Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
File:                     nD_Ua11gbBzKtVixc24mIaS8BAM.mft (raw, json)
Hash identifier:          nOsfGbLJ7/o670Hvnr7JaiGB64z8iCbW8plncL+rGiA=
Subject key identifier:   2E:DE:8A:7E:F0:1C:94:52:BF:64:2A:2E:36:81:7F:8C:B6:6E:CF:75
Authority key identifier: 9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03
Certificate issuer:       /CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
Certificate serial:       01962ECF7DF70C08F96709EFD4B116325E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft
Manifest number:          0777
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: nD_Ua11gbBzKtVixc24mIaS8BAM.crl (hash: yVV+Mt2dyRq5U+cvMkb9VENMX1DnxZK8Ah2aN2ycSHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7d:f7:0c:08:f9:67:09:ef:d4:b1:16:32:5e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3fd46b5d606c1ccab558b1736e2621a4bc0403
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=2ede8a7ef01c9452bf642a2e36817f8cb66ecf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:7e:97:32:15:c8:c9:25:2f:c0:b1:94:2f:
                    66:36:b5:0d:b9:fb:84:46:e8:4f:d5:ac:37:36:25:
                    3d:ab:38:c2:21:f5:74:50:bf:b5:0b:5e:df:56:33:
                    2d:4a:ac:27:01:f6:0d:72:86:fd:2a:4a:8a:59:2d:
                    89:27:39:e0:15:d0:67:60:c7:94:23:68:f2:bb:20:
                    a0:4a:51:9b:eb:86:0b:9a:aa:a6:fb:0a:9e:24:c6:
                    c3:73:06:1c:77:7b:16:66:6b:5a:97:e1:f2:d1:02:
                    7f:f5:55:b0:7c:b4:4e:3a:71:c1:4b:f0:40:bd:2a:
                    3f:34:6c:ed:4a:7c:ba:33:3a:02:37:1b:ef:27:bb:
                    07:e7:75:3a:0a:5e:df:b8:d4:b3:da:1b:e0:ec:d7:
                    c0:a0:30:98:25:41:84:76:d3:b2:95:aa:55:da:fb:
                    2d:bd:2f:80:0a:e5:c3:c3:6a:d5:32:f5:7f:20:2b:
                    fa:f3:eb:17:5e:57:be:d7:cc:17:cd:bd:14:fc:ec:
                    a4:73:bd:e6:ee:df:b0:48:9d:9e:8c:4e:d9:54:b3:
                    b4:c4:7a:b9:69:7f:b5:9e:e2:0c:14:d2:0b:02:02:
                    a4:e8:37:07:9f:85:40:b8:5b:20:a8:6f:9f:22:73:
                    08:81:08:0a:2c:fb:02:e5:22:38:65:cf:f2:7d:5a:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:8A:7E:F0:1C:94:52:BF:64:2A:2E:36:81:7F:8C:B6:6E:CF:75
            X509v3 Authority Key Identifier:
                keyid:9C:3F:D4:6B:5D:60:6C:1C:CA:B5:58:B1:73:6E:26:21:A4:BC:04:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nD_Ua11gbBzKtVixc24mIaS8BAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5ced25-9096-4750-8219-0b31c332d50d/1/nD_Ua11gbBzKtVixc24mIaS8BAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:60:9b:10:a0:4c:5c:e5:ab:a6:a3:1c:0b:fd:5f:df:91:12:
         77:c3:87:c3:e9:43:4c:42:13:4a:e1:4a:5b:7f:ac:ed:e3:d1:
         5a:76:5b:f7:59:96:a8:0b:e6:44:a4:f0:ab:53:02:7c:b8:99:
         c2:1a:20:dd:86:2c:10:fd:72:33:e0:97:7b:b2:a4:57:b4:31:
         60:70:40:2d:96:40:ab:4b:79:71:66:f6:fa:86:7a:60:41:27:
         c4:b4:2c:66:9a:0f:e6:10:1d:11:64:7f:0a:62:a8:db:ca:af:
         6f:64:f1:dc:37:02:4f:d9:40:e3:e1:86:72:8a:9f:45:76:e5:
         27:15:15:c5:cb:42:37:e0:18:8d:d7:39:8e:04:09:2d:a5:af:
         a4:a8:58:22:2b:e3:26:03:a4:ec:0d:dc:e8:f1:30:5d:3f:d0:
         82:f6:93:85:5b:15:9c:4b:f3:96:30:52:c4:f7:e8:39:59:23:
         fa:23:ae:54:d2:2e:a8:90:65:b4:f8:36:4f:5b:66:e6:20:bf:
         ea:60:77:87:12:d0:99:44:a1:a8:eb:3a:ee:56:66:87:c3:43:
         64:19:e9:9a:4d:98:63:b8:e7:80:05:69:80:26:4d:db:b9:1e:
         5c:c4:e8:d1:49:39:6a:64:81:9c:8d:dc:f0:a7:8d:34:52:c1:
         72:da:5a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----