Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
File:                     NDez9zdtPvHNqLyWbxOXCFnPeW4.mft (raw, json)
Hash identifier:          neH7QVUnXEAv61wIwnjPukST3SJ22rVex+CcAaOKkGs=
Subject key identifier:   1D:D2:8F:A6:7C:B1:E5:52:52:A6:92:80:B3:5D:28:32:19:1A:BA:67
Authority key identifier: 34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E
Certificate issuer:       /CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
Certificate serial:       01962E9967A544AE81959889843B8B07599E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft
Manifest number:          05E6
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: NDez9zdtPvHNqLyWbxOXCFnPeW4.crl (hash: D16Oy6k7TBRARn7oLs/47NAzKGQ5NOYG+fLJk0XZM4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:67:a5:44:ae:81:95:98:89:84:3b:8b:07:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3437b3f7376d3ef1cda8bc966f13970859cf796e
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=1dd28fa67cb1e55252a69280b35d2832191aba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:49:3b:53:bd:7d:b0:41:40:06:79:0a:64:
                    b8:9f:7f:da:c4:25:e8:74:9b:e5:4b:53:89:2b:9a:
                    a0:82:57:d6:62:8d:75:fc:71:26:87:b2:66:b9:92:
                    8b:13:09:ea:55:af:8f:73:4b:7f:e3:91:62:91:ab:
                    8b:b1:ff:49:7e:a1:76:d7:2f:c2:fe:d6:66:c8:a9:
                    6c:13:34:f0:df:c8:48:4e:5b:68:b8:c1:bb:d1:68:
                    e2:c6:dc:ee:9d:3c:ea:1e:21:29:eb:1d:4a:6d:ea:
                    4f:d6:0d:0e:50:9c:bb:b7:88:7a:42:65:5e:f9:00:
                    63:9a:72:d3:b5:c7:f3:45:af:c6:e4:b3:29:d9:24:
                    78:b7:c8:0d:fd:a0:3b:d4:d5:6c:cb:94:90:3f:69:
                    f3:d6:10:2d:39:59:cd:7c:4c:dc:20:c3:53:8c:59:
                    d8:e2:9d:d3:77:fd:72:01:51:bd:0b:17:fe:a0:7a:
                    12:ca:ed:7b:39:e8:d0:29:c1:20:b6:90:43:22:6c:
                    6e:92:a6:33:cb:d0:dc:0f:4e:e2:5d:20:03:ee:d7:
                    dc:07:6e:44:b3:a1:90:ff:34:fd:7e:75:ec:72:c2:
                    67:6f:9c:34:65:4b:18:c6:1a:01:81:b8:43:0d:c4:
                    5c:97:b9:22:82:3d:ea:34:d9:e4:4b:77:be:73:7d:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D2:8F:A6:7C:B1:E5:52:52:A6:92:80:B3:5D:28:32:19:1A:BA:67
            X509v3 Authority Key Identifier:
                keyid:34:37:B3:F7:37:6D:3E:F1:CD:A8:BC:96:6F:13:97:08:59:CF:79:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDez9zdtPvHNqLyWbxOXCFnPeW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/72cb1f-bd2b-4c22-aaec-a62388ef5b48/1/NDez9zdtPvHNqLyWbxOXCFnPeW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fe:17:b9:3d:77:7f:c4:f4:ab:e9:95:36:50:36:f7:72:92:
         17:62:f0:86:bf:77:88:bc:a8:fe:f1:7c:86:fa:04:91:cb:a7:
         0e:7e:ed:f7:1d:10:c8:9d:f4:ad:86:e8:41:6f:3b:53:83:f9:
         d9:32:7b:5f:af:33:e8:2b:7b:14:28:76:c1:bf:ec:49:ea:b0:
         7c:52:aa:fc:e5:86:f1:1e:78:bc:8d:a6:51:0e:a0:2c:6c:c1:
         8c:53:e8:17:f6:1b:b3:09:5d:e3:bd:42:aa:85:72:25:15:e3:
         9e:a8:67:b1:a3:b1:2b:5b:0b:8c:cc:3b:ba:ff:45:69:13:1b:
         5d:bb:de:7b:d5:89:19:c5:22:33:fd:da:da:c1:eb:75:cc:66:
         54:88:93:f4:67:58:8a:15:a6:f6:6e:50:be:fd:0e:2e:39:e5:
         39:92:1b:a1:c0:58:c7:7b:ca:c2:21:07:73:ae:80:fe:8f:4a:
         5c:f0:29:5e:73:72:dd:dd:a6:b9:cd:d4:54:c6:53:64:63:59:
         9a:1f:33:f3:b4:a5:c5:31:4b:b2:95:a7:5b:40:56:da:1c:79:
         a4:17:cd:1c:3f:6d:d5:da:53:38:a7:2c:60:4a:76:08:08:4c:
         46:54:74:d5:93:d9:40:c0:da:59:97:e3:da:ca:00:7f:3b:36:
         c4:d8:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----