Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File:                     nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier:          TPdpMFhY4NWaAPcESRefR7c/Q5vmgcSoiB315qNwiiE=
Subject key identifier:   C2:D2:D6:D2:D3:37:7F:51:0A:31:80:A3:BD:22:B2:E5:D1:69:41:04
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer:       /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial:       01962E9960E22E39895A58B03461DE2652CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number:          0B13
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: 7Yy3+NR82adb7RwqhQXNsL09zQ06c280+YIs67ReM3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:60:e2:2e:39:89:5a:58:b0:34:61:de:26:52:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=c2d2d6d2d3377f510a3180a3bd22b2e5d1694104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:59:92:2e:39:8d:8f:9c:ea:b8:e4:31:8c:
                    95:e6:28:66:69:2b:d7:2f:11:88:a9:d1:87:ca:24:
                    66:46:26:f4:29:ff:68:47:e5:44:59:14:df:ce:8c:
                    ea:2d:08:49:b8:42:e8:43:0f:f8:00:d4:21:4e:3f:
                    74:e4:16:0c:57:63:0b:79:71:40:44:76:ce:09:4f:
                    de:fe:e1:29:c2:3a:1b:d1:ce:07:43:36:e9:c6:c4:
                    d8:64:65:06:71:50:d4:e6:24:9e:4c:23:da:e9:0c:
                    f2:34:18:d1:0f:d0:e0:e3:86:ff:ec:c1:13:28:7a:
                    44:a7:11:fd:99:49:68:8c:d4:64:22:69:99:81:1b:
                    c6:25:bc:15:3c:c6:12:9e:40:f5:31:05:93:73:d1:
                    8a:33:9d:e5:bf:bd:8d:76:35:83:2c:77:e7:48:20:
                    f3:a6:15:2e:2f:14:6e:57:8d:06:9e:93:49:45:d5:
                    aa:94:f9:a7:64:03:db:a2:1c:16:68:68:71:94:a7:
                    75:37:73:48:dd:30:6c:30:fc:50:f8:a4:48:64:79:
                    20:95:b0:8b:2b:5e:38:12:17:54:ae:f1:59:92:93:
                    d7:e7:92:00:c1:ff:ef:9f:e8:ab:5b:2f:68:9c:6a:
                    b3:f7:e1:17:92:2e:25:72:04:1b:4f:b8:52:c2:83:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:D6:D2:D3:37:7F:51:0A:31:80:A3:BD:22:B2:E5:D1:69:41:04
            X509v3 Authority Key Identifier:
                keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:42:1f:dc:73:3c:07:b4:a6:e0:87:e9:bb:f4:10:d1:36:a2:
         64:c2:8e:43:5c:98:18:0b:65:a1:4a:aa:f9:66:93:09:1d:4a:
         4c:19:d8:d0:68:b2:24:7c:57:01:40:df:81:d5:76:9f:60:c7:
         b6:f3:cc:71:ea:a3:92:0d:44:c4:63:a4:26:c4:c7:56:8f:86:
         fb:d7:f3:af:87:3a:d7:ab:03:d8:4e:99:24:40:bd:1c:bc:5d:
         48:72:70:62:02:55:79:1d:09:8a:9b:b6:91:27:bf:3b:d2:25:
         12:a4:3b:c8:09:d4:63:4e:62:bb:78:c5:4f:7c:5e:22:11:92:
         a7:dc:00:87:47:13:6f:09:c7:7c:ba:bb:0d:78:d5:f6:eb:66:
         1b:bb:14:bd:f0:f9:b3:2e:88:91:06:99:37:d7:71:19:f6:c4:
         df:1a:67:31:05:15:0b:83:ed:7a:65:bc:68:50:4b:1e:fc:4f:
         ce:a9:4a:f5:a3:2a:ed:2c:e2:f3:98:fd:77:96:19:bc:91:bb:
         56:3d:05:76:de:da:a7:54:91:bf:4d:ef:ce:ed:23:8a:91:8f:
         6c:b1:4b:d4:41:a0:49:cf:c3:11:b8:11:aa:3d:da:af:f7:10:
         cd:68:2d:67:df:14:15:6d:36:e5:d7:6f:d8:c9:5c:16:16:b8:
         7b:76:7b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----