Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File:                     n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier:          L+U0zAw3XKC5eN1Cmaf/16qYKnuNzhFdk1qD4WyXwvI=
Subject key identifier:   68:36:4D:B7:89:3F:03:01:D8:68:80:D2:70:D8:9D:9D:7C:DA:9A:31
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer:       /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial:       01962E2B1AB915727F9AEB59BB30FA3B7FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number:          028E
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: 9N3godj57TEaxxbIiTUheko7TpS8jh9aP1iyI2X+Yzw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:b9:15:72:7f:9a:eb:59:bb:30:fa:3b:7f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=68364db7893f0301d86880d270d89d9d7cda9a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:44:24:28:e0:d7:8e:a7:e1:16:d8:65:35:
                    b5:eb:16:9e:43:61:ea:bd:cc:fb:c7:24:e9:8c:b9:
                    35:44:44:0c:ad:0f:25:6f:c9:ba:97:e9:a3:57:aa:
                    ab:60:47:30:06:a1:24:e7:d8:12:e6:c6:39:e8:70:
                    a1:5f:74:7e:b6:a8:9e:de:9d:1c:3b:b2:c0:15:1e:
                    de:da:74:8e:c5:76:38:9e:f3:5f:76:88:d5:69:f9:
                    37:6a:03:1f:0c:03:76:84:9c:11:8b:0f:60:87:96:
                    46:45:e2:99:77:32:2a:04:ba:d4:e3:b4:52:0e:77:
                    8c:81:4f:52:b8:31:80:6b:46:cf:15:fc:ca:5a:6d:
                    b8:49:64:45:0b:85:c2:c1:7c:e7:88:19:81:da:e8:
                    1b:10:75:54:ba:c4:a3:d6:76:c1:30:77:fe:56:54:
                    f5:a6:58:66:22:01:ca:c1:65:72:f3:1f:ac:3b:31:
                    1f:97:01:70:02:c9:7c:80:07:6a:03:bc:e3:7c:70:
                    f8:b7:e1:87:a9:96:b1:b8:0d:4a:f6:37:d7:f8:bc:
                    81:31:4b:90:e2:5c:9e:af:86:b1:a8:44:76:a6:c4:
                    7a:a0:b0:f3:c3:e1:fa:26:c1:0e:8c:55:df:7d:75:
                    b9:62:3d:a7:cc:85:05:81:84:72:50:26:9c:91:ca:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:4D:B7:89:3F:03:01:D8:68:80:D2:70:D8:9D:9D:7C:DA:9A:31
            X509v3 Authority Key Identifier:
                keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:1f:20:6f:fc:62:a8:0e:3b:bc:4c:b6:92:45:a4:e4:e2:bf:
         54:19:72:00:68:4b:9c:db:b6:3c:29:e8:bf:08:bd:ee:49:51:
         de:2b:c9:cb:43:dd:4e:ad:2f:09:08:65:c9:f5:04:17:00:aa:
         32:7e:da:d3:7f:7f:31:e3:c7:16:e1:b3:5f:76:d4:f2:75:f7:
         fb:a9:2c:94:9e:26:cf:48:df:f9:78:ad:7b:48:dd:3f:6f:37:
         6a:c9:13:1f:da:79:26:a0:d7:c8:53:96:dc:ce:d0:4e:10:12:
         91:a6:4b:9f:70:1e:24:50:0d:56:57:04:87:c7:88:bf:4a:8c:
         80:90:1d:ac:a3:5d:78:92:31:b9:bd:5a:77:11:f3:0f:52:6c:
         eb:01:51:7e:75:9e:90:38:51:04:67:21:37:91:8a:ac:ab:7e:
         2a:cd:00:52:7a:22:dd:70:b9:b2:e5:4c:27:da:cd:7c:0c:ac:
         2a:32:ed:d7:21:15:0a:c8:7d:bf:54:b6:4b:bc:cb:ca:60:0c:
         3d:0f:ce:07:74:81:3a:ca:4a:7f:1f:39:7b:b3:fe:27:e8:10:
         f5:d7:03:aa:6f:bd:60:01:a3:ec:37:11:9c:f3:6e:d4:d4:45:
         3d:5a:91:bf:64:30:61:9a:d7:1a:a1:73:d9:04:a7:04:5a:b1:
         29:34:dc:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxq5FXJ/mutZuzD6O3+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTFiMzM2MDE3N2EwMGJjM2RjNTc0M2UwMjYzMjg0NjA0
ZjliNzQwHhcNMjUwNDEzMDgwMTM4WhcNMjUwNDE0MDgwMTM4WjAzMTEwLwYDVQQD
Eyg2ODM2NGRiNzg5M2YwMzAxZDg2ODgwZDI3MGQ4OWQ5ZDdjZGE5YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7BEJCjg146n4RbYZTW16xaeQ2Hq
vcz7xyTpjLk1REQMrQ8lb8m6l+mjV6qrYEcwBqEk59gS5sY56HChX3R+tqie3p0c
O7LAFR7e2nSOxXY4nvNfdojVafk3agMfDAN2hJwRiw9gh5ZGReKZdzIqBLrU47RS
DneMgU9SuDGAa0bPFfzKWm24SWRFC4XCwXzniBmB2ugbEHVUusSj1nbBMHf+VlT1
plhmIgHKwWVy8x+sOzEflwFwAsl8gAdqA7zjfHD4t+GHqZaxuA1K9jfX+LyBMUuQ
4lyer4axqER2psR6oLDzw+H6JsEOjFXffXW5Yj2nzIUFgYRyUCackcppSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg2TbeJPwMB2GiA0nDYnZ182poxMB8GA1UdIwQY
MBaAFJ/hszYBd6ALw9xXQ+AmMoRgT5t0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1Yzkt
Zjk3NWVhNGUzNjc0LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1YzktZjk3NWVhNGUzNjc0
LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwx8gb/xi
qA47vEy2kkWk5OK/VBlyAGhLnNu2PCnovwi97klR3ivJy0PdTq0vCQhlyfUEFwCq
Mn7a039/MePHFuGzX3bU8nX3+6kslJ4mz0jf+Xite0jdP283askTH9p5JqDXyFOW
3M7QThASkaZLn3AeJFANVlcEh8eIv0qMgJAdrKNdeJIxub1adxHzD1Js6wFRfnWe
kDhRBGchN5GKrKt+Ks0AUnoi3XC5suVMJ9rNfAysKjLt1yEVCsh9v1S2S7zLymAM
PQ/OB3SBOspKfx85e7P+J+gQ9dcDqm+9YAGj7DcRnPNu1NRFPVqRv2QwYZrXGqFz
2QSnBFqxKTTc0g==
-----END CERTIFICATE-----