Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
File:                     NO2iVBz8z2guKd2uYx7cjR57b2A.mft (raw, json)
Hash identifier:          t8wVHgaUaraCfD3Zk0uoAgWQQFHFSkTnGQF3LPqk/yQ=
Subject key identifier:   21:D3:4E:37:44:8B:52:8F:43:91:21:E7:F9:13:39:67:A0:97:7A:76
Authority key identifier: 34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60
Certificate issuer:       /CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
Certificate serial:       01962E99B0BA2010E66F042F407E70E9E55E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft
Manifest number:          0598
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: NO2iVBz8z2guKd2uYx7cjR57b2A.crl (hash: GhvB9StEbNxhkrCDJ4QtEz28wrflUP/OVby2+YzP0vA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b0:ba:20:10:e6:6f:04:2f:40:7e:70:e9:e5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34eda2541cfccf682e29ddae631edc8d1e7b6f60
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=21d34e37448b528f439121e7f9133967a0977a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:c6:f8:79:4a:2f:10:6b:8c:22:b5:0c:24:
                    18:c0:50:de:ef:fc:4d:5c:8f:a0:7d:0a:f9:2b:43:
                    45:cc:9d:45:55:c1:2e:74:8e:94:3f:1d:c3:dd:68:
                    2a:7b:a0:1e:eb:6d:b1:2a:bb:06:85:5e:3f:6e:53:
                    15:f6:2d:af:aa:45:73:a5:c7:94:12:c6:b4:2e:e3:
                    0d:eb:b7:72:3f:bd:5b:47:64:97:4f:ab:4a:00:67:
                    8b:ac:c6:e0:72:80:d6:f5:b1:d1:77:25:e0:04:47:
                    d2:e5:4b:03:6f:54:81:b3:e1:a5:2d:d4:2c:d9:cb:
                    65:70:0d:9c:2c:d4:e0:0b:49:e8:75:8e:21:ba:04:
                    e8:ab:8b:67:cf:54:4d:49:f9:df:89:b5:ad:d0:2c:
                    e7:54:a0:7f:7e:e0:9f:f1:ff:ee:88:79:91:ec:53:
                    e8:93:0b:ae:99:b5:f8:55:49:ea:a1:40:e7:a2:c9:
                    2a:6f:22:55:e7:f1:98:5d:84:81:84:c9:6c:aa:cb:
                    50:c3:a0:ce:2e:2f:8b:d3:dc:bf:b4:72:38:3c:e3:
                    2e:13:a0:ca:81:59:d1:6e:b4:5f:b9:b6:42:c7:87:
                    1e:13:1f:be:03:52:0f:af:7c:31:34:6b:3a:ce:91:
                    88:2a:a2:f7:fc:68:09:1e:ab:28:f6:90:df:79:eb:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D3:4E:37:44:8B:52:8F:43:91:21:E7:F9:13:39:67:A0:97:7A:76
            X509v3 Authority Key Identifier:
                keyid:34:ED:A2:54:1C:FC:CF:68:2E:29:DD:AE:63:1E:DC:8D:1E:7B:6F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NO2iVBz8z2guKd2uYx7cjR57b2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7244e-b103-43b1-912f-aa632ddb7615/1/NO2iVBz8z2guKd2uYx7cjR57b2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:21:11:a6:93:16:a0:bd:ad:ec:e0:e1:57:0d:a6:12:5a:1f:
         0c:a1:ce:a9:f9:c6:e3:f1:b5:9b:b5:20:b9:86:23:27:d5:9f:
         49:b9:9b:80:21:f7:e6:32:d9:b6:67:1e:51:48:0f:7e:24:bc:
         a5:ad:5d:b3:9d:ea:c5:63:10:97:00:b2:39:19:bd:0f:34:3b:
         a3:93:b9:af:90:bf:fe:68:50:c5:48:9b:c6:3f:98:6b:99:04:
         36:9b:32:91:a7:8b:8d:1d:11:e6:6d:eb:27:64:16:54:68:e1:
         84:e5:08:18:82:90:bc:e9:2e:82:c6:a4:bd:d6:ce:89:2b:0a:
         d4:d4:51:e9:ac:11:32:97:83:82:d8:93:0c:cd:d0:27:59:63:
         01:39:8a:1d:87:cf:b5:9b:26:51:1c:d8:7d:44:36:24:9a:88:
         aa:a7:0d:72:38:b2:7f:78:b4:dd:d6:c9:fa:7f:bc:48:f9:6f:
         f7:e4:ae:b9:e5:c8:3e:2a:9f:9a:6d:d4:45:9d:d7:db:fc:bd:
         99:d8:32:6b:fc:73:7e:ef:1c:f6:fd:e2:49:6c:da:71:30:4f:
         0e:2a:ac:76:90:5c:cb:64:7a:8d:32:71:7f:c8:3f:11:1c:75:
         87:6a:75:0b:4c:4a:14:22:fb:a9:15:5d:3c:85:d3:60:e6:76:
         85:94:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----