Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/nTYn2XZlFFeJQkIAUL-DqLEpFm4.mft
File:                     nTYn2XZlFFeJQkIAUL-DqLEpFm4.mft (raw, json)
Hash identifier:          rxZde5/Aq8QndX/a4J8miczq706N4nMh8W6Bik8QNjw=
Subject key identifier:   1F:00:AD:2C:76:2F:14:8F:9B:74:08:D3:9C:A9:E9:F6:07:2D:96:5E
Authority key identifier: 9D:36:27:D9:76:65:14:57:89:42:42:00:50:BF:83:A8:B1:29:16:6E
Certificate issuer:       /CN=9d3627d9766514578942420050bf83a8b129166e
Certificate serial:       01962DF415BD96BBDF9A6036CDF2E35DE781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTYn2XZlFFeJQkIAUL-DqLEpFm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/nTYn2XZlFFeJQkIAUL-DqLEpFm4.mft
Manifest number:          117A
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: nTYn2XZlFFeJQkIAUL-DqLEpFm4.crl (hash: lV6WIdKFa7sKmwhaCl9i5YNe5/RgYkZ0OavUxpdOWWs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:bd:96:bb:df:9a:60:36:cd:f2:e3:5d:e7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3627d9766514578942420050bf83a8b129166e
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=1f00ad2c762f148f9b7408d39ca9e9f6072d965e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:dc:50:0e:64:52:cd:67:a4:73:33:a0:b8:
                    05:2a:74:59:f4:cf:38:b6:87:29:39:a4:89:47:7d:
                    b9:78:8a:df:4c:64:66:74:2a:4f:f1:d7:5c:3e:d1:
                    a7:7d:f3:2e:36:70:19:ca:32:64:eb:17:a8:cd:2c:
                    1f:82:5a:1a:05:db:7b:e8:94:66:fa:d4:83:d2:8d:
                    fd:8c:71:3c:ac:12:e4:c2:0a:c9:30:a5:12:1d:f9:
                    1f:33:6f:d0:9f:a6:68:fa:8a:32:eb:94:28:c0:ad:
                    b6:8e:cd:67:3c:ca:a5:7c:fd:4d:f8:47:07:40:02:
                    5a:97:66:01:01:77:de:6b:14:a2:e6:20:41:a8:69:
                    fe:52:86:57:fc:85:9b:67:61:71:93:24:c0:aa:c0:
                    fa:4e:2c:3e:16:0b:e2:d6:09:33:33:e9:62:4e:18:
                    6a:19:5f:0f:30:d6:13:38:04:fa:4e:77:77:85:1e:
                    26:9e:f7:59:da:0e:da:99:8f:4e:af:ab:c6:9f:fe:
                    b8:a1:0e:2d:ee:66:2b:dd:02:69:dd:0e:0f:75:bc:
                    6b:2e:47:f5:fd:06:8c:98:da:b8:88:92:83:5a:ef:
                    7e:cd:ec:2d:a2:24:f8:52:e0:ed:ca:49:4b:c7:ec:
                    74:6e:10:1d:cb:83:b8:78:05:8a:f5:b3:90:36:0a:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:AD:2C:76:2F:14:8F:9B:74:08:D3:9C:A9:E9:F6:07:2D:96:5E
            X509v3 Authority Key Identifier:
                keyid:9D:36:27:D9:76:65:14:57:89:42:42:00:50:BF:83:A8:B1:29:16:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTYn2XZlFFeJQkIAUL-DqLEpFm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/nTYn2XZlFFeJQkIAUL-DqLEpFm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38b8ba-df6c-486d-b6cd-1d5dd2258c4e/1/nTYn2XZlFFeJQkIAUL-DqLEpFm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:dd:0e:22:5b:b9:57:b0:04:11:f3:01:21:f4:88:2c:27:
         51:b8:5d:f6:e3:bf:e8:60:f3:44:12:4e:bc:b9:72:bb:25:38:
         b5:a2:f4:43:db:42:86:7e:1a:b3:e5:99:c0:31:de:6e:97:0a:
         37:a5:4c:d2:54:f3:a2:f3:cb:d3:1e:7e:e5:69:5b:ef:ab:63:
         1e:10:f1:3d:11:cd:9c:3c:4c:ec:93:bb:37:e9:6e:b1:20:c6:
         71:21:7c:05:1b:35:55:5d:9f:7c:e3:d9:ee:16:74:98:a2:5b:
         a8:cd:b2:36:02:97:fa:06:f1:e0:01:c7:ca:35:93:43:08:48:
         24:d5:c4:8b:db:69:e2:b7:28:51:ec:cd:a0:7d:ae:a0:38:12:
         51:16:5e:a9:92:6b:92:28:b1:69:2d:d7:29:c7:99:0b:99:92:
         83:e5:d4:9b:ff:04:ac:0c:70:16:a9:86:c5:20:2d:72:f8:ea:
         50:5b:6e:7d:cd:f7:0e:4a:b1:1c:6e:db:6a:d2:17:54:39:95:
         b7:6c:fd:a2:ba:7e:31:93:8e:56:af:75:c2:cf:59:0c:73:5b:
         98:76:cf:4e:bd:a0:20:fd:12:a8:df:29:d5:10:48:f2:e6:61:
         ff:f1:82:b6:46:cb:c0:e5:e6:92:a5:55:94:e3:42:a3:c3:04:
         b3:a6:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----