Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File:                     nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier:          Ag2bxQXD3BrGXOS5iGSimCGF+WDhGn2PsreOSHVyxOw=
Subject key identifier:   04:C0:6E:D3:02:9C:67:0F:BF:72:A9:AA:D5:81:B5:5F:BB:AB:87:C8
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer:       /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial:       01962E98F73E34333EA857A4FF0DDC6E9ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: 3D42tRIX+lqmdEXWU8djNvk/Newlm8f9iHP6JoiThLk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f7:3e:34:33:3e:a8:57:a4:ff:0d:dc:6e:9e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=04c06ed3029c670fbf72a9aad581b55fbbab87c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:94:e2:a5:e1:9e:28:c6:c2:c6:6d:90:a8:73:
                    bc:ea:2e:40:a2:86:c1:03:55:ff:c7:d0:ad:f2:95:
                    63:f9:6f:f6:fb:5b:c6:cd:82:e8:86:4b:5a:69:6e:
                    a9:47:c8:1d:43:6e:ee:3b:ac:cd:0a:33:18:73:d3:
                    16:32:81:22:69:ea:b8:36:96:72:da:bd:af:93:5a:
                    97:6c:1b:c3:02:c6:35:59:a2:7c:3e:97:e5:41:dd:
                    35:cf:45:f1:f9:c4:64:5b:b3:f6:da:9e:07:26:0e:
                    9a:0f:06:5a:d5:bc:1f:50:32:74:6c:50:dc:d2:91:
                    e5:8d:0e:7e:02:35:25:79:aa:e1:f3:70:58:42:e5:
                    43:e6:ab:17:6b:de:71:cd:e8:6a:f2:e2:41:fa:40:
                    54:6f:8d:70:91:3d:8a:c0:e8:ee:82:77:a1:02:46:
                    8a:0a:62:cd:e7:ed:50:1e:65:41:83:15:46:85:d4:
                    dd:dd:73:d3:ba:85:42:01:16:57:68:2f:6b:64:b9:
                    72:08:11:2d:3a:dc:04:0e:7d:d1:69:7c:73:fe:fe:
                    ac:21:01:62:3a:8b:ac:95:e4:86:bb:0e:f3:ad:20:
                    14:0f:17:0e:9d:14:4c:ff:9a:89:56:d8:42:2c:72:
                    7a:6b:33:0c:42:1d:be:65:73:1e:59:f4:f1:b4:02:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C0:6E:D3:02:9C:67:0F:BF:72:A9:AA:D5:81:B5:5F:BB:AB:87:C8
            X509v3 Authority Key Identifier:
                keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:25:05:c0:51:f2:f5:8d:66:07:f2:f9:9f:9d:6d:47:3a:90:
         77:16:c6:db:62:97:5f:2b:92:3d:32:ee:da:e7:b2:d5:92:32:
         22:19:a1:eb:88:30:05:00:6a:0e:59:c4:70:3e:3a:3e:b1:7f:
         a8:50:ca:2b:59:77:77:29:29:08:07:72:e9:e4:49:f4:ed:8b:
         fd:53:c3:f1:1f:ce:14:7c:e8:ad:8e:e0:43:ae:25:b0:97:b8:
         ab:37:b9:34:66:2f:a1:92:f1:86:8e:31:7a:f7:7c:30:c4:0e:
         13:1b:8b:23:01:da:b4:81:70:b1:8c:2f:c8:d2:39:9b:e0:e2:
         70:0a:7a:ad:64:f2:e4:29:9c:0b:d7:04:15:ea:d3:54:c9:26:
         ea:ba:3b:38:73:ea:5d:95:eb:0b:0c:ee:68:b6:04:29:2c:24:
         f6:08:4f:33:66:a5:50:5d:89:e1:75:a6:db:7b:a2:a1:40:73:
         78:2a:67:29:06:92:c3:fc:8f:7f:b2:c7:bb:42:7f:c3:bd:28:
         8e:33:09:91:a5:fb:2b:51:38:18:e9:7f:42:44:8f:b3:c7:d9:
         c3:82:96:79:c4:01:db:ed:e6:d6:1b:e9:a5:f3:87:2f:b2:a4:
         38:2a:d1:75:1c:c2:a1:5a:2b:56:61:af:2e:b0:b0:c3:19:72:
         44:73:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----