Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File:                     NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier:          k1+h7FKITReBWBamBf/LBk82/X+YgIYswVVvfV2QXoQ=
Subject key identifier:   AE:21:62:7A:85:7E:E9:F8:98:32:ED:C6:51:AB:EE:05:9D:A7:42:A8
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer:       /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial:       01962F3D8266E20042CBF7159B6416512422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number:          0549
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: hN2JosycmzPLUAmDlSMV3LU2aD7uVdHG0amwjPYNr6M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:66:e2:00:42:cb:f7:15:9b:64:16:51:24:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=ae21627a857ee9f89832edc651abee059da742a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:c3:a6:84:c5:4b:af:f5:68:4e:15:d1:45:
                    fa:d7:71:6f:4f:32:6b:86:5f:81:10:db:b5:21:67:
                    79:f3:f2:b3:56:21:e9:a0:6f:50:99:81:21:4f:f8:
                    6b:98:5d:cb:8d:ac:b0:e7:25:15:d2:70:2e:b9:26:
                    1a:9b:83:7c:f7:ab:d1:ff:1d:77:3d:74:6e:c2:51:
                    53:eb:19:86:70:61:9d:2c:e5:b4:8a:5b:c0:76:6e:
                    e8:00:9e:05:8a:24:89:9c:01:ab:35:d5:b7:1f:c8:
                    72:48:b8:75:30:ca:cb:c1:8a:48:54:72:ae:12:b4:
                    5f:e2:f4:94:95:cd:74:9a:4d:9a:b7:8f:16:bf:ab:
                    9f:a3:26:eb:15:b9:ce:06:bd:99:5f:33:e8:ae:b0:
                    f1:1c:28:e8:f4:1d:b2:ce:72:4f:81:d1:53:76:3b:
                    48:dd:32:8f:9a:52:17:db:dd:a7:12:63:2c:48:6b:
                    98:88:c1:e3:35:e2:53:af:5a:26:79:3d:8f:c8:d1:
                    b2:91:36:2b:4f:8f:5e:a8:15:99:96:ef:ff:b9:49:
                    18:37:bf:72:fe:27:1a:e1:8a:22:b0:00:90:9e:b9:
                    51:4d:77:be:8e:11:10:dd:6b:83:bf:84:e7:13:19:
                    35:84:20:93:48:be:7f:49:fc:af:d1:90:12:43:09:
                    7b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:21:62:7A:85:7E:E9:F8:98:32:ED:C6:51:AB:EE:05:9D:A7:42:A8
            X509v3 Authority Key Identifier:
                keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d0:e5:cb:5e:10:8f:e8:3f:d0:ad:95:2c:aa:d3:fc:f2:1d:
         fa:b1:fe:e1:46:d2:28:da:18:23:62:68:eb:65:ba:a9:08:a4:
         7d:28:13:db:77:b0:9d:bc:fd:c8:0b:6a:03:57:b6:8a:13:61:
         09:cc:b1:e9:dd:e3:b0:25:0e:20:6d:31:f5:e7:56:cf:22:54:
         a6:60:f0:00:c5:5f:ff:da:3c:f4:7c:0f:3d:6a:8d:ec:41:5f:
         87:45:ae:08:13:af:b6:84:b8:60:ef:48:7d:c4:16:1d:77:79:
         f3:a6:72:12:95:86:40:c6:a0:1c:66:70:e9:c9:94:db:3d:1f:
         e7:5a:17:67:c2:79:35:7b:e7:d5:a6:6e:3f:fe:1c:06:d0:f5:
         cb:16:a0:48:54:1c:aa:34:87:1f:c4:ca:df:e0:b1:96:0c:de:
         ee:3e:e8:d0:1a:a2:16:ef:e6:01:49:b9:3b:64:bc:80:9b:1a:
         54:0f:39:75:0c:f3:11:f9:ca:75:95:c4:3b:f2:0f:5a:72:e4:
         7c:ae:f4:33:36:54:17:57:89:68:6c:ff:ca:29:10:f8:ac:bb:
         67:c1:5e:38:eb:8f:dc:72:35:bf:d5:2b:25:0c:4b:22:86:2f:
         74:ed:4a:14:cc:e0:37:9b:28:b6:1c:66:56:39:cf:ad:b1:6e:
         d5:ee:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----