Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File:                     n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier:          DB9J5vJIuKhAMGnvUSXovDTktBNpWvcgLy5K6CGlNxQ=
Subject key identifier:   70:D3:4B:72:6C:AB:7D:DA:8E:54:87:E0:6F:D2:00:F8:81:96:E8:12
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer:       /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial:       01962F74396E283DAC173CB751B02EBADE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number:          03E6
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: KQMzHbSfbdO9KFbqVpAN00vFMAAd0HnBBJv6F1MzyOg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:6e:28:3d:ac:17:3c:b7:51:b0:2e:ba:de:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=70d34b726cab7dda8e5487e06fd200f88196e812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:50:61:4f:8d:71:99:65:40:3d:d5:24:0f:
                    a4:9b:d2:8b:3e:93:f7:45:2c:91:b1:43:ad:4f:72:
                    8a:05:fd:3b:9c:2b:70:0a:bc:d1:39:30:3d:99:eb:
                    7e:c3:dc:13:bf:7f:bf:81:69:c9:db:77:fb:4d:52:
                    26:52:b2:a1:9a:c9:d3:e8:c2:0c:d1:84:90:2c:81:
                    8e:56:5b:ef:8e:db:c3:47:2f:3f:13:4e:da:81:e6:
                    26:f9:10:11:46:b0:0a:e2:2a:96:18:51:d7:d7:f7:
                    2f:f5:51:bf:be:29:99:08:92:2a:5a:c8:62:31:67:
                    34:46:52:29:2d:a0:fa:1d:9b:44:b8:48:3f:65:d0:
                    8e:00:45:fc:74:ba:5e:69:7c:b6:7c:87:9f:ff:17:
                    27:44:c5:de:17:9a:c8:de:7a:8f:e2:97:ea:13:ee:
                    d4:3e:75:7e:f3:af:a8:8b:01:cc:91:5a:eb:bb:71:
                    fb:da:56:e0:f5:be:ea:7e:65:7e:d1:2c:a3:e1:e6:
                    b3:26:f7:cb:96:2a:f4:81:a1:a0:3f:6c:a3:c3:86:
                    da:13:28:2c:81:04:b3:49:4b:d0:06:32:82:1a:b2:
                    b5:3d:c7:e3:28:c0:9f:db:6f:4c:06:4a:fd:34:48:
                    6f:40:73:1e:11:c3:a9:f2:2c:00:f3:a1:c0:9d:bf:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:4B:72:6C:AB:7D:DA:8E:54:87:E0:6F:D2:00:F8:81:96:E8:12
            X509v3 Authority Key Identifier:
                keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b3:13:4d:b6:86:0e:05:02:3d:13:73:bf:3b:0f:7d:7b:c0:
         47:a1:69:bd:41:95:c5:8e:f4:8b:3c:87:ec:38:e4:f0:e9:7e:
         46:10:bb:77:31:d7:bd:4b:a4:78:fa:e1:1f:ef:f2:f9:9c:fb:
         43:c5:8a:56:36:2e:27:6c:dc:cf:63:47:4b:3e:48:e1:5f:5a:
         48:74:e3:b9:1c:33:eb:ae:8e:c0:0f:16:8c:c3:5d:d1:98:d2:
         75:f4:b6:73:9e:ff:43:90:b9:fd:49:cc:ff:df:71:d3:d7:0c:
         d0:6c:b4:5b:66:a0:12:74:df:78:0c:4b:d3:96:f7:d9:51:9d:
         cc:69:6e:60:86:0b:ab:47:4c:25:f8:d8:f2:97:99:d9:2e:e5:
         01:99:bc:23:38:10:3b:70:9c:9f:8b:3a:20:c9:f2:13:57:5d:
         97:12:ca:2c:d9:8b:36:e6:dc:f5:f3:0b:d1:2a:56:65:7a:ef:
         91:80:19:21:7c:ea:89:1d:8f:f9:83:73:46:67:1e:43:f8:d5:
         88:45:38:30:2d:c6:ba:38:4b:93:36:f5:29:dd:28:82:70:29:
         8e:01:65:8a:80:23:d1:e6:b7:2d:d8:c5:25:10:ed:47:94:24:
         6e:06:3a:15:24:b6:91:70:fa:97:60:5b:c4:f8:7a:2d:e9:b3:
         bd:02:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----