Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
File:                     NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft (raw, json)
Hash identifier:          6qHH8HK/tV+vFFRibPKWT2Apg7avIwQSVMT0Y1J8fCk=
Subject key identifier:   ED:1F:DD:8E:47:4F:C1:DE:47:3C:E7:4E:D7:CA:54:98:90:76:EF:E9
Authority key identifier: 35:41:E9:D6:00:DA:AB:65:35:43:72:5C:F1:F9:CF:98:8B:50:D8:79
Certificate issuer:       /CN=3541e9d600daab653543725cf1f9cf988b50d879
Certificate serial:       01962F06D60D935A218B91AC96B0282B650F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft
Manifest number:          094C
Signing time:             Sun 13 Apr 2025 12:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:39 +0000
Files and hashes:         1: NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl (hash: 7riwnzoao/MwE3Jusw14TeGPy1ap1rXQccOOugWs7uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d6:0d:93:5a:21:8b:91:ac:96:b0:28:2b:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3541e9d600daab653543725cf1f9cf988b50d879
        Validity
            Not Before: Apr 13 12:01:39 2025 GMT
            Not After : Apr 14 12:01:39 2025 GMT
        Subject: CN=ed1fdd8e474fc1de473ce74ed7ca54989076efe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:19:a7:f0:b4:4d:e9:a0:67:e7:75:a3:0d:2c:
                    28:91:c8:13:d3:d2:bc:62:30:fe:0c:b4:95:42:f1:
                    a6:26:7d:1d:91:3b:aa:e4:23:9a:e4:17:ac:67:a1:
                    29:1f:09:91:69:0c:6c:b8:f8:69:9e:b0:d5:5e:a6:
                    af:e8:85:a8:ca:fc:a8:f8:b5:4a:34:86:97:0d:e4:
                    e4:7d:95:87:a6:01:39:26:82:61:5a:74:07:f2:45:
                    6f:f9:8c:6a:7e:38:ec:86:35:63:f0:ed:a3:f5:9d:
                    4c:6f:62:dd:ff:79:67:92:93:b4:6c:e7:d0:c3:22:
                    30:80:a0:23:8d:ce:61:2c:7d:21:0c:15:f8:d6:bb:
                    88:ba:3b:51:66:37:bb:42:48:16:03:14:6a:30:d2:
                    f2:eb:e2:cd:08:0e:85:d9:57:3d:84:6a:90:d8:8e:
                    ba:32:cd:7f:71:7e:10:66:a1:9a:63:72:f3:51:66:
                    ec:8f:39:64:97:6c:a8:45:1c:9b:6f:b9:ca:d8:8e:
                    aa:e1:5c:c3:d7:e9:8e:1c:c2:67:e7:35:c0:fc:20:
                    e5:72:8e:52:a2:bd:cd:9e:bd:14:4b:a7:a1:15:f4:
                    09:32:74:df:40:75:e5:76:af:5f:22:8f:8c:94:96:
                    88:19:69:8a:2b:51:ce:e6:f2:f3:68:bb:2c:23:69:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1F:DD:8E:47:4F:C1:DE:47:3C:E7:4E:D7:CA:54:98:90:76:EF:E9
            X509v3 Authority Key Identifier:
                keyid:35:41:E9:D6:00:DA:AB:65:35:43:72:5C:F1:F9:CF:98:8B:50:D8:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/af4b7d-686c-487b-ab03-d14838de1602/1/NUHp1gDaq2U1Q3Jc8fnPmItQ2Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:f9:11:10:46:9d:15:47:de:02:9b:f5:89:bf:02:b0:56:
         70:f7:e7:80:2a:f0:34:67:10:eb:66:b1:e7:62:db:a1:6d:53:
         83:92:0f:a9:4d:e9:f9:11:56:37:09:fe:f6:16:64:be:0d:b7:
         91:87:26:c4:1f:b8:95:58:71:ef:83:e2:e5:92:d9:36:81:6f:
         ea:d0:39:31:2a:4d:1a:4d:5e:0b:2a:5a:4b:5c:4b:71:b6:de:
         02:43:33:7e:95:b1:39:4b:5d:03:a1:da:69:0c:b2:b3:68:aa:
         81:5b:ed:82:3b:30:18:b4:ef:69:c2:36:62:fe:9a:3e:c2:06:
         4a:46:5b:57:86:17:f8:09:0f:e3:f4:db:0f:02:80:a9:ca:a2:
         cf:1d:27:ae:0c:96:a6:0a:80:97:f0:26:93:8e:e6:c7:ab:da:
         ca:6f:13:7b:7d:db:ee:06:33:03:46:6b:a4:b0:46:70:6b:67:
         1c:b0:04:38:56:32:57:02:58:2a:21:e0:74:39:97:1b:01:88:
         56:3e:30:96:ba:96:89:94:59:0d:2f:84:6d:ff:48:ec:29:94:
         01:2d:c5:4f:f8:87:3c:5f:16:a7:88:81:9a:09:40:1e:1d:be:
         02:49:8b:12:b3:b1:89:18:9d:8d:19:23:c2:71:76:49:29:a5:
         19:37:1b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtYNk1ohi5GslrAoK2UPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDFlOWQ2MDBkYWFiNjUzNTQzNzI1Y2YxZjljZjk4OGI1
MGQ4NzkwHhcNMjUwNDEzMTIwMTM5WhcNMjUwNDE0MTIwMTM5WjAzMTEwLwYDVQQD
EyhlZDFmZGQ4ZTQ3NGZjMWRlNDczY2U3NGVkN2NhNTQ5ODkwNzZlZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Rmn8LRN6aBn53WjDSwokcgT09K8
YjD+DLSVQvGmJn0dkTuq5COa5BesZ6EpHwmRaQxsuPhpnrDVXqav6IWoyvyo+LVK
NIaXDeTkfZWHpgE5JoJhWnQH8kVv+YxqfjjshjVj8O2j9Z1Mb2Ld/3lnkpO0bOfQ
wyIwgKAjjc5hLH0hDBX41ruIujtRZje7QkgWAxRqMNLy6+LNCA6F2Vc9hGqQ2I66
Ms1/cX4QZqGaY3LzUWbsjzlkl2yoRRybb7nK2I6q4VzD1+mOHMJn5zXA/CDlco5S
or3Nnr0US6ehFfQJMnTfQHXldq9fIo+MlJaIGWmKK1HO5vLzaLssI2mwCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0f3Y5HT8HeRzznTtfKVJiQdu/pMB8GA1UdIwQY
MBaAFDVB6dYA2qtlNUNyXPH5z5iLUNh5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlVIcDFnRGFxMlUxUTNKYzhmblBtSXRRMkhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hZjRiN2QtNjg2Yy00ODdiLWFiMDMt
ZDE0ODM4ZGUxNjAyLzEvTlVIcDFnRGFxMlUxUTNKYzhmblBtSXRRMkhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hZjRiN2QtNjg2Yy00ODdiLWFiMDMtZDE0ODM4ZGUxNjAy
LzEvTlVIcDFnRGFxMlUxUTNKYzhmblBtSXRRMkhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVz5ERBG
nRVH3gKb9Ym/ArBWcPfngCrwNGcQ62ax52LboW1Tg5IPqU3p+RFWNwn+9hZkvg23
kYcmxB+4lVhx74Pi5ZLZNoFv6tA5MSpNGk1eCypaS1xLcbbeAkMzfpWxOUtdA6Ha
aQyys2iqgVvtgjswGLTvacI2Yv6aPsIGSkZbV4YX+AkP4/TbDwKAqcqizx0nrgyW
pgqAl/Amk47mx6vaym8Te33b7gYzA0ZrpLBGcGtnHLAEOFYyVwJYKiHgdDmXGwGI
Vj4wlrqWiZRZDS+Ebf9I7CmUAS3FT/iHPF8Wp4iBmglAHh2+AkmLErOxiRidjRkj
wnF2SSmlGTcb5w==
-----END CERTIFICATE-----