Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File:                     NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier:          QR7NLkKWNl0TE6FOsfFfptSVJYXsNwu9ofVdLFOGsIk=
Subject key identifier:   68:3B:52:04:22:2B:30:0D:5C:7A:E0:6F:96:4F:DD:4C:0A:E7:7E:22
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer:       /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial:       01962F7468EB4688C43B5679239BD0282830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number:          44
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: t3mEDME8UbIMg73ZRqyVZMPdYq80lDwLIm4QD4Zi8e8=)
                          2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
                          3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:68:eb:46:88:c4:3b:56:79:23:9b:d0:28:28:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=683b5204222b300d5c7ae06f964fdd4c0ae77e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:54:b9:84:7f:e8:05:c7:04:6e:24:2b:26:
                    1c:2d:33:8b:45:7b:f7:a3:be:4e:10:18:02:41:35:
                    1d:0b:30:ca:de:eb:56:22:82:c3:1e:e4:3a:8e:14:
                    55:58:ad:b2:0e:70:d4:c2:e5:50:a0:10:b4:61:a8:
                    06:9c:21:f3:3f:3e:b5:b4:d9:cb:63:3e:b3:8d:13:
                    9d:43:77:0f:6d:bf:3e:04:e8:68:75:60:bc:19:c1:
                    21:ef:ad:ca:0c:75:77:97:21:7f:0d:70:62:eb:c3:
                    01:b3:d6:e8:06:58:84:14:ed:90:32:de:bb:21:22:
                    4d:fd:f9:66:1b:1b:36:5e:9d:d0:bb:ec:0a:cb:10:
                    22:a2:42:ab:b2:ba:14:f7:1b:25:77:4d:7a:12:af:
                    1e:5f:32:99:18:c5:34:7f:d7:46:5d:ac:37:61:1a:
                    06:53:59:5f:c7:30:57:cd:4c:93:05:72:99:89:62:
                    8a:ba:8d:bf:85:e7:c2:bf:76:54:82:02:bd:14:dd:
                    1f:42:69:b1:76:6f:24:3a:f0:e6:91:28:18:b8:12:
                    5f:bb:98:06:c1:2f:bd:5e:51:87:b4:eb:84:f1:39:
                    83:56:60:be:10:a8:39:d4:ce:1a:57:1f:d7:16:34:
                    6e:11:a0:df:48:20:3f:f9:e3:57:80:7d:a2:f2:67:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:52:04:22:2B:30:0D:5C:7A:E0:6F:96:4F:DD:4C:0A:E7:7E:22
            X509v3 Authority Key Identifier:
                keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:42:39:41:e7:98:a9:1c:f9:7e:4a:e3:08:85:3c:8f:ed:
         67:14:c5:a2:ee:fa:f1:b8:d3:29:da:d8:20:05:e8:34:ca:70:
         26:9a:d6:c8:71:0d:27:e3:76:bc:df:64:23:8a:bc:c4:c0:28:
         df:70:c0:bc:6d:5c:21:2e:38:4d:8d:c1:c0:04:ea:47:30:e0:
         c0:53:56:6c:5f:d5:8e:d1:d9:77:c0:97:69:d5:56:2f:92:a9:
         01:f0:e3:73:4c:51:34:bb:e0:6b:dc:04:57:6b:09:43:be:50:
         08:7b:8d:78:0e:d4:62:05:8b:f7:29:86:19:7f:18:46:19:46:
         e1:8f:b3:f3:47:f8:b2:09:b5:2b:11:5c:c9:01:a2:00:a0:fc:
         6f:89:15:28:7e:cc:f5:db:06:75:6f:c2:75:44:14:8a:d9:82:
         ab:40:f5:f4:56:0c:05:9f:ff:5c:c8:17:94:7d:ac:e6:85:22:
         18:35:55:4e:23:c9:cf:c4:45:69:d6:94:a4:9a:1c:61:84:10:
         05:f5:82:43:27:5a:49:da:96:61:ac:ae:69:e5:0e:c0:e9:fe:
         ff:bc:1d:3f:57:b9:89:77:c8:58:d7:cc:ef:ca:78:b6:9b:d8:
         88:45:bd:aa:35:a6:e3:28:de:1c:33:c8:fc:bd:b8:84:81:63:
         0e:4a:2f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGjrRojEO1Z5I5vQKCgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MmU2NTM2YjJlNzQyMjBlZjRiMDkyYmMwOTBjYzRjMjUw
ZjNlZDYwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
Eyg2ODNiNTIwNDIyMmIzMDBkNWM3YWUwNmY5NjRmZGQ0YzBhZTc3ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX1UuYR/6AXHBG4kKyYcLTOLRXv3
o75OEBgCQTUdCzDK3utWIoLDHuQ6jhRVWK2yDnDUwuVQoBC0YagGnCHzPz61tNnL
Yz6zjROdQ3cPbb8+BOhodWC8GcEh763KDHV3lyF/DXBi68MBs9boBliEFO2QMt67
ISJN/flmGxs2Xp3Qu+wKyxAiokKrsroU9xsld016Eq8eXzKZGMU0f9dGXaw3YRoG
U1lfxzBXzUyTBXKZiWKKuo2/hefCv3ZUggK9FN0fQmmxdm8kOvDmkSgYuBJfu5gG
wS+9XlGHtOuE8TmDVmC+EKg51M4aVx/XFjRuEaDfSCA/+eNXgH2i8mdAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg7UgQiKzANXHrgb5ZP3UwK534iMB8GA1UdIwQY
MBaAFDQuZTay50Ig70sJK8CQzEwlDz7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUt
ZWNkOGEyNDc0YTAyLzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mOTQ2MmItMzc0OS00NGJiLTg0ZWUtZWNkOGEyNDc0YTAy
LzEvTkM1bE5yTG5RaUR2U3drcndKRE1UQ1VQUHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK5COUHn
mKkc+X5K4wiFPI/tZxTFou768bjTKdrYIAXoNMpwJprWyHENJ+N2vN9kI4q8xMAo
33DAvG1cIS44TY3BwATqRzDgwFNWbF/VjtHZd8CXadVWL5KpAfDjc0xRNLvga9wE
V2sJQ75QCHuNeA7UYgWL9ymGGX8YRhlG4Y+z80f4sgm1KxFcyQGiAKD8b4kVKH7M
9dsGdW/CdUQUitmCq0D19FYMBZ//XMgXlH2s5oUiGDVVTiPJz8RFadaUpJocYYQQ
BfWCQydaSdqWYayuaeUOwOn+/7wdP1e5iXfIWNfM78p4tpvYiEW9qjWm4yjeHDPI
/L24hIFjDkovew==
-----END CERTIFICATE-----