Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
File:                     nszH3a4R-I4QvSCGbhvW5ldWl-M.mft (raw, json)
Hash identifier:          c/uCPaxGQxp63fz4PvSdFY43Pbp7Zqr0+eqGxkfzjFE=
Subject key identifier:   35:11:67:75:A8:79:02:38:35:00:95:B0:03:C1:5D:4C:D9:13:F3:92
Authority key identifier: 9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3
Certificate issuer:       /CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
Certificate serial:       01962ECFE21CFCF83C0C79009283D91CA15D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft
Manifest number:          0263
Signing time:             Sun 13 Apr 2025 11:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:37 +0000
Files and hashes:         1: nszH3a4R-I4QvSCGbhvW5ldWl-M.crl (hash: 7Tz/LdgWLws1SRTuRLSKSjI4HWERMgzNfWdVWVHMSY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e2:1c:fc:f8:3c:0c:79:00:92:83:d9:1c:a1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eccc7ddae11f88e10bd20866e1bd6e6575697e3
        Validity
            Not Before: Apr 13 11:01:37 2025 GMT
            Not After : Apr 14 11:01:37 2025 GMT
        Subject: CN=35116775a8790238350095b003c15d4cd913f392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:ca:22:b7:a7:d7:e8:54:31:69:1c:1d:59:
                    fb:bd:22:45:91:f8:c2:45:d8:d7:48:ee:9d:a6:58:
                    8f:83:c7:07:96:d7:72:75:7f:ff:f4:98:90:cb:70:
                    e4:e3:77:12:ae:41:e2:53:b6:be:ed:e5:b0:a3:4f:
                    9f:38:f9:8f:29:d1:b9:b1:4c:cd:e9:f3:bc:fa:8f:
                    19:69:85:30:e7:a5:81:c3:bb:44:ee:05:23:d1:c4:
                    8b:9c:a2:9e:8f:4b:2a:6a:95:d4:8b:d0:94:d6:69:
                    4c:1d:54:6d:e6:1d:42:cb:78:0a:ca:f3:c4:0b:d1:
                    4d:cd:1e:ef:4a:49:dd:a1:fc:35:b7:6e:f2:9e:9d:
                    b3:07:03:93:36:37:2e:ea:b9:94:48:82:18:99:ae:
                    40:51:9a:d8:6f:2f:b0:c8:b5:73:93:ef:62:09:4a:
                    f7:74:ec:6a:db:f3:37:1b:63:50:fc:35:26:fa:3b:
                    0f:19:6e:ad:c1:60:c6:bb:ce:0b:6e:62:04:4d:84:
                    10:e2:54:bc:8d:1d:2c:22:58:cd:e3:ab:5b:a6:c6:
                    57:d0:e4:ee:9c:b8:6f:2a:2e:f8:bc:23:3c:53:b8:
                    96:09:67:c6:14:b0:52:2c:ba:55:b2:3d:cb:8f:89:
                    b8:c6:e2:67:88:29:1e:30:a9:b3:de:f7:20:1c:e2:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:11:67:75:A8:79:02:38:35:00:95:B0:03:C1:5D:4C:D9:13:F3:92
            X509v3 Authority Key Identifier:
                keyid:9E:CC:C7:DD:AE:11:F8:8E:10:BD:20:86:6E:1B:D6:E6:57:56:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nszH3a4R-I4QvSCGbhvW5ldWl-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eb4dfe-0384-4831-b3ad-e672b3190687/1/nszH3a4R-I4QvSCGbhvW5ldWl-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f5:42:f5:a6:db:bf:d0:81:f7:80:69:9d:f4:f2:aa:ad:f0:
         64:37:50:fa:66:47:6d:51:89:2e:28:8c:bc:10:56:80:f5:c1:
         a7:2a:26:c3:ad:b5:21:7d:f6:3d:25:e0:21:ef:04:e4:b4:66:
         07:85:2f:b8:10:bd:50:ae:55:23:1a:74:2e:3e:49:71:90:21:
         6d:29:13:ac:95:9a:bf:ef:24:34:76:84:88:87:30:98:eb:90:
         2f:49:08:55:4f:ef:e4:8f:59:22:81:a3:ec:09:7c:16:cd:4c:
         07:5a:5f:85:97:d7:bf:3f:c2:a1:dd:62:01:9c:1a:f1:63:bc:
         e5:76:43:c9:bd:76:74:51:25:ce:92:a3:53:75:06:6e:b4:9d:
         03:8c:bf:22:bf:65:e9:80:cc:55:e1:39:67:5d:e6:20:85:80:
         e3:61:47:70:60:54:3a:cd:fd:7e:d1:9f:49:35:9d:dd:d2:ae:
         86:a4:5b:3d:0b:45:1c:ef:30:4b:23:2f:c8:b4:97:66:4f:0c:
         c5:7d:e2:ff:1c:a4:83:7f:48:7b:3e:d9:9a:e6:4c:9c:4a:32:
         02:36:92:da:1d:2e:25:ec:fb:80:f9:2b:2e:ac:7d:2b:82:c9:
         4a:9b:be:8c:fb:12:3c:d7:1e:b3:47:9f:14:1c:ad:cf:46:0e:
         65:e3:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----