Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File:                     NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier:          yyexbyd9EmZceXi2tCawuMOOWcRE19FUtYEJhrR1ZYU=
Subject key identifier:   39:37:71:04:4E:7A:3C:F7:0F:19:C6:42:45:44:AE:17:A5:5B:F0:55
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer:       /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial:       01962E990CEF9F43743FA7FBF603977A1360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: EkdnwhG9ceY/z1UMGJrHWwW7tAYU90FeEUgO3EoQ/eA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0c:ef:9f:43:74:3f:a7:fb:f6:03:97:7a:13:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=393771044e7a3cf70f19c6424544ae17a55bf055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:aa:79:e4:ab:89:9f:d8:e9:6d:d8:45:6d:
                    ae:7f:15:95:86:5f:c2:12:25:d4:45:68:12:82:ad:
                    d2:c7:e5:70:55:07:aa:be:80:de:cd:ba:a4:27:3b:
                    0c:83:e2:37:c0:c1:09:a5:b0:2f:a8:5a:14:e9:26:
                    e4:ee:d1:27:5b:d0:0c:b6:88:c9:76:0d:0e:d5:60:
                    65:14:20:ea:2e:ad:8a:26:cf:58:50:b9:04:21:7d:
                    b5:8e:d3:19:bd:91:f7:f5:71:b9:08:4f:cc:91:26:
                    32:9e:79:db:53:61:f6:a3:71:df:41:84:c3:11:db:
                    25:95:bd:cf:40:02:c2:0d:5b:3f:69:8a:9f:b9:27:
                    27:11:98:13:7b:52:bd:e3:56:1d:3e:54:44:30:5f:
                    38:6c:13:17:bc:8d:87:4f:ca:41:3d:99:0f:4e:9f:
                    da:55:40:af:3d:5c:da:4a:14:ba:85:b0:4f:8e:52:
                    71:3c:0a:9e:0c:dd:68:a8:ef:06:21:59:78:d4:ec:
                    44:b0:e6:8e:b3:ec:ac:9b:c2:3a:f8:58:55:12:8b:
                    37:fe:9a:47:55:e1:3e:24:7f:d2:43:ea:8b:30:d5:
                    af:00:57:6e:50:d3:b8:09:ee:c3:0b:51:0c:01:a6:
                    e7:44:3c:76:86:ca:02:9a:a6:7e:74:cc:fe:94:b4:
                    26:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:37:71:04:4E:7A:3C:F7:0F:19:C6:42:45:44:AE:17:A5:5B:F0:55
            X509v3 Authority Key Identifier:
                keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:57:18:8d:07:97:f1:96:10:30:de:5a:4d:c0:b6:12:76:
         66:96:01:b6:67:dd:d4:ff:5a:1d:59:08:1d:c3:1c:7a:2f:5d:
         fe:a6:85:91:71:95:4e:4c:11:c0:82:86:8c:40:4f:3c:db:32:
         bf:6b:1d:69:95:05:ce:6c:03:85:ea:29:42:2d:a4:7a:0f:50:
         7d:37:de:b5:83:2f:27:d2:a7:d2:c6:e4:96:26:09:f8:ec:c8:
         dc:1e:ee:77:f4:f2:96:c6:70:db:54:4a:5e:de:3a:19:b6:8c:
         1c:96:a3:4d:f2:8d:db:8c:10:1a:7d:0a:d9:2f:c8:1e:6d:20:
         97:57:23:e4:f6:38:8d:74:ba:a3:8f:ae:92:34:ea:ce:1a:70:
         f7:aa:fc:f7:e2:af:46:1d:00:f5:3d:de:35:ac:40:30:23:f7:
         8c:e1:0c:ce:94:44:88:87:d2:ed:2a:6b:b9:64:ec:29:73:9e:
         15:ae:73:68:bc:22:c0:43:c0:06:60:a4:c9:f6:c4:7f:f9:cc:
         0f:31:c3:bc:f4:a8:6d:20:f9:b6:83:38:85:b1:0c:52:b0:5d:
         47:45:6e:9b:85:3e:61:18:f1:53:98:3c:12:8b:9c:e5:ce:2b:
         b2:60:5f:05:e5:6c:4a:1b:6e:5c:f3:31:60:8f:f2:20:95:53:
         d0:5c:77:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumQzvn0N0P6f79gOXehNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj
OWM1ZGYwHhcNMjUwNDEzMTAwMTQ0WhcNMjUwNDE0MTAwMTQ0WjAzMTEwLwYDVQQD
EygzOTM3NzEwNDRlN2EzY2Y3MGYxOWM2NDI0NTQ0YWUxN2E1NWJmMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDeqeeSriZ/Y6W3YRW2ufxWVhl/C
EiXURWgSgq3Sx+VwVQeqvoDezbqkJzsMg+I3wMEJpbAvqFoU6Sbk7tEnW9AMtojJ
dg0O1WBlFCDqLq2KJs9YULkEIX21jtMZvZH39XG5CE/MkSYynnnbU2H2o3HfQYTD
Edsllb3PQALCDVs/aYqfuScnEZgTe1K941YdPlREMF84bBMXvI2HT8pBPZkPTp/a
VUCvPVzaShS6hbBPjlJxPAqeDN1oqO8GIVl41OxEsOaOs+ysm8I6+FhVEos3/ppH
VeE+JH/SQ+qLMNWvAFduUNO4Ce7DC1EMAabnRDx2hsoCmqZ+dMz+lLQmnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk3cQROejz3DxnGQkVErhelW/BVMB8GA1UdIwQY
MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt
Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4
LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRxXGI0H
l/GWEDDeWk3AthJ2ZpYBtmfd1P9aHVkIHcMcei9d/qaFkXGVTkwRwIKGjEBPPNsy
v2sdaZUFzmwDheopQi2keg9QfTfetYMvJ9Kn0sbkliYJ+OzI3B7ud/TylsZw21RK
Xt46GbaMHJajTfKN24wQGn0K2S/IHm0gl1cj5PY4jXS6o4+ukjTqzhpw96r89+Kv
Rh0A9T3eNaxAMCP3jOEMzpREiIfS7SpruWTsKXOeFa5zaLwiwEPABmCkyfbEf/nM
DzHDvPSobSD5toM4hbEMUrBdR0Vum4U+YRjxU5g8Eouc5c4rsmBfBeVsShtuXPMx
YI/yIJVT0Fx3Pw==
-----END CERTIFICATE-----