Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
File:                     nYy-lCn5RJlbPJNL2vZglrURSNQ.mft (raw, json)
Hash identifier:          dzJtk+nDcbXZKrDxNYAy9RpAuZsO13fy5H1olUPehs8=
Subject key identifier:   90:05:37:47:0A:28:92:30:2D:5A:62:FD:E1:99:B0:A6:5F:A1:83:95
Authority key identifier: 9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4
Certificate issuer:       /CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
Certificate serial:       01962F3D300B958592DC383A607A8F3D4BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft
Manifest number:          0437
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: nYy-lCn5RJlbPJNL2vZglrURSNQ.crl (hash: JepF6rjUdR/iEcNj0Bu/ngt49PnfzMrHHJ/+clpyohI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:30:0b:95:85:92:dc:38:3a:60:7a:8f:3d:4b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d8cbe9429f944995b3c934bdaf66096b51148d4
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=900537470a2892302d5a62fde199b0a65fa18395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:75:27:a7:90:c9:42:a0:8a:0c:34:b5:ed:37:
                    dc:fc:f9:e4:91:bb:dd:c6:e9:c2:54:3b:20:a9:cf:
                    0e:0c:89:95:7a:bf:81:7b:64:a9:b8:d1:10:60:9a:
                    2f:2a:7a:d8:82:78:3a:61:1f:48:31:2c:b3:b9:f5:
                    34:ce:f4:8e:f0:4d:75:fa:09:80:e6:c0:2d:72:64:
                    60:e1:b7:eb:1d:a0:e8:9f:e4:1f:2b:45:36:e8:69:
                    00:d0:0d:68:03:9b:4e:66:21:54:f9:8a:ba:74:3e:
                    5d:13:79:0d:ec:4b:13:28:93:92:25:81:7a:01:b3:
                    79:f0:ad:53:3a:cb:0f:7a:14:9c:14:17:c3:da:1d:
                    fb:34:3e:7e:a5:d9:6b:5f:68:65:b3:c3:6b:94:44:
                    6a:e4:4b:06:58:7d:83:2c:6c:20:55:15:02:f0:0f:
                    5a:22:34:cf:7a:25:3a:d5:3f:10:8e:ac:2b:b5:e6:
                    67:55:ba:e9:40:42:24:e2:a1:05:02:63:1f:bc:90:
                    89:a0:0e:b7:5e:e5:3b:02:b8:49:6b:12:27:0a:ee:
                    a7:96:34:cb:ad:7b:ed:d1:30:5d:af:be:5f:51:81:
                    36:0d:7f:b7:7b:ad:b5:06:83:99:15:a1:30:2c:6f:
                    e2:99:f3:43:4b:83:65:fd:e0:63:3c:0f:0e:bf:eb:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:05:37:47:0A:28:92:30:2D:5A:62:FD:E1:99:B0:A6:5F:A1:83:95
            X509v3 Authority Key Identifier:
                keyid:9D:8C:BE:94:29:F9:44:99:5B:3C:93:4B:DA:F6:60:96:B5:11:48:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYy-lCn5RJlbPJNL2vZglrURSNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/23d64f-5192-4dd6-b026-ee9116d7e1d6/1/nYy-lCn5RJlbPJNL2vZglrURSNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d4:7c:c4:62:8a:5d:cb:75:6d:d5:69:a0:80:64:a6:d4:49:
         37:e9:d9:f8:49:a7:78:c9:82:2a:c3:71:0b:51:d4:bf:87:ad:
         74:06:b7:49:24:cb:fd:d8:68:7d:e4:13:f8:73:b3:ab:af:fd:
         21:b5:b4:3b:dd:c4:3b:99:14:ca:1f:70:1c:c5:5e:70:13:a5:
         f7:13:4f:43:16:11:21:39:5f:a8:f8:12:1d:b4:08:48:d5:9c:
         d3:ca:ac:32:e0:b2:7c:a6:cf:c8:47:1f:2d:d6:f3:34:86:e2:
         e1:80:f7:f3:27:ab:98:a6:7f:d1:81:35:a1:f9:b1:e7:78:ac:
         d7:58:62:c3:49:de:c4:11:25:d1:5a:4b:c7:e6:e2:21:b2:b4:
         dc:45:f1:a1:06:3b:bd:48:c9:47:00:13:c8:3b:d0:20:3e:1c:
         98:a7:a4:6b:17:0d:f4:63:ef:9d:ec:c6:37:c6:d2:bd:51:7d:
         b2:d8:33:66:6c:55:71:85:f3:c3:52:b4:10:77:72:fc:fd:eb:
         e4:47:50:aa:85:02:2c:0c:af:53:e5:36:a2:53:84:8e:e8:e5:
         c0:f9:f2:4e:9b:71:ca:d5:a7:07:ce:0c:28:70:03:31:1b:f9:
         d7:b3:ac:76:5e:0d:8d:6a:17:83:e3:6f:05:18:dc:db:1f:36:
         f1:d6:3e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----