Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File:                     NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier:          ratnJVFIZOaog5VdyNTzW8LG6i0rwCCuswB4uRwG5ac=
Subject key identifier:   99:44:C8:4A:EA:EE:A2:4F:BD:22:E9:17:63:72:C0:41:5E:4B:44:33
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer:       /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial:       01962E61C46566F0BDBD572C6C8E0BED27BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number:          01CD
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: l0o68bV4RrbJ/G/RYO01PORR+UwkMcGnBEcpwvtxMqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:65:66:f0:bd:bd:57:2c:6c:8e:0b:ed:27:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=9944c84aeaeea24fbd22e9176372c0415e4b4433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:d4:19:81:ec:3e:a8:71:a6:63:c8:74:5f:
                    75:57:b9:41:0a:94:34:a7:5e:59:c5:98:6d:d2:db:
                    c9:3a:02:e1:0c:cd:7d:5b:46:6a:7d:0e:0e:bf:43:
                    c9:ca:c0:2e:98:ee:dd:f0:ce:8d:cf:b6:c5:87:99:
                    46:0f:e0:40:68:14:77:bb:17:29:57:9b:14:62:11:
                    8f:ae:d6:b3:45:58:14:2a:35:5f:81:63:8f:e0:2e:
                    17:06:60:00:45:9d:fc:7b:b2:fa:7b:f9:eb:58:3a:
                    19:0f:03:1d:2e:64:d8:18:2c:e5:14:14:d1:70:f5:
                    d8:c2:b9:6a:34:3f:42:63:78:bf:9d:8b:c1:22:27:
                    a8:1c:37:48:b5:13:3a:c7:ab:80:93:f1:a9:ef:00:
                    93:55:6a:1e:04:5c:02:6b:89:c7:c2:e5:c3:5e:f6:
                    02:74:9b:30:cd:9b:d9:c2:b3:12:90:a1:6f:a4:a1:
                    74:20:ad:23:be:6d:ed:bc:eb:48:f8:66:9c:15:50:
                    88:ff:d4:09:7f:21:65:83:28:14:39:f1:ce:29:8d:
                    0c:2e:39:94:67:6e:dd:01:e1:30:c2:91:39:e4:ad:
                    e1:e9:0a:b6:bc:e2:4a:6a:4c:f4:6d:4d:86:bf:0f:
                    75:db:36:87:46:ef:2d:0c:c7:3c:2a:c4:bf:03:9f:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:C8:4A:EA:EE:A2:4F:BD:22:E9:17:63:72:C0:41:5E:4B:44:33
            X509v3 Authority Key Identifier:
                keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a7:29:2e:9f:d2:19:87:3b:c6:c5:d7:b5:77:fc:63:0d:85:
         f8:45:44:ac:85:be:f5:70:df:72:80:3e:e1:fe:5d:d0:2a:49:
         4c:c6:a3:f6:6c:53:55:c2:42:39:e0:a4:8c:c5:d3:76:ed:12:
         90:62:e5:ab:c1:7f:6f:6d:1c:85:06:87:f2:c0:40:9d:dd:6a:
         6f:47:7a:10:a6:f7:52:d8:84:fb:73:37:a5:0f:57:67:5f:1b:
         b9:49:45:bc:e2:0c:e9:e2:39:f7:8e:b0:ae:ef:27:7d:2c:2b:
         01:64:89:74:bf:cf:9c:8d:99:c9:aa:06:ed:52:18:15:8a:88:
         1b:ca:ee:4f:55:9f:68:39:41:c4:9a:b2:63:e2:14:77:1b:28:
         db:65:cf:f9:c5:98:bc:26:96:04:2c:e4:16:e0:d4:84:ff:e6:
         93:fa:28:38:fe:48:ce:ce:21:8f:de:82:17:0e:fa:00:4d:74:
         21:25:ac:ac:68:43:3c:3c:bd:a8:47:f7:cc:6e:2d:71:2e:e6:
         53:f3:4f:90:1b:a5:c8:54:f4:09:f1:59:87:80:19:72:73:37:
         62:f9:bf:38:bb:06:94:4a:e0:35:62:32:64:df:04:a5:28:46:
         bd:ba:bb:7b:dc:32:a8:fe:ee:76:f4:eb:16:21:1c:51:19:29:
         ea:bb:94:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcRlZvC9vVcsbI4L7Se+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz
MjNlYWEwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
Eyg5OTQ0Yzg0YWVhZWVhMjRmYmQyMmU5MTc2MzcyYzA0MTVlNGI0NDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmfUGYHsPqhxpmPIdF91V7lBCpQ0
p15ZxZht0tvJOgLhDM19W0ZqfQ4Ov0PJysAumO7d8M6Nz7bFh5lGD+BAaBR3uxcp
V5sUYhGPrtazRVgUKjVfgWOP4C4XBmAARZ38e7L6e/nrWDoZDwMdLmTYGCzlFBTR
cPXYwrlqND9CY3i/nYvBIieoHDdItRM6x6uAk/Gp7wCTVWoeBFwCa4nHwuXDXvYC
dJswzZvZwrMSkKFvpKF0IK0jvm3tvOtI+GacFVCI/9QJfyFlgygUOfHOKY0MLjmU
Z27dAeEwwpE55K3h6Qq2vOJKakz0bU2Gvw912zaHRu8tDMc8KsS/A59vNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlEyErq7qJPvSLpF2NywEFeS0QzMB8GA1UdIwQY
MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt
MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk
LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqacpLp/S
GYc7xsXXtXf8Yw2F+EVErIW+9XDfcoA+4f5d0CpJTMaj9mxTVcJCOeCkjMXTdu0S
kGLlq8F/b20chQaH8sBAnd1qb0d6EKb3UtiE+3M3pQ9XZ18buUlFvOIM6eI5946w
ru8nfSwrAWSJdL/PnI2ZyaoG7VIYFYqIG8ruT1WfaDlBxJqyY+IUdxso22XP+cWY
vCaWBCzkFuDUhP/mk/ooOP5Izs4hj96CFw76AE10ISWsrGhDPDy9qEf3zG4tcS7m
U/NPkBulyFT0CfFZh4AZcnM3Yvm/OLsGlErgNWIyZN8EpShGvbq7e9wyqP7udvTr
FiEcURkp6ruUCg==
-----END CERTIFICATE-----