Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File:                     NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier:          Xk5zN2Ru4zdzZtEFmPiEw52Bm6ueuRzeZlLDlGWDg1Y=
Subject key identifier:   B4:FB:91:92:50:FE:13:C5:4C:6C:54:C3:70:64:36:BA:FA:0F:B1:08
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer:       /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial:       01962ECF6726C360551B354C85BBD1CDE03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number:          0214
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: PhYvVPYjmzu9esmudFYxBSfzp3u1hyZgDW53ZdyNAag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:67:26:c3:60:55:1b:35:4c:85:bb:d1:cd:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=b4fb919250fe13c54c6c54c3706436bafa0fb108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:59:ad:a9:a0:b3:42:79:7c:fa:e4:52:bc:
                    63:9e:33:68:3a:d6:2b:bb:c0:09:fb:f0:e5:cb:41:
                    83:47:e8:aa:9a:ee:ee:a6:99:f3:18:11:06:64:d0:
                    cf:4e:e1:7d:e8:ee:4c:1b:2e:16:b0:15:1c:66:ac:
                    a2:9d:25:b7:b5:99:73:b3:5c:66:88:db:a3:b4:36:
                    59:31:7b:fe:d5:0f:9a:04:61:28:ff:18:c2:03:0d:
                    8e:ea:2b:71:af:61:6b:9c:ea:bc:44:8b:41:ec:ed:
                    fa:76:63:10:53:80:d3:5a:a2:a3:c8:73:42:14:b8:
                    0a:85:58:10:e5:f9:ac:07:5a:d2:25:79:14:ed:06:
                    b8:67:e3:fb:6f:a4:eb:35:a1:d9:f9:02:25:ee:9b:
                    62:0b:c3:61:62:aa:fe:b6:74:e2:1e:55:00:29:43:
                    49:25:37:1e:17:ca:56:f8:1e:58:3b:2c:eb:d3:6e:
                    bd:4d:10:9a:b6:eb:d3:35:bb:be:71:7f:9f:77:1e:
                    12:da:67:8b:04:92:42:e3:01:65:5f:05:cd:1c:43:
                    fa:4b:0d:49:7d:37:58:69:9a:a5:40:4f:c0:1c:3f:
                    a5:f9:0e:8e:08:df:35:55:c9:14:53:dc:31:94:cc:
                    4e:c3:2d:0b:20:df:7a:16:e4:dd:64:b9:b9:ee:a0:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FB:91:92:50:FE:13:C5:4C:6C:54:C3:70:64:36:BA:FA:0F:B1:08
            X509v3 Authority Key Identifier:
                keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f0:7f:9c:62:e5:39:b3:45:15:d3:a4:24:bd:3b:b8:19:65:
         97:2f:76:8a:e0:1b:72:64:b9:38:3f:e1:91:5f:db:b9:19:c9:
         04:fd:4b:5a:bb:24:97:85:d0:f0:d1:b6:8a:91:0d:60:f1:da:
         fa:3c:7c:fb:ca:6f:62:55:cc:d8:8b:fa:8d:5c:c1:9f:44:bd:
         d8:14:ec:81:30:79:4c:7b:c5:e4:28:02:13:ea:a7:eb:28:31:
         6e:4e:d8:9a:97:4f:02:8f:f7:b4:f0:2a:6d:eb:00:a6:a0:39:
         5f:bc:3b:50:6a:96:bf:4d:c8:d2:a1:c1:a2:0a:b6:c1:54:88:
         d3:3a:59:6d:8e:f5:8f:21:18:a8:8f:89:ab:50:14:74:23:ed:
         73:d5:48:92:29:8b:bd:87:0b:48:fa:f2:25:e2:83:31:9e:f3:
         5f:1e:12:92:86:5c:7c:a0:cb:94:5e:0a:df:c6:fb:e5:8a:6d:
         7b:3f:56:c4:0d:e0:24:a1:e8:d5:50:44:e7:6b:1f:99:d5:4f:
         a3:09:25:4b:df:0b:1a:8e:76:64:eb:d4:83:43:bc:d7:ce:60:
         08:bf:e3:b9:cc:75:94:88:e0:35:b0:5f:22:38:ab:cb:26:2a:
         9e:be:f9:a3:9f:ad:76:43:16:41:7b:c2:26:a5:34:fd:b8:33:
         57:5c:26:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2cmw2BVGzVMhbvRzeA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk
ZjlkMjkwHhcNMjUwNDEzMTEwMTA2WhcNMjUwNDE0MTEwMTA2WjAzMTEwLwYDVQQD
EyhiNGZiOTE5MjUwZmUxM2M1NGM2YzU0YzM3MDY0MzZiYWZhMGZiMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl11Zramgs0J5fPrkUrxjnjNoOtYr
u8AJ+/Dly0GDR+iqmu7uppnzGBEGZNDPTuF96O5MGy4WsBUcZqyinSW3tZlzs1xm
iNujtDZZMXv+1Q+aBGEo/xjCAw2O6itxr2FrnOq8RItB7O36dmMQU4DTWqKjyHNC
FLgKhVgQ5fmsB1rSJXkU7Qa4Z+P7b6TrNaHZ+QIl7ptiC8NhYqr+tnTiHlUAKUNJ
JTceF8pW+B5YOyzr0269TRCatuvTNbu+cX+fdx4S2meLBJJC4wFlXwXNHEP6Sw1J
fTdYaZqlQE/AHD+l+Q6OCN81VckUU9wxlMxOwy0LIN96FuTdZLm57qBVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT7kZJQ/hPFTGxUw3BkNrr6D7EIMB8GA1UdIwQY
MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt
YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl
LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfB/nGLl
ObNFFdOkJL07uBllly92iuAbcmS5OD/hkV/buRnJBP1LWrskl4XQ8NG2ipENYPHa
+jx8+8pvYlXM2Iv6jVzBn0S92BTsgTB5THvF5CgCE+qn6ygxbk7YmpdPAo/3tPAq
besApqA5X7w7UGqWv03I0qHBogq2wVSI0zpZbY71jyEYqI+Jq1AUdCPtc9VIkimL
vYcLSPryJeKDMZ7zXx4SkoZcfKDLlF4K38b75Yptez9WxA3gJKHo1VBE52sfmdVP
owklS98LGo52ZOvUg0O8185gCL/jucx1lIjgNbBfIjiryyYqnr75o5+tdkMWQXvC
JqU0/bgzV1wm1g==
-----END CERTIFICATE-----