Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File:                     nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier:          /4IiiQ4oG8rm9Rg/QX/Mgrt3FqQx7EdNIw9n34VHNjc=
Subject key identifier:   38:6D:FC:26:DE:C8:DA:71:FA:ED:6D:CD:EC:57:E2:5C:49:B6:6D:F4
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer:       /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial:       01962F3D922FFD332699A82B657B1061F1A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number:          0F92
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: Qov2CBhE/+Fp6Iw0gbAjQEsueFWq9sDToFHkWVVhjoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:2f:fd:33:26:99:a8:2b:65:7b:10:61:f1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=386dfc26dec8da71faed6dcdec57e25c49b66df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:f5:f4:30:3b:cf:e9:5c:13:2e:66:ce:e6:
                    d7:ef:62:66:41:0a:e6:5b:9a:36:86:a5:3e:50:54:
                    1d:17:c9:bf:83:f2:e0:77:58:78:c2:45:96:ef:ca:
                    0c:08:59:30:a4:04:3a:24:52:98:1e:cb:73:88:cc:
                    05:2e:b9:4a:50:c2:28:01:e6:ed:8a:dd:f6:bf:90:
                    11:ae:d7:5a:2e:55:00:6a:90:42:dd:08:9b:4a:5e:
                    39:a7:d9:21:c0:a5:1e:56:76:c1:74:4c:e0:98:24:
                    86:83:2a:0d:0c:8e:e7:53:86:60:71:28:ab:c9:1e:
                    38:c9:9c:9f:29:08:fa:a6:25:1f:fe:44:e0:b6:97:
                    8d:d1:6e:b2:23:f6:6e:43:8d:9e:e9:01:c6:bb:13:
                    77:6f:cf:7a:e8:26:58:73:c2:57:9f:13:48:f2:07:
                    e9:95:62:3e:f9:84:f6:6f:22:bc:e4:62:07:1d:7f:
                    36:c8:81:4e:f9:31:3e:66:82:df:c3:d8:56:30:8b:
                    91:1c:97:74:b5:b5:d3:98:98:68:81:b2:57:2a:08:
                    91:98:be:e5:b7:51:3d:c9:6f:ba:1b:46:30:5c:29:
                    7f:ed:4d:20:ee:a0:55:fc:57:ff:a4:5d:d9:05:9c:
                    4e:60:8c:d8:2e:f7:3b:87:27:7b:07:67:64:73:41:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:FC:26:DE:C8:DA:71:FA:ED:6D:CD:EC:57:E2:5C:49:B6:6D:F4
            X509v3 Authority Key Identifier:
                keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fb:dd:49:d1:6d:68:5f:88:c0:91:9f:17:b6:47:39:d7:5d:
         3f:de:ad:55:67:38:90:b8:23:82:55:c8:e5:20:9a:59:54:d4:
         73:c6:3f:f2:c2:cb:ac:d1:6d:ca:e2:92:20:ab:1d:58:76:26:
         67:62:dd:c9:61:bc:77:8a:79:3d:fb:b2:7b:b1:0f:93:e2:74:
         8e:19:1a:73:d4:46:a3:42:a1:a3:f6:b5:2b:9c:ad:df:dd:54:
         b5:a1:6d:66:1b:0d:53:ca:25:2f:12:f5:09:c2:10:50:56:d2:
         3d:9d:74:1b:50:dd:a2:49:a7:7e:78:b0:76:a5:53:62:9b:d6:
         47:a8:ba:51:77:2d:3c:0c:c7:6b:e0:31:d7:f9:4a:3d:ec:f4:
         9d:73:af:05:bf:f8:b8:d2:5a:49:14:41:00:4a:b3:fa:20:89:
         7c:5e:30:15:3b:50:82:07:04:82:53:61:e6:93:e4:e8:e5:42:
         e4:7a:4b:b1:b1:40:7d:dd:a6:17:46:68:0e:89:64:55:a4:93:
         c1:70:16:00:22:a8:52:90:a1:78:05:da:c0:11:64:9d:3c:6f:
         25:f1:31:8b:70:76:fa:2d:63:5e:d2:70:9e:7f:22:a0:0a:60:
         1f:70:43:11:07:63:45:cf:30:1e:9b:99:f2:4f:73:d0:c6:fb:
         46:3a:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----