Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File:                     NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier:          LBV0q7PmQihQ6TG5YC4h6EUHBIUsnxLGQX7O6W8CQws=
Subject key identifier:   25:AB:B7:E7:C4:53:AF:3C:25:C4:5A:9C:F2:DE:88:98:C4:0E:C3:72
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer:       /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial:       01962F0646EEE78D66ECF880DF873656D69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number:          025C
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: 4fs1PhdfGSu8mLC/MZeeYyGbfPAPKgbwHk5cNPObb1I=)
                          2: x2Xaez7Ra9vjvF4FG3Er4hO4ovk.roa (hash: T67Ch/iuLueDDibfJIFSKnLQW9UiEIt+71JVmL/jUzg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:46:ee:e7:8d:66:ec:f8:80:df:87:36:56:d6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=25abb7e7c453af3c25c45a9cf2de8898c40ec372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:b2:12:d7:c1:01:d4:8f:bc:92:ca:66:a2:
                    14:48:3f:45:9a:cc:4a:b0:96:b7:6a:fd:51:9e:07:
                    9f:d8:f8:5c:66:0b:0b:df:cb:53:74:9f:f3:5b:1f:
                    b0:98:7b:3a:9b:8e:1d:f2:af:55:05:a6:80:05:4c:
                    bc:54:53:31:45:26:5c:88:7f:60:88:75:7a:2e:c4:
                    d6:c9:f5:de:17:97:a0:6e:63:d9:d0:61:c3:f2:24:
                    d6:9c:f6:2e:30:dd:38:b2:9c:ae:2c:39:f3:12:a7:
                    f7:18:c8:60:a9:8e:89:e0:3c:9c:58:89:a5:0e:24:
                    41:dc:93:9c:0f:5f:9f:06:b6:4f:c8:e9:60:5f:cf:
                    f4:c4:a7:59:49:84:b3:a7:8e:b9:a8:c2:1c:e0:c8:
                    75:fc:7f:0b:30:d4:f7:d3:e5:07:55:08:f7:e1:15:
                    60:dd:d2:1c:ff:64:d2:8f:36:51:3a:87:c3:3c:03:
                    93:39:31:dd:ec:06:cf:e2:da:24:d1:c3:ff:e7:1e:
                    63:e0:71:88:73:73:3b:d3:ae:c2:71:8a:4a:b9:c9:
                    d3:1e:c3:99:cf:4d:75:04:92:b3:30:6e:9b:db:da:
                    6a:1c:12:36:1d:88:59:00:d3:07:b2:f0:00:7c:7e:
                    8b:bb:4b:71:5b:10:34:9d:5d:a0:45:ed:a7:a5:98:
                    ee:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:B7:E7:C4:53:AF:3C:25:C4:5A:9C:F2:DE:88:98:C4:0E:C3:72
            X509v3 Authority Key Identifier:
                keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b6:6a:11:55:e7:1e:1e:cf:74:67:31:35:f1:75:6c:71:62:
         46:dd:6e:02:6d:05:36:58:09:e3:4b:70:91:e6:bf:5a:19:3e:
         b8:4e:d3:bc:a4:57:2c:8d:de:30:d2:eb:c1:6b:40:03:c1:eb:
         b2:cc:c6:79:81:a2:a3:2e:5f:1a:46:f8:67:b7:40:d1:f5:4d:
         20:45:f5:06:31:04:3e:1a:1e:97:e1:d2:99:bd:db:b5:62:dd:
         95:3f:2f:bd:ee:f7:33:de:28:a4:60:59:b1:3e:b9:5d:ad:ce:
         30:37:3c:98:a8:54:1b:89:4c:8f:4d:12:7a:c8:d0:fc:a1:3d:
         d4:15:39:86:ca:f9:88:e2:02:d3:4c:19:51:f7:b7:e3:68:73:
         fd:c1:9b:21:05:1e:b7:ef:0d:f7:f5:63:76:c9:62:2d:07:31:
         40:13:1c:1a:04:91:b7:c7:ad:91:3c:1e:95:c9:c7:b3:d7:5c:
         54:ac:fc:a1:ca:2d:fc:c8:f9:90:cc:86:39:83:b7:ff:fc:40:
         d1:8b:59:9c:f9:82:dc:ab:b1:cc:54:ec:01:0a:92:98:10:cf:
         b1:7c:e1:70:58:99:28:24:dc:98:b4:08:70:af:b7:f4:0e:dc:
         c6:21:c4:cd:50:7a:5d:d6:fe:fa:c2:1c:59:85:39:87:d9:fa:
         19:c7:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----