Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
File:                     NKh-9PEuNt_cafTUydRQ7us_9tU.mft (raw, json)
Hash identifier:          6SdOtQ7CjKw05q070tkWfLzjkBujMQvxg3dYM85f9R0=
Subject key identifier:   B5:82:9F:6F:0C:D6:2F:E4:B7:81:F8:9F:43:3A:34:C5:7E:BC:23:63
Authority key identifier: 34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5
Certificate issuer:       /CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
Certificate serial:       01962E98763A6931FBDBD38CB4F313CEB404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft
Manifest number:          0BE1
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: NKh-9PEuNt_cafTUydRQ7us_9tU.crl (hash: v5MJOvP84Z4XZEL2LvXajD2VzuM8R1vRBGWeD+56lFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:76:3a:69:31:fb:db:d3:8c:b4:f3:13:ce:b4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a87ef4f12e36dfdc69f4d4c9d450eeeb3ff6d5
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=b5829f6f0cd62fe4b781f89f433a34c57ebc2363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:bf:10:bf:18:78:f8:ed:30:f9:c4:d3:f7:
                    66:89:46:80:62:30:a2:6f:b5:33:ef:24:8c:ad:e7:
                    2f:e8:ae:a5:07:10:cb:11:ba:a0:34:19:47:55:c1:
                    93:4a:62:66:ea:a1:e0:b3:11:b7:ee:11:6c:26:71:
                    1b:c2:a7:ce:fe:81:af:f0:80:c9:3c:41:bf:de:34:
                    88:a1:44:27:2c:0f:56:d5:94:ad:8f:01:ab:72:04:
                    71:53:eb:28:53:5e:1f:a0:15:da:2e:73:61:92:48:
                    46:88:d1:a6:de:60:d0:78:80:72:bf:66:30:8d:ec:
                    f9:f2:48:46:87:f7:fa:f7:bf:4b:df:56:bd:04:f6:
                    91:48:2d:c5:b8:bb:f9:3c:04:93:49:f2:a8:8d:af:
                    51:46:fa:ab:c7:0b:5c:a3:ee:43:aa:e0:f1:d0:4e:
                    7c:4d:ac:50:8e:2a:e3:6a:a5:8d:75:4e:f5:46:6d:
                    01:ad:d0:a8:f0:8e:e7:b6:92:48:a9:9e:ce:42:ff:
                    38:57:5d:a6:30:92:6b:d6:0d:60:9a:75:e4:5e:9f:
                    19:e8:48:f6:aa:91:98:e5:9a:26:a5:2d:c3:23:dd:
                    16:85:ff:39:f1:03:f6:98:15:94:61:e9:6f:e9:ef:
                    46:b8:b1:d2:4c:cf:a0:cd:b8:d4:4f:63:e4:b5:d7:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:82:9F:6F:0C:D6:2F:E4:B7:81:F8:9F:43:3A:34:C5:7E:BC:23:63
            X509v3 Authority Key Identifier:
                keyid:34:A8:7E:F4:F1:2E:36:DF:DC:69:F4:D4:C9:D4:50:EE:EB:3F:F6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKh-9PEuNt_cafTUydRQ7us_9tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c19ff-a757-41b4-83fd-d490b815503b/1/NKh-9PEuNt_cafTUydRQ7us_9tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:81:bd:43:9d:c8:8c:63:0f:12:23:66:2a:7f:1b:63:61:9e:
         06:5b:29:c0:38:3a:55:b4:fa:54:90:35:82:d4:de:e2:91:a0:
         84:f3:f8:c3:7d:d5:65:b0:8f:3d:d1:55:a2:7e:f4:05:af:92:
         c4:8c:91:9c:bd:a1:e3:17:75:48:6f:a6:8b:59:4a:3c:5f:06:
         52:79:43:c1:0b:db:df:9d:3f:87:22:bd:61:f5:2f:1c:9f:e8:
         38:d6:a1:5f:f5:ea:16:71:5c:5a:22:24:a7:37:98:c0:a2:aa:
         81:8d:ee:ac:8f:16:83:89:4d:19:16:29:d5:97:fb:7c:f0:9b:
         4c:8f:7c:6e:f8:56:6d:b6:20:48:e0:da:34:d4:8c:b7:89:ea:
         ce:e2:f9:35:63:84:5a:bb:7a:27:98:35:62:07:55:31:ca:3b:
         d0:a1:69:a9:cc:0a:23:9a:66:0b:e2:34:08:9c:5b:55:f6:84:
         e0:18:8e:26:d3:a8:c3:17:7f:86:d1:1d:60:3c:c8:51:93:d8:
         02:46:72:be:fa:f9:c8:8c:13:8e:e6:1b:88:d4:48:42:9d:53:
         d5:c1:96:00:68:33:e6:45:85:6e:23:0a:9c:fd:28:6d:fb:1e:
         7f:47:36:23:fd:44:38:6d:45:48:95:e3:c4:b7:d5:f9:d7:6d:
         b2:71:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----