Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
File:                     sXeHrvys6kKsZDmUmlaPDf_nd-0.mft (raw, json)
Hash identifier:          KhI6sfAZQyqtXEq39DrnNVDVzq+222nrtWAPLUJV/Jw=
Subject key identifier:   DA:77:46:B4:A1:19:45:8B:00:5A:59:16:59:78:33:67:05:55:8E:B0
Authority key identifier: B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED
Certificate issuer:       /CN=b17787aefcacea42ac6439949a568f0dffe777ed
Certificate serial:       01962F74C4FD4B6C3F1BB08FB0C816489B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft
Manifest number:          0DFE
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: sXeHrvys6kKsZDmUmlaPDf_nd-0.crl (hash: S1g9m8agBp+5xEgu7kEYj++WCv6890unUR5opqnps6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:fd:4b:6c:3f:1b:b0:8f:b0:c8:16:48:9b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17787aefcacea42ac6439949a568f0dffe777ed
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=da7746b4a119458b005a59165978336705558eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:87:bd:37:91:ce:15:3e:54:3a:12:f8:2a:
                    19:08:28:3d:88:a4:f1:c8:d9:89:47:38:17:ca:df:
                    fd:55:94:70:fa:5d:31:54:db:97:07:ea:30:14:b5:
                    55:66:ae:1b:99:38:4c:87:b4:c0:e2:23:98:96:8d:
                    e3:28:de:01:ac:6b:9f:81:37:7c:f6:91:dc:b7:5d:
                    0a:f3:1d:b2:f9:24:39:62:4e:e2:53:1f:90:32:6a:
                    15:8d:b9:16:cd:51:85:57:07:30:8b:cd:e9:9e:08:
                    af:96:cd:cb:59:71:ae:a4:59:7f:eb:f7:cd:87:f9:
                    19:94:a6:4c:29:95:45:59:15:ee:a3:31:d5:d8:59:
                    ce:26:25:04:81:59:27:80:9c:40:9a:98:aa:33:bd:
                    51:e2:e5:48:b0:e1:92:38:e7:25:59:bf:26:06:4e:
                    51:af:5d:f5:75:8e:45:d3:20:77:67:29:62:bb:0a:
                    be:a9:19:1a:ba:0f:a9:d3:91:7a:1b:59:64:42:48:
                    c3:58:f7:13:a1:d2:f5:86:07:0e:8d:f4:98:c6:ed:
                    e3:14:d7:30:df:27:0d:08:7f:34:19:6a:76:13:ce:
                    dc:45:83:01:ed:dd:11:56:bd:31:16:dc:1d:5d:5d:
                    62:e4:26:3c:62:1e:ab:94:61:dc:d6:34:69:b4:ec:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:46:B4:A1:19:45:8B:00:5A:59:16:59:78:33:67:05:55:8E:B0
            X509v3 Authority Key Identifier:
                keyid:B1:77:87:AE:FC:AC:EA:42:AC:64:39:94:9A:56:8F:0D:FF:E7:77:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXeHrvys6kKsZDmUmlaPDf_nd-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4c6ebf-aa1a-4f1a-b18f-3e8b5f3c4c36/1/sXeHrvys6kKsZDmUmlaPDf_nd-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:0f:48:ab:af:e9:fd:20:13:0d:e4:d8:1d:27:6e:79:25:
         94:17:14:22:1b:12:72:a8:5e:e7:19:82:6e:f5:8f:d9:b0:13:
         0d:a4:09:34:1b:35:56:38:76:6b:62:fc:3d:60:32:bc:45:3e:
         1b:27:f6:6c:20:33:3d:32:11:62:c6:68:bd:6f:67:be:ca:8a:
         9f:c5:54:a8:94:0d:73:2a:9b:c9:77:e4:69:eb:2a:a5:e5:c4:
         57:da:f6:5d:d3:aa:8f:ab:d7:ea:04:b5:98:34:42:be:2e:ba:
         74:5a:74:c1:94:f2:d3:de:65:2b:85:1b:53:98:4d:d0:b9:bd:
         f4:7f:7f:18:2a:e8:7d:bf:74:6a:dd:fb:04:79:8f:e4:1e:7e:
         2c:0c:5c:88:56:d9:16:64:b6:56:db:ca:33:11:66:b5:62:b4:
         d8:4a:3a:be:3e:af:1c:57:61:03:2f:04:07:80:3c:db:c0:fa:
         27:be:71:a1:b5:d8:d3:b1:fb:2e:36:61:0a:e3:fa:c4:40:b1:
         a3:19:29:cd:8a:c3:a6:8e:c6:5b:88:6e:1e:27:5c:e4:16:75:
         7d:b6:65:58:fe:f8:3c:ec:78:b4:55:f9:07:99:1b:8b:db:f1:
         ef:5c:91:af:2f:b2:2e:02:0a:af:bb:ed:ea:d3:8b:3c:5d:56:
         b6:71:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----