Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File:                     NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier:          z9McK47B268WvzFW8kynJ9zNv66uS/UDp/Lujnw+tzo=
Subject key identifier:   4C:27:0B:44:A5:E8:E6:4A:1A:F1:DF:A7:F1:23:F7:61:B8:65:D6:BB
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer:       /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial:       01962F073F11938277F45797C2804661BE84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number:          069B
Signing time:             Sun 13 Apr 2025 12:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:06 +0000
Files and hashes:         1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: lKHJETWhCg74KbaInfIVuMRoe8WmwakwJQrgiUfnM5I=)
                          2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3f:11:93:82:77:f4:57:97:c2:80:46:61:be:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
        Validity
            Not Before: Apr 13 12:02:06 2025 GMT
            Not After : Apr 14 12:02:06 2025 GMT
        Subject: CN=4c270b44a5e8e64a1af1dfa7f123f761b865d6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:88:aa:61:88:36:29:72:94:b7:50:56:51:
                    3e:8d:86:0f:56:f0:ab:73:cb:de:ee:55:34:98:31:
                    81:d5:2f:98:a1:71:2f:2e:22:65:fb:81:6f:5c:a6:
                    5b:ff:d0:53:8d:fb:28:48:b4:6e:5c:d9:9a:39:40:
                    92:0c:59:38:67:54:4e:a6:b1:12:f1:8b:c1:71:0e:
                    12:99:4e:46:e1:95:19:00:f1:23:f7:29:1d:3f:ac:
                    9c:d7:c3:1b:bf:f6:ee:b1:1a:0d:fe:ca:4b:20:46:
                    c1:ad:e5:02:9b:1f:42:59:1b:8a:55:87:2e:e9:a1:
                    de:04:b7:58:0f:57:75:81:30:91:fc:42:08:93:9e:
                    09:88:c5:ab:62:46:1e:bc:1e:2b:98:f6:2f:db:71:
                    7a:b0:fe:19:31:15:a5:90:e1:71:63:46:a6:07:d7:
                    3c:03:81:55:a8:e6:e7:b5:13:b2:d7:fc:47:87:29:
                    2f:cc:ab:cd:33:9e:6a:f2:d4:1f:09:4b:e9:03:6e:
                    a3:06:79:3e:12:ac:53:67:43:ed:6f:22:0e:da:78:
                    a9:a9:57:89:4a:3e:48:f3:9c:3d:d3:fc:72:81:9c:
                    52:7b:d4:10:06:01:16:0e:c9:84:8b:26:ef:8a:4b:
                    a1:6a:13:cf:d2:2c:77:6e:e7:67:df:09:ff:19:a2:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:27:0B:44:A5:E8:E6:4A:1A:F1:DF:A7:F1:23:F7:61:B8:65:D6:BB
            X509v3 Authority Key Identifier:
                keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:5d:68:61:e7:c4:66:a2:08:c4:08:24:49:e7:20:f5:e6:f9:
         35:a2:de:de:33:27:d8:b3:9e:ad:b1:ea:c9:12:bb:e8:be:08:
         74:6a:ae:29:28:68:44:a2:e1:c0:bc:e7:a8:4a:f6:88:d3:64:
         a5:dc:de:8d:ad:1b:4a:0f:4c:c6:06:34:64:7f:7b:ec:42:22:
         8b:1e:1a:c3:63:db:dd:9e:a0:a9:be:6c:52:91:87:78:88:a3:
         fd:38:c7:1e:f2:6e:c9:cb:4e:02:d8:84:dc:78:cd:78:94:db:
         0a:03:25:98:cd:55:0c:e4:24:0d:ef:16:21:b1:b9:11:21:0a:
         4f:24:07:b9:ef:de:a2:64:f8:3a:e3:44:27:14:50:a1:39:04:
         a3:20:d0:46:2a:f6:d3:2d:65:37:29:cb:ee:21:3f:e1:4c:56:
         8c:bd:b8:b5:07:98:72:4e:70:cc:d1:4b:15:d6:46:3e:09:51:
         3b:11:6c:9f:b7:41:ac:c8:c8:81:f2:96:a3:47:4e:eb:ee:c9:
         28:45:12:a7:e8:31:fb:bd:ea:19:34:1e:08:b7:7a:74:5b:29:
         3d:af:da:cf:61:e8:ad:4c:0c:0e:cf:14:58:db:76:d0:0a:a9:
         88:11:44:4f:e9:b0:58:1c:c6:69:94:7a:cd:03:bd:4f:d7:23:
         0b:7b:22:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----