Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File:                     Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier:          Rt8SREBbf8CM900pQvFL03aGGdxv4xxfXiC24YaZg6o=
Subject key identifier:   71:D4:85:33:A8:E9:D2:0E:BD:EB:44:5E:E1:91:F8:76:C4:AD:F6:43
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer:       /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial:       01962E992998A94FB91C0963E9DCBA7F2F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number:          0B1D
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: tefQhKD/7ETBWhXNXtVbhZZVHTXzgGqp6yI3UaUSbVE=)
                          2: R_dc828vlc27bxXSMzahF76dopg.roa (hash: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=)
                          3: yzgxHb39JlWgV-6OUyl9AE4hQAQ.roa (hash: pG2NZjpFYDlbN9iuGT1kUvmnDeM4noZC3E54rEDkwXo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:29:98:a9:4f:b9:1c:09:63:e9:dc:ba:7f:2f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=71d48533a8e9d20ebdeb445ee191f876c4adf643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:c2:2f:be:27:1b:27:7d:c7:ea:4e:80:17:
                    b0:4c:d7:08:1e:fd:21:c6:80:1f:ef:11:8c:d9:a6:
                    be:58:64:e6:86:22:27:c9:63:07:48:bb:61:68:79:
                    d9:26:8f:78:f1:da:4c:44:c8:05:b3:c5:32:75:97:
                    75:77:53:e2:57:b7:22:21:6d:1a:11:72:a1:1b:26:
                    a3:63:0d:23:3d:61:83:13:6f:b6:2e:dd:05:9e:75:
                    34:8e:60:4a:12:8c:50:e9:56:de:88:33:8f:a1:2e:
                    76:f0:2e:f0:15:f2:2f:8b:3c:a0:2f:3b:23:d4:b3:
                    30:53:f1:89:c1:0e:8a:22:28:18:d1:20:45:bb:c9:
                    f8:d6:45:bc:ca:27:ba:31:db:95:e8:f0:a7:ff:2b:
                    36:ad:fb:fb:76:5b:54:7c:de:75:12:1f:94:54:b8:
                    3b:d0:95:99:d8:5a:1f:a1:de:98:56:f1:c4:ae:f7:
                    fd:a3:2b:65:83:fe:2c:69:3a:ed:35:9a:33:46:23:
                    c4:35:ec:57:6c:d1:b3:b6:31:dc:58:99:69:a7:5f:
                    d9:ee:37:c9:38:f8:44:d7:6b:59:ae:94:00:ac:fb:
                    d2:da:e2:31:66:ed:60:52:ec:85:23:04:f6:c8:a4:
                    84:f7:f9:a8:b3:ef:bb:34:a8:52:3f:5e:b4:58:3d:
                    81:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D4:85:33:A8:E9:D2:0E:BD:EB:44:5E:E1:91:F8:76:C4:AD:F6:43
            X509v3 Authority Key Identifier:
                keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:50:33:16:94:18:fc:62:e6:75:8f:ee:a7:c2:df:aa:31:12:
         7f:a7:72:0e:36:d3:94:83:09:45:19:7a:c9:4e:20:37:30:97:
         5f:59:f1:ec:74:1a:38:86:c0:4a:ae:39:84:15:fe:47:13:32:
         ec:97:74:3e:1a:7a:26:8f:72:2e:d0:2d:85:b1:bb:ff:c4:6d:
         90:44:3c:14:8d:6b:54:b1:ec:85:82:ed:3f:64:91:a0:49:39:
         8b:ec:fe:3a:87:a7:8b:ab:01:62:b0:5f:70:56:14:12:b1:f4:
         e2:9d:01:0a:2b:ab:41:c8:f6:87:f0:c7:0b:8d:5d:31:73:fa:
         a7:d3:48:b4:1f:f9:0e:89:50:98:ff:a2:c4:ed:19:1d:d8:07:
         d6:6e:68:4c:16:04:f5:6f:41:ff:fb:5e:e7:8a:70:f5:b3:69:
         74:d4:29:c3:3d:db:f8:ea:75:f0:7d:dd:aa:a2:b1:f1:bb:52:
         3a:ad:5f:ae:23:86:9d:9a:a4:8c:9a:04:26:53:d7:f2:c5:a3:
         a8:21:2c:cd:b4:47:f8:72:f3:0f:ab:88:6f:a6:10:2b:70:46:
         ce:be:55:a5:e4:6b:dd:e9:f6:43:17:43:d3:3f:cb:ab:aa:51:
         ae:52:4d:de:f5:e8:f3:88:59:a1:45:4b:7b:0e:41:f5:3e:6e:
         01:84:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----