Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
File:                     nyHqqnvQ7mfKYwLj16quZNcpQC0.mft (raw, json)
Hash identifier:          a+XnwZracgVg1rRMPXDLsbIcm37QJEnOijXhPl1Ajhg=
Subject key identifier:   07:28:20:FF:38:85:AC:AF:A2:34:AD:93:F8:90:0A:3E:22:FF:8D:5D
Authority key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Certificate issuer:       /CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Certificate serial:       01962F745076074B9B402CE3BE38376CCB6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: nyHqqnvQ7mfKYwLj16quZNcpQC0.crl (hash: 1orUik2D/zr2W79uaKIUrrFSCQY4BwYiZfXxK7E+6lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:76:07:4b:9b:40:2c:e3:be:38:37:6c:cb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=072820ff3885acafa234ad93f8900a3e22ff8d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:36:a9:69:54:a3:70:b3:06:d8:cc:2b:cd:
                    cd:91:14:d8:2b:4f:af:61:32:bf:82:ee:32:67:72:
                    7c:06:3f:98:cf:fa:1f:0f:4d:fe:86:1b:a1:4c:1b:
                    4e:c6:60:05:71:40:28:00:d3:4a:56:4e:58:42:95:
                    38:60:9b:7d:c0:6f:71:ed:e8:68:92:19:a4:50:f0:
                    db:83:dd:3c:ff:c6:9f:1f:00:8c:78:e6:26:68:fc:
                    44:2e:d0:1a:75:0c:50:29:00:a4:fb:34:c5:41:2c:
                    e4:18:f5:40:a8:06:59:05:50:4e:ad:50:a8:84:8d:
                    93:39:fe:55:80:af:1d:6c:e5:ac:81:cc:ac:17:0a:
                    8e:79:81:56:64:ed:33:d8:f4:9e:0b:42:57:ad:b1:
                    22:99:ff:95:9f:50:45:70:a8:ed:f9:ff:1b:08:e1:
                    2c:ab:ac:eb:6c:64:da:be:03:e4:a0:8d:a0:ba:d5:
                    d9:6e:1f:3e:c4:08:a1:9c:8d:8b:60:24:a2:45:70:
                    b2:ac:3d:17:77:a9:85:80:94:77:4b:15:94:6b:b1:
                    45:86:ac:b8:ca:3b:29:ec:f4:48:40:3b:4b:a7:c6:
                    de:e1:15:98:8d:9a:d1:b9:7f:3a:ac:7f:16:57:a2:
                    cb:f2:43:37:08:14:36:4b:9c:f3:1d:a6:f3:e6:cd:
                    0c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:20:FF:38:85:AC:AF:A2:34:AD:93:F8:90:0A:3E:22:FF:8D:5D
            X509v3 Authority Key Identifier:
                keyid:9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0e:e2:07:f5:aa:cb:a8:01:b1:fd:cf:27:17:56:57:80:7c:
         e7:22:f2:c2:20:11:f7:21:a0:26:99:cb:2b:10:76:fe:8f:05:
         ed:b7:cd:66:de:69:cd:eb:0b:0d:df:b0:a3:39:45:a9:99:a6:
         ad:49:7c:2f:ef:eb:e7:a5:da:d3:17:df:4f:26:53:1f:36:73:
         4a:df:da:bf:0d:ba:dd:95:a5:d3:e1:f3:75:ca:b9:ac:f6:d7:
         ae:45:ce:c3:0b:59:e4:6c:2b:ae:8b:52:86:ba:2f:60:3a:47:
         dd:c7:da:17:6a:36:e1:cd:f8:6a:21:97:32:bd:c8:03:8b:2d:
         6a:5a:11:31:78:29:d7:d1:88:1b:cc:d1:d7:af:3e:70:19:5d:
         0d:de:28:6c:b4:14:ea:0b:7e:fb:ab:38:48:dd:75:5b:32:8e:
         40:db:af:88:c0:8c:71:6c:70:cf:ff:9a:23:08:0e:7c:8a:b4:
         e2:d3:81:ae:89:ed:2f:df:31:51:0d:80:83:59:de:df:d6:ce:
         89:1e:75:b7:6b:3b:e3:9d:9b:2a:8b:e4:f6:8b:2b:81:d0:d0:
         d3:0a:16:ac:d6:3d:5c:78:37:03:58:1e:b8:6e:a3:5f:f2:c7:
         d5:e1:b5:17:1d:8f:8a:38:d6:21:fd:ce:f3:83:f1:eb:35:77:
         40:db:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----