Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File:                     npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier:          BDSa0Q4G1YtFzMWaqvj3KY0k5yzYnPT7AuMslZ1cBk8=
Subject key identifier:   89:EA:74:2C:CF:8E:54:7B:2E:A1:F7:71:2E:57:DD:BE:3C:96:DA:CF
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer:       /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial:       01962F070FAF21CF8C33EB7015659B644E7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number:          029C
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: zpfrd07Wz2LOr2YlC8a3zlRd7FqAVLmMQhnaWm/NgY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0f:af:21:cf:8c:33:eb:70:15:65:9b:64:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=89ea742ccf8e547b2ea1f7712e57ddbe3c96dacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:6e:65:e6:3a:38:d0:1f:e0:7b:f6:eb:27:
                    63:f9:0a:dd:27:95:b1:59:f8:07:f5:11:9c:71:4d:
                    9d:05:1f:8a:1e:09:16:ec:15:4c:7d:ad:80:4b:1d:
                    04:fc:9c:e7:0d:b6:ec:78:e4:a0:d5:30:c0:1c:0a:
                    e5:51:23:4f:9b:6f:fd:ef:07:79:5a:60:60:f9:a4:
                    d4:f6:4a:d7:c8:ee:57:a3:28:56:95:ce:77:34:0a:
                    00:fb:3b:f8:e8:a4:64:1b:0b:a9:2b:8b:9c:12:03:
                    43:a4:53:91:13:0f:70:27:50:84:9c:e1:6e:0e:fb:
                    99:7f:2e:3a:49:4e:a6:7d:39:f5:49:da:e7:8b:ed:
                    08:5e:40:d6:84:2a:1b:96:bc:39:23:a7:65:00:1f:
                    48:32:21:f0:34:30:8a:04:5a:c5:e9:7c:03:6b:61:
                    d3:fa:26:0e:da:84:85:6f:65:e9:df:c4:2a:f2:30:
                    f5:56:d0:6c:72:2b:2c:84:49:d7:6d:34:5b:13:98:
                    86:48:f8:9f:d4:3f:2b:db:69:15:9a:db:08:31:69:
                    56:b3:4f:1f:c0:e3:36:ad:18:dc:12:71:9c:b9:3d:
                    d5:51:9b:2d:5d:61:54:9d:d7:25:e4:96:5e:ff:5b:
                    05:83:f0:71:d4:37:d6:7e:c0:e0:ab:ff:42:5d:07:
                    c2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EA:74:2C:CF:8E:54:7B:2E:A1:F7:71:2E:57:DD:BE:3C:96:DA:CF
            X509v3 Authority Key Identifier:
                keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:dc:69:4a:47:b7:b8:52:96:ab:99:a5:2f:45:5f:15:39:09:
         df:63:9f:3e:84:02:7b:b7:5d:7d:ed:94:09:4c:83:ff:59:90:
         09:46:a9:b1:a1:f3:76:f4:0b:58:fc:6f:4e:71:a5:27:40:1d:
         d8:9d:08:3a:66:58:08:dc:67:59:29:57:78:59:b7:24:e9:3c:
         56:08:d3:be:8b:ca:22:ac:dc:90:6a:b1:2e:ce:2b:5f:e5:c9:
         ed:09:58:30:54:65:b6:e6:11:bd:d3:c0:48:5f:f0:74:c8:f7:
         11:b4:45:6b:84:2d:24:e1:30:3d:3f:4b:58:01:33:b0:6f:bd:
         bf:f5:52:23:98:3c:d9:19:d1:2d:37:d3:6c:23:86:dc:06:51:
         81:41:76:eb:d7:66:a7:17:c2:0e:98:55:2f:89:bd:2c:20:df:
         5c:05:8d:a3:fc:ee:3e:04:b8:34:c5:87:5d:4e:96:ce:87:b9:
         3d:ce:63:43:c4:c9:7a:f8:f1:33:db:06:96:58:0c:4d:93:a4:
         16:5c:65:ff:21:53:6a:c4:ee:c1:d0:d5:59:53:1e:04:13:ef:
         49:54:b2:98:af:bd:29:84:c8:7b:88:8b:63:a9:74:17:0d:7f:
         88:1e:63:37:44:c8:ba:36:9c:2b:f0:33:a1:fe:05:42:56:7c:
         30:00:3b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBw+vIc+MM+twFWWbZE5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOWNkN2E5Yjg5ZjRlMDU2OGJkNGEwYjZjMmMxMWNkMTdl
N2YwZTEwHhcNMjUwNDEzMTIwMTUzWhcNMjUwNDE0MTIwMTUzWjAzMTEwLwYDVQQD
Eyg4OWVhNzQyY2NmOGU1NDdiMmVhMWY3NzEyZTU3ZGRiZTNjOTZkYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrJuZeY6ONAf4Hv26ydj+QrdJ5Wx
WfgH9RGccU2dBR+KHgkW7BVMfa2ASx0E/JznDbbseOSg1TDAHArlUSNPm2/97wd5
WmBg+aTU9krXyO5XoyhWlc53NAoA+zv46KRkGwupK4ucEgNDpFOREw9wJ1CEnOFu
DvuZfy46SU6mfTn1Sdrni+0IXkDWhCoblrw5I6dlAB9IMiHwNDCKBFrF6XwDa2HT
+iYO2oSFb2Xp38Qq8jD1VtBscisshEnXbTRbE5iGSPif1D8r22kVmtsIMWlWs08f
wOM2rRjcEnGcuT3VUZstXWFUndcl5JZe/1sFg/Bx1DfWfsDgq/9CXQfCQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInqdCzPjlR7LqH3cS5X3b48ltrPMB8GA1UdIwQY
MBaAFJ6c16m4n04FaL1KC2wsEc0X5/DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnB6WHFiaWZUZ1ZvdlVvTGJDd1J6UmZuOE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80ZmQ3MzktMWQwZC00NzUzLWE4NDUt
OTA3Nzk2ZTcwNWRhLzEvbnB6WHFiaWZUZ1ZvdlVvTGJDd1J6UmZuOE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80ZmQ3MzktMWQwZC00NzUzLWE4NDUtOTA3Nzk2ZTcwNWRh
LzEvbnB6WHFiaWZUZ1ZvdlVvTGJDd1J6UmZuOE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9xpSke3
uFKWq5mlL0VfFTkJ32OfPoQCe7ddfe2UCUyD/1mQCUapsaHzdvQLWPxvTnGlJ0Ad
2J0IOmZYCNxnWSlXeFm3JOk8VgjTvovKIqzckGqxLs4rX+XJ7QlYMFRltuYRvdPA
SF/wdMj3EbRFa4QtJOEwPT9LWAEzsG+9v/VSI5g82RnRLTfTbCOG3AZRgUF269dm
pxfCDphVL4m9LCDfXAWNo/zuPgS4NMWHXU6Wzoe5Pc5jQ8TJevjxM9sGllgMTZOk
Flxl/yFTasTuwdDVWVMeBBPvSVSymK+9KYTIe4iLY6l0Fw1/iB5jN0TIujacK/Az
of4FQlZ8MAA7hw==
-----END CERTIFICATE-----