Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File:                     n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier:          2FDbYALKpAu0btPogQHYM5Lb+NNkITMq7ne8Srf00fg=
Subject key identifier:   56:27:C4:49:B2:7F:1C:30:E3:ED:1E:6F:6B:E1:05:00:B9:89:A6:11
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer:       /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial:       01962E98D40C2E1CDE56DA819203525333E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number:          0469
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: xNSApiuEExrbAlMn0lTqE+HtrjgE7MOvsOq2dZoevho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d4:0c:2e:1c:de:56:da:81:92:03:52:53:33:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=5627c449b27f1c30e3ed1e6f6be10500b989a611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a4:ce:6e:51:d7:7d:75:fb:ba:c3:c7:50:8e:
                    41:dc:0d:5c:e6:dc:43:f7:45:d8:ac:b1:45:27:31:
                    9d:63:eb:8f:6e:e1:f8:f4:ec:35:09:b3:b9:61:4f:
                    f6:e9:8f:16:98:3b:27:40:d7:d5:09:25:1c:9f:c7:
                    2a:88:48:9d:81:d4:f3:97:29:d2:f1:91:d6:84:19:
                    be:76:c5:4b:34:81:ba:d3:cd:e4:89:c3:15:5d:1b:
                    65:a2:9b:78:9e:72:50:8b:43:23:77:fb:56:06:e5:
                    6d:5e:bf:ac:ec:27:66:a3:29:02:7d:00:93:99:1d:
                    71:52:38:51:e0:82:51:88:23:49:d6:0c:f6:32:09:
                    ba:19:e8:04:a7:c8:06:04:04:d6:ed:1d:a5:20:ad:
                    f1:bb:47:a5:12:7a:e6:10:d1:54:32:60:18:aa:50:
                    fe:84:ef:96:81:a5:ba:70:81:62:af:95:33:f8:ce:
                    9b:ac:cb:3b:f9:2c:88:56:92:3e:d5:06:fc:b6:f6:
                    43:b7:24:e2:b1:f8:81:23:60:48:8b:31:76:a8:a0:
                    da:7a:76:db:aa:c0:b5:49:49:31:0c:f4:aa:7a:ad:
                    82:61:1a:44:02:64:8e:16:ea:8f:bf:b5:38:32:b1:
                    f5:c4:c5:95:fd:26:c3:81:c9:14:e7:30:9c:ff:a9:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:27:C4:49:B2:7F:1C:30:E3:ED:1E:6F:6B:E1:05:00:B9:89:A6:11
            X509v3 Authority Key Identifier:
                keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fc:de:29:f4:29:e1:39:1c:a2:2d:a4:fb:48:3a:59:f4:bf:
         0d:e4:36:e2:82:71:d2:27:1a:01:25:a4:94:39:15:e0:21:45:
         29:07:16:ac:b3:b4:0e:14:2f:f4:10:c3:5e:77:df:6c:b0:46:
         8f:39:7b:07:22:ec:26:aa:5d:b6:16:ad:1f:2a:5c:5a:0d:20:
         d7:a6:39:47:aa:08:42:c9:9e:a8:87:3f:ca:fa:f3:b7:8f:8c:
         0d:75:a0:56:78:18:be:f1:f1:03:cc:aa:ff:4e:98:0d:22:3f:
         0f:45:df:1a:c8:f5:e8:5e:85:c3:f5:07:94:22:90:04:f6:bf:
         10:1b:8d:9a:87:81:00:0e:92:ff:83:8e:77:1f:04:38:e7:af:
         9d:10:9c:a7:dc:5e:28:d8:c8:cb:a7:ba:63:d2:29:31:77:d1:
         af:d0:4d:d3:a4:85:45:4f:d3:ef:31:24:fa:a4:ce:3b:a6:7f:
         1f:6c:c1:bb:43:0b:51:c8:fb:94:83:b3:7b:41:bb:f8:ae:b6:
         e7:bc:0a:15:0f:06:1a:f3:1f:87:0c:05:ed:43:42:e0:8c:13:
         39:f4:fe:f0:13:e4:e1:c3:41:49:29:d1:0c:18:ad:27:64:c6:
         86:5e:b4:a5:52:7a:b2:86:32:1c:0d:e3:95:0f:25:6f:be:6f:
         de:89:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----