:f1:b4:61:ef:a0:4a:7f:9a:7b:d3:2d:16:89:07:3d:
         22:97:0d:c7:ad:d4:e9:b5:c8:5b:fc:44:b8:5e:ac:80:00:2c:
         62:39:49:33:61:09:69:31:89:29:31:2e:aa:5c:24:ef:f2:84:
         e4:c5:4a:a3:b8:1b:f6:f2:3c:98:50:fc:75:0e:01:c0:9b:d6:
         50:be:85:3d:78:d4:a8:f7:a5:55:2c:1d:e8:37:54:8d:c7:3e:
         1e:22:07:48:c8:a1:f5:b2:10:a3:74:01:c9:f7:ed:15:ed:af:
         fe:da:4b:de:60:58:50:c2:75:b5:1a:cc:0b:cf:8a:eb:ab:e8:
         d2:c2:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----