Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
File:                     Nq6kWA8QexEmjJbqMYko1O11_5M.mft (raw, json)
Hash identifier:          8wWYLZGRiPbqo8RMA9PQNWx7QuAEEAxErFDfkHgJLuY=
Subject key identifier:   F3:63:11:7E:9E:58:B4:6D:3B:E4:3D:A3:4D:E5:C9:AE:33:49:E5:13
Authority key identifier: 36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93
Certificate issuer:       /CN=36aea4580f107b11268c96ea318928d4ed75ff93
Certificate serial:       01962DF42DE9DCE7FB502F9820A7362F178C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft
Manifest number:          03A1
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: Nq6kWA8QexEmjJbqMYko1O11_5M.crl (hash: MfD4YtQvHEOgpuwx7XF/N7fW0daf0biQJ/uA5Y7eYAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2d:e9:dc:e7:fb:50:2f:98:20:a7:36:2f:17:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36aea4580f107b11268c96ea318928d4ed75ff93
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=f363117e9e58b46d3be43da34de5c9ae3349e513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b8:43:d5:03:6b:e7:91:f2:88:0a:71:76:04:
                    67:1b:65:2f:f1:f4:cb:9d:a9:d0:75:ad:bf:d8:61:
                    03:30:0c:d3:c1:fe:8a:a5:e7:34:6f:c2:15:8b:e4:
                    7e:33:1f:5a:21:b0:97:31:db:2e:7a:7d:1f:67:3d:
                    44:7a:cd:a7:93:3a:d3:2b:4e:8e:94:15:41:46:81:
                    c2:ad:51:28:17:e7:6c:c6:35:5b:01:94:d8:37:1d:
                    04:ea:0a:73:2c:17:fd:47:c0:cd:a9:57:dd:88:f6:
                    0a:2b:5e:6f:15:0c:09:6a:86:78:5d:fd:54:a6:9b:
                    9f:9f:9f:51:5a:15:cf:41:0b:6f:a9:1d:b2:9d:19:
                    8a:21:0b:23:51:7c:6b:70:95:9b:e0:0e:e4:c7:19:
                    68:8b:b7:70:ef:75:30:3d:3b:15:00:a8:68:0b:ee:
                    05:16:1b:9f:68:19:0a:b1:e4:db:ad:c5:1e:f5:4d:
                    d0:e6:f9:10:08:d3:44:3e:75:24:63:55:cb:84:28:
                    e1:b2:80:78:79:55:23:7f:e8:77:85:4b:25:6c:85:
                    63:9a:7d:d8:0a:85:48:fc:45:f4:35:0e:0f:01:a7:
                    05:14:5c:fb:a1:75:72:1e:d7:9c:e9:71:a4:87:e3:
                    7d:26:af:23:b9:92:97:2d:0f:c6:c9:c5:c6:d3:be:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:11:7E:9E:58:B4:6D:3B:E4:3D:A3:4D:E5:C9:AE:33:49:E5:13
            X509v3 Authority Key Identifier:
                keyid:36:AE:A4:58:0F:10:7B:11:26:8C:96:EA:31:89:28:D4:ED:75:FF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq6kWA8QexEmjJbqMYko1O11_5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3059de-bafc-4a4b-86b6-f28d972c8808/1/Nq6kWA8QexEmjJbqMYko1O11_5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:51:48:79:45:be:44:e6:88:d3:5b:82:58:18:a2:e3:7b:d5:
         98:ea:62:c3:b9:5c:7c:cb:e2:cc:26:2d:87:a8:e5:55:c2:90:
         3e:56:2a:dc:ee:bb:18:5e:34:1f:71:98:3a:cd:0b:74:48:03:
         fa:ad:f4:17:71:96:7d:5c:dd:a0:b3:8e:bf:ac:2e:71:3b:d6:
         62:9a:13:56:79:ab:e3:01:78:fd:73:9f:fd:cc:8c:ba:05:17:
         1e:6c:7e:7d:97:0b:ae:40:17:29:f5:37:0a:36:f9:b3:f2:f4:
         93:7f:9b:ef:a8:e4:06:80:02:fe:68:ee:fa:71:f0:77:27:30:
         00:d4:25:60:5a:6a:38:90:f7:c9:26:c8:13:ec:0d:0d:81:28:
         fd:83:99:9f:18:25:16:2c:42:a1:f4:9a:27:f2:47:91:74:23:
         f5:2c:f8:5c:50:d6:07:c0:57:09:96:b1:4c:ad:0d:8d:92:1e:
         c5:55:4d:6c:e2:c2:88:d8:e8:bf:61:91:5e:9e:ec:c1:60:90:
         a8:4a:72:6c:3c:de:3a:71:b9:65:b3:f2:9f:0c:ab:43:d1:eb:
         12:fd:bb:da:fa:87:00:8e:6f:2c:5a:7c:bd:54:56:1c:19:2f:
         ae:03:8a:bc:96:f1:15:57:51:73:14:27:22:57:de:72:92:33:
         78:78:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----