Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
File:                     NLWONYkAecLWDA5LyOyCwbMxlfY.mft (raw, json)
Hash identifier:          U39DtqFwcRzLR96fu7y/JuNtbLfIlIX5vaaha7LuYeI=
Subject key identifier:   33:19:50:AA:33:54:76:07:D3:EB:78:0C:9B:82:0D:30:56:54:CF:06
Authority key identifier: 34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6
Certificate issuer:       /CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
Certificate serial:       01962ECFABE489943C46C8D4D453CB987B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft
Manifest number:          04AD
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: NLWONYkAecLWDA5LyOyCwbMxlfY.crl (hash: E/8rnAottzqBcwJZvNmtloz6WoY6zOyCv6PzL2CrVSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ab:e4:89:94:3c:46:c8:d4:d4:53:cb:98:7b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b58e35890079c2d60c0e4bc8ec82c1b33195f6
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=331950aa33547607d3eb780c9b820d305654cf06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:3d:68:ca:1b:8a:1c:52:3c:86:c2:6a:b9:
                    32:15:a6:1e:18:a4:21:fd:2c:e6:fb:5a:14:bb:b4:
                    6e:4e:70:2b:3f:f5:2c:b4:5c:68:69:6f:cd:7c:53:
                    a2:3e:b2:9b:80:50:60:7b:40:2b:c5:41:d5:bd:05:
                    d0:c4:b5:ea:60:99:6c:af:1d:9d:3b:5d:63:94:46:
                    9c:ba:c2:04:28:0b:85:9f:2b:f5:72:6e:e6:89:b9:
                    e5:30:ff:d0:0f:32:19:6e:07:0e:27:0e:75:1b:a0:
                    ec:d0:96:f5:cb:73:88:ed:4d:23:8d:b3:91:43:64:
                    f1:27:a3:fa:3c:62:4c:0c:0f:9e:e2:d2:b7:55:9a:
                    d8:b1:86:e9:0c:87:e6:f4:3f:6b:b0:bf:80:39:bc:
                    6a:c5:7e:fd:e8:cc:9e:9e:ea:87:7c:0b:f6:56:50:
                    66:c1:bb:55:58:5b:39:0f:e0:2b:87:06:33:5e:bb:
                    30:81:9c:9f:07:91:d4:85:61:f8:23:b8:38:00:73:
                    ff:57:44:8b:72:fe:9e:89:3a:f8:b1:9f:e0:f5:54:
                    00:8a:35:60:7a:c1:d7:2c:b8:33:f0:00:63:f8:4f:
                    8f:9d:55:49:e6:aa:5a:23:fb:32:2b:d0:d1:eb:27:
                    eb:30:10:ce:31:49:87:f3:3a:c5:cd:58:7c:76:c0:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:19:50:AA:33:54:76:07:D3:EB:78:0C:9B:82:0D:30:56:54:CF:06
            X509v3 Authority Key Identifier:
                keyid:34:B5:8E:35:89:00:79:C2:D6:0C:0E:4B:C8:EC:82:C1:B3:31:95:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLWONYkAecLWDA5LyOyCwbMxlfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/234c34-f654-48b0-82bb-90e5e9bd1870/1/NLWONYkAecLWDA5LyOyCwbMxlfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:f9:44:f6:4f:2f:81:fd:68:80:a8:57:ed:3c:ce:e1:32:
         4d:9a:27:c5:3b:3d:95:70:c1:80:9d:c7:6d:a5:b6:eb:74:09:
         f7:46:63:6c:b9:84:75:b5:2d:3c:ad:e5:56:04:61:50:f1:00:
         da:d2:9d:cd:53:8b:be:cd:bd:dc:a0:12:f5:ca:be:2a:94:8f:
         e1:83:8e:fd:a0:a3:bc:3d:a9:e0:ae:41:27:4b:08:67:24:ba:
         7d:3e:78:36:21:e5:05:c3:ab:3f:9a:07:4f:8d:06:15:44:fd:
         fd:3e:4a:d7:3a:30:b5:52:64:76:1e:77:11:97:59:ab:92:f0:
         57:8e:ce:2b:99:ca:59:f9:75:30:89:b4:9d:21:41:42:4b:6c:
         be:21:49:11:3f:ce:cd:76:e3:e4:b5:61:6c:92:8c:12:61:ee:
         49:cd:ab:23:2f:9c:78:ac:73:9e:b3:9e:39:90:eb:68:ce:1f:
         ac:db:40:1b:cd:b1:83:20:73:15:74:74:5d:c3:72:4a:2f:4a:
         8b:62:86:ec:4f:39:2c:d0:28:14:92:be:8f:c7:ae:63:91:18:
         cd:cb:ff:6c:fa:d2:2a:06:df:a8:80:5e:59:67:2f:cf:2d:ed:
         8e:77:5e:ea:2c:9a:02:a2:0c:41:dd:f4:30:ac:47:3f:fd:ab:
         e9:7f:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----