Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
File:                     NkITiw7v_lajLMuqWNb_5u3D8p4.mft (raw, json)
Hash identifier:          bpE1Q/08EzSTRjb1P0R9OoI3JNrfN1LjCZwxOehWIrI=
Subject key identifier:   15:56:68:36:BC:3C:11:5D:BF:77:F9:63:CF:1A:C9:B7:E1:2A:7C:B1
Authority key identifier: 36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E
Certificate issuer:       /CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
Certificate serial:       01962E99B5F3F53C08FB4B933FDAFD09B2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft
Manifest number:          03EE
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: NkITiw7v_lajLMuqWNb_5u3D8p4.crl (hash: 1cO/X3AXmrbWxnngikC8cFsDWo2nQ2zRxMp0yfzFUJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b5:f3:f5:3c:08:fb:4b:93:3f:da:fd:09:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3642138b0eeffe56a32ccbaa58d6ffe6edc3f29e
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=15566836bc3c115dbf77f963cf1ac9b7e12a7cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:74:12:33:f4:03:df:44:d9:29:38:a1:f5:
                    49:4f:9c:0c:e9:22:e1:f6:38:7a:68:97:71:68:98:
                    be:0a:cb:b3:e1:72:e8:1d:8c:d1:12:1e:fc:12:32:
                    94:dd:5e:de:02:01:9e:01:3c:6e:25:69:06:f7:84:
                    a6:65:0f:e1:2b:97:04:c6:b7:c5:90:90:47:7f:e7:
                    4d:4a:e2:e6:d1:c9:6c:8b:a0:34:7f:78:cd:ef:b4:
                    46:7c:92:7d:af:42:e1:d6:69:8d:ad:80:59:ef:dc:
                    f7:78:da:f2:75:71:5a:67:07:de:97:19:41:8c:7a:
                    45:d3:e6:9f:e5:eb:41:59:ac:39:58:39:69:07:14:
                    6d:25:17:d3:c8:96:d6:33:67:c2:00:9b:c8:53:f5:
                    b1:9e:25:82:21:d7:06:90:da:df:ce:a3:0b:be:68:
                    f1:51:b9:37:0a:28:4a:f8:45:2b:d1:2e:36:91:f6:
                    6f:86:aa:4e:63:e2:51:ae:90:32:b1:34:26:ac:18:
                    cb:69:c3:76:4b:9c:e5:39:b8:41:51:aa:a1:df:bb:
                    2d:0d:cd:73:09:47:1e:fc:9f:7c:dc:0d:87:c6:55:
                    22:04:ee:55:57:0b:51:7c:b7:36:4a:0b:9c:be:92:
                    8a:8a:b4:24:95:71:71:c8:cf:a0:12:28:4c:a7:5c:
                    94:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:56:68:36:BC:3C:11:5D:BF:77:F9:63:CF:1A:C9:B7:E1:2A:7C:B1
            X509v3 Authority Key Identifier:
                keyid:36:42:13:8B:0E:EF:FE:56:A3:2C:CB:AA:58:D6:FF:E6:ED:C3:F2:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkITiw7v_lajLMuqWNb_5u3D8p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4b5cf1-4320-44c2-9358-e07f959356a1/1/NkITiw7v_lajLMuqWNb_5u3D8p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:71:ac:93:83:15:04:b4:11:d4:8b:73:e0:21:91:2f:68:
         29:50:76:2d:2f:9b:4d:28:66:55:09:99:b0:1e:03:b3:0b:e1:
         eb:df:7a:a0:0b:50:a9:14:5b:3f:6a:99:ca:8b:2b:8c:51:98:
         b8:a8:f0:ec:16:26:00:c0:86:77:2b:0a:71:5b:11:58:d9:c8:
         76:39:cb:7e:e5:b6:de:88:7a:da:6b:32:83:c2:2d:3f:5e:cd:
         30:66:aa:ef:51:9f:5c:96:17:2e:9f:7e:53:7c:e6:10:98:89:
         e2:2b:84:c6:a6:dc:7c:85:8b:b9:db:69:77:b9:03:dd:4a:cb:
         0b:84:e6:29:90:e5:f5:f0:ff:13:17:43:56:2b:be:4b:3d:1b:
         ae:84:2d:60:e5:52:a1:f9:a8:89:bf:56:5d:f4:42:48:dd:f4:
         93:82:45:58:86:04:d0:f8:cc:52:1e:f8:5b:95:48:b1:32:0f:
         78:7e:7f:be:94:57:fd:55:49:f3:87:26:2d:49:a5:29:d0:3a:
         7a:a5:fa:fd:07:31:2c:9e:95:5d:ad:39:7e:3b:ea:76:f3:d4:
         94:b6:bb:f8:c4:2e:73:cf:16:69:72:50:14:6c:76:c1:50:8f:
         f6:63:8b:48:98:ac:d7:01:9e:1c:6a:50:9e:80:1e:62:e3:88:
         f2:63:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----