Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
File:                     nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft (raw, json)
Hash identifier:          dlBF734+N6OAne6f3G703NZ/lZ3GAT3RYBfu6ODx1vo=
Subject key identifier:   7F:D1:96:63:08:68:8A:77:8E:8E:C8:76:D2:2C:8D:8C:0D:ED:DC:13
Authority key identifier: 9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04
Certificate issuer:       /CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
Certificate serial:       01962F06972C895DCBCD48B3B19F54435072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl (hash: bKU3h3r3Od8cOZVp2OH1JKnFDQ1g6U2Cubr2beHGuV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:97:2c:89:5d:cb:cd:48:b3:b1:9f:54:43:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2c53ab612dd83cd116bb13c750d7e2b0d68904
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=7fd1966308688a778e8ec876d22c8d8c0deddc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8d:2d:40:1b:75:f5:55:41:30:46:92:1d:05:
                    0a:cf:23:e2:54:72:bf:05:95:a3:00:87:8b:5e:2a:
                    57:a0:06:85:43:8e:b2:c7:f4:f2:94:6f:44:b7:97:
                    23:d6:26:40:80:ac:81:3c:b0:18:e1:ca:8f:8f:11:
                    bb:23:ab:91:44:95:b7:35:02:3e:78:85:b7:ff:7f:
                    65:41:b2:83:1f:49:64:9b:8a:65:12:56:26:90:90:
                    73:04:4b:cf:9e:43:ec:5a:6f:02:92:db:66:d9:e0:
                    64:f3:f5:64:a3:57:b6:7d:c3:dd:91:25:43:df:b1:
                    05:fe:b4:7c:92:68:d5:fa:fb:9a:4c:ea:34:5d:04:
                    ca:27:e0:97:ee:4d:6f:33:00:b1:5d:20:fd:49:d0:
                    17:e1:87:40:68:a9:b0:07:6b:32:01:21:97:3e:a9:
                    39:9f:d8:81:ed:44:e8:50:06:ae:8e:04:54:97:f6:
                    51:63:dd:27:9e:09:06:2d:62:92:b4:49:87:b5:59:
                    42:36:bf:da:70:06:44:ea:72:74:96:7f:4d:2b:d3:
                    6b:9c:ba:9a:94:b8:29:48:50:0b:dd:91:02:b7:1b:
                    8c:5f:dc:a7:06:21:b6:16:77:0f:9f:99:8d:4b:0d:
                    6e:ea:62:27:fd:e9:c8:ee:ec:d6:d4:55:4d:af:80:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D1:96:63:08:68:8A:77:8E:8E:C8:76:D2:2C:8D:8C:0D:ED:DC:13
            X509v3 Authority Key Identifier:
                keyid:9E:2C:53:AB:61:2D:D8:3C:D1:16:BB:13:C7:50:D7:E2:B0:D6:89:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nixTq2Et2DzRFrsTx1DX4rDWiQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5e5f47-f617-4593-97cf-9a802959a248/1/nixTq2Et2DzRFrsTx1DX4rDWiQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ae:53:1b:4d:79:6e:25:55:c4:12:8f:89:4c:8c:8f:89:3e:
         c4:cf:93:5b:5e:79:d4:78:4b:b4:4f:7f:bd:60:ca:97:a2:8c:
         1f:2f:95:ca:5f:00:92:d1:d2:94:f7:b4:74:99:9e:32:9d:0e:
         d3:79:f6:e2:d5:05:f8:3f:73:f2:e9:28:9d:60:e7:68:02:c0:
         73:d8:f9:0f:c1:ff:26:fe:ce:10:f4:85:71:2f:12:f8:47:94:
         ba:57:d3:7c:2e:04:07:a8:c0:9f:0a:62:6e:08:a8:23:91:4c:
         df:46:e4:ae:30:82:ee:77:46:27:36:94:f4:24:ac:c8:64:1d:
         0e:06:ef:c1:d2:a5:13:7f:1d:85:41:50:10:4f:cc:40:c1:78:
         73:7e:1c:1a:1a:b0:b7:0c:0f:28:9d:aa:6c:82:b1:0b:27:8b:
         cb:6b:aa:42:3d:38:1d:70:32:84:1f:7d:ab:b0:b2:65:61:ca:
         27:1d:38:c1:ac:fa:42:52:96:1f:bd:78:7d:0c:d0:2c:e7:a6:
         0a:7d:d3:e4:70:c0:5b:97:f7:ed:f7:7f:99:0b:c9:38:5d:16:
         99:94:d0:93:d9:db:c9:e7:e6:5f:ed:b7:35:77:0d:3f:30:fe:
         94:69:74:01:bf:b1:bd:0d:0f:7c:fe:40:82:e0:26:5e:20:df:
         eb:22:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----