Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
File:                     3nRxlsuMncZCM3r-vwSyBNzRlpY.mft (raw, json)
Hash identifier:          cHcAdnbKX7kN+c8+IgPR4TGcgM13TUcSGJC+s39KUdI=
Subject key identifier:   37:40:03:52:F1:D9:2D:BD:6D:46:BF:AA:D9:02:8A:C5:D6:1A:E6:A0
Authority key identifier: DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96
Certificate issuer:       /CN=de747196cb8c9dc642337afebf04b204dcd19696
Certificate serial:       01962F3DA1B897032F227AED3760F786BB97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft
Manifest number:          03D1
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: 3nRxlsuMncZCM3r-vwSyBNzRlpY.crl (hash: Fikhlvw+dj5dudG67SSg4HHnrC3m/+Nl9bzOC3j3PZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:b8:97:03:2f:22:7a:ed:37:60:f7:86:bb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de747196cb8c9dc642337afebf04b204dcd19696
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=37400352f1d92dbd6d46bfaad9028ac5d61ae6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:0f:79:5f:b0:ea:a5:12:e2:4e:29:ee:b7:
                    db:03:82:ba:08:b5:a5:e6:75:49:58:64:78:a6:4c:
                    71:df:3e:88:5b:1b:f8:c1:2f:02:62:cc:40:78:e5:
                    cb:35:a2:92:2e:61:39:50:a6:4d:a1:00:09:cf:25:
                    b4:7e:d3:b3:7c:a9:be:d4:91:bc:0e:a7:0b:76:74:
                    e7:95:9f:4e:4c:74:87:66:45:b7:55:e3:f0:0d:24:
                    dd:96:df:53:1c:89:56:d1:bf:d1:24:24:a9:24:bc:
                    03:7a:ad:ea:8b:43:e3:44:06:23:8c:82:22:71:7d:
                    c2:4d:74:80:5f:b9:ec:0b:55:94:03:d8:79:f5:dd:
                    32:4a:ef:bd:25:4a:b2:f1:e5:89:c5:d6:5e:1e:9b:
                    bf:f5:44:7b:8f:70:2f:3d:ad:d8:72:92:ec:b1:7d:
                    d0:a7:b1:14:f5:96:2f:8e:d8:bc:2f:13:6e:00:fd:
                    0c:2b:cc:aa:10:69:ea:4f:39:85:ca:d4:c5:34:1f:
                    8d:78:7e:72:c3:30:63:ee:6d:27:1f:44:79:6e:e9:
                    ed:88:64:3f:cc:5b:49:47:be:bc:3f:12:f2:8f:d1:
                    11:4c:ef:72:c7:3b:29:6b:01:b7:c4:b1:f9:14:0d:
                    a0:02:63:4b:e9:45:55:2b:fd:95:d8:d6:12:68:d9:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:03:52:F1:D9:2D:BD:6D:46:BF:AA:D9:02:8A:C5:D6:1A:E6:A0
            X509v3 Authority Key Identifier:
                keyid:DE:74:71:96:CB:8C:9D:C6:42:33:7A:FE:BF:04:B2:04:DC:D1:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nRxlsuMncZCM3r-vwSyBNzRlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/971c24-6b2b-46a5-a751-d3e8a8689dc3/1/3nRxlsuMncZCM3r-vwSyBNzRlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:37:12:0a:1a:d7:0e:27:34:a0:f7:03:f2:63:3c:69:fc:b9:
         b2:55:1c:64:81:61:02:3e:9d:8f:6c:24:09:b6:50:a1:da:37:
         04:7e:d5:1e:ce:ea:88:ce:63:59:00:1d:0e:de:0f:96:35:50:
         a7:45:9e:9f:9f:10:95:3a:0f:0d:d3:cd:31:5a:56:5d:d4:ec:
         09:3d:1b:6c:91:7b:b8:ba:be:31:01:d4:df:45:fa:05:70:97:
         ba:f5:de:4d:49:b9:eb:ef:f2:43:06:6e:52:c9:66:87:ad:13:
         77:2f:05:62:86:a9:4b:29:2d:99:ed:b8:ca:07:98:2a:88:0f:
         b6:ab:3b:68:de:b2:86:bd:5f:90:82:b4:07:12:7a:41:ff:4f:
         42:bb:51:78:f5:dc:1f:10:17:66:0a:96:0c:14:5b:22:35:a3:
         cf:e9:f6:1d:dd:61:1e:59:62:6f:f8:69:4e:91:86:9d:cf:31:
         f2:b9:a1:b3:31:20:ae:29:7a:46:07:00:e7:6e:38:29:9b:90:
         26:71:a2:40:fc:0e:de:de:b2:eb:a3:e2:c3:ba:e4:a3:a9:ca:
         8e:48:f6:00:fe:e0:13:8b:eb:98:76:4e:7b:94:ab:b6:b8:98:
         74:7d:20:40:b1:5a:d8:f9:d3:bd:a7:ee:27:45:50:4b:02:02:
         e8:9c:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----