Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
File:                     Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft (raw, json)
Hash identifier:          UgpMRXludgCVM6zW8EF7/5881dthNR+q1aXkJyBKUpw=
Subject key identifier:   AA:91:8A:0E:BE:B9:03:FA:DA:B6:90:6F:C8:C2:7B:6E:E4:DB:D9:FB
Authority key identifier: 36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3
Certificate issuer:       /CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
Certificate serial:       01962F065E2B5C4379E67E751DECB695B3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:08 +0000
Files and hashes:         1: Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl (hash: 5rwt6L9i0lkxFJ+5/NN4Be65SRsUTuQblfgHOmIUK6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5e:2b:5c:43:79:e6:7e:75:1d:ec:b6:95:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa64c2bbaa725ac26a4ff6180266faed208a3
        Validity
            Not Before: Apr 13 12:01:08 2025 GMT
            Not After : Apr 14 12:01:08 2025 GMT
        Subject: CN=aa918a0ebeb903fadab6906fc8c27b6ee4dbd9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:6e:59:53:90:39:35:a8:50:b9:f6:66:2f:
                    ef:a5:2f:0e:7a:59:4d:48:4e:10:97:29:5b:2c:4a:
                    f3:8d:c4:ac:e7:f7:e7:fa:05:64:c3:ee:0b:0a:7c:
                    b3:59:cf:1c:61:fb:c0:dd:65:6a:42:c4:30:e0:ea:
                    c8:f9:33:47:a3:62:be:80:36:28:41:dc:70:67:47:
                    47:bf:30:22:f8:86:81:03:01:03:43:ab:47:29:e0:
                    62:af:3b:9a:d1:65:33:4d:91:53:ed:fe:5d:44:e4:
                    c3:1e:43:c1:48:3a:0f:20:f3:a0:3c:b4:b7:f3:ba:
                    9b:83:32:e5:4f:ce:a2:4b:57:a7:a0:06:8d:00:0d:
                    b4:c9:ba:26:4d:fe:7f:33:07:4d:d4:e2:3f:0f:51:
                    cf:a0:9d:87:ce:9e:8f:40:59:c5:2e:50:b1:0f:a2:
                    91:79:8a:50:0c:68:46:2a:24:7f:80:a9:dd:8f:b7:
                    8f:e8:4d:13:6b:b7:aa:40:61:0e:7d:b8:5a:45:a0:
                    a7:28:46:15:6d:5e:d6:f3:4d:f4:e6:e7:e2:97:6b:
                    80:47:fd:8e:68:aa:bf:09:99:64:fc:2d:be:a9:3d:
                    1d:5c:be:7b:cf:a8:c8:c7:d1:73:b0:8a:48:9d:bd:
                    84:e0:65:f8:c2:57:51:d1:b8:66:2a:e1:21:a5:ee:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:91:8A:0E:BE:B9:03:FA:DA:B6:90:6F:C8:C2:7B:6E:E4:DB:D9:FB
            X509v3 Authority Key Identifier:
                keyid:36:6F:A6:4C:2B:BA:A7:25:AC:26:A4:FF:61:80:26:6F:AE:D2:08:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-mTCu6pyWsJqT_YYAmb67SCKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/73e51e-9894-4e78-bc22-8dd821fac6c8/1/Nm-mTCu6pyWsJqT_YYAmb67SCKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2d:e9:09:4f:fc:bd:cc:df:2e:74:9d:d1:60:87:5c:a4:24:
         7c:eb:2f:17:c0:af:d2:00:65:c0:31:7d:db:8b:4c:84:a8:0c:
         7a:0a:9e:68:26:d8:d8:33:31:b3:d3:44:99:b3:a5:e6:bd:96:
         1a:9c:97:93:d3:81:a9:7f:64:08:bc:6e:14:f7:e2:d9:92:eb:
         6e:a0:76:bd:34:65:cc:44:6a:af:89:94:31:8a:fa:88:37:7e:
         2f:24:9d:62:88:c3:6e:7d:76:77:29:ee:8d:49:10:ba:bc:12:
         b5:f3:0d:d9:0f:9e:82:24:54:02:2d:cc:89:ac:90:a8:7e:69:
         64:00:c6:43:9e:8e:0c:73:72:e7:81:ab:35:c4:3b:5e:ef:b4:
         a4:61:00:bb:07:35:4c:17:e6:c9:a4:03:0f:ca:ff:f3:f5:95:
         7e:d9:5b:54:ce:47:a1:05:e8:df:a2:7e:ef:2d:73:6c:a2:ea:
         9a:6a:ac:33:a4:a3:f7:9a:68:18:9c:09:a7:90:a0:55:44:a0:
         5a:77:8a:e3:4c:85:f9:d2:4f:be:7d:5c:ff:09:9e:72:d4:8e:
         f4:d0:65:06:b9:45:95:33:e0:f0:1e:ac:8d:e7:70:bc:20:a9:
         8a:88:33:9b:b7:31:80:46:9b:d2:6a:e3:0a:0b:c7:31:fc:18:
         8c:d5:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----