Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File:                     NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier:          w5FZUdo6ujQgL4f4IFQ7xtts4YZnDbS45rrjhgFAqXM=
Subject key identifier:   80:F0:3C:C5:C3:83:5C:4D:CF:F4:72:BB:94:DC:DF:B0:89:2E:D6:72
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer:       /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial:       01962E98BCB1111F53C2437E7D37F9653246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: tl/cojFLc072VkSBWENeGPGqxP77o8knR8PK3O9x5eY=)
                          2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:bc:b1:11:1f:53:c2:43:7e:7d:37:f9:65:32:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=80f03cc5c3835c4dcff472bb94dcdfb0892ed672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bc:ea:e9:73:17:6a:85:ca:7b:f7:af:dd:f0:
                    05:78:22:92:c1:9e:52:ee:a9:ab:74:37:d2:62:fc:
                    b5:9b:fb:12:64:dd:00:9c:49:c5:13:79:3c:ed:c4:
                    a8:8c:a9:31:a5:09:ae:19:c0:8c:21:bd:e2:44:1f:
                    c6:40:23:35:c2:f7:6f:e5:cb:62:7a:22:6e:6a:1e:
                    6e:f2:ec:41:26:a9:e1:ca:af:13:e2:5f:7a:60:d3:
                    3d:3a:04:d0:1d:01:b2:bd:09:a9:c2:d9:58:ef:0a:
                    84:44:7e:b7:cf:77:1c:f3:a3:fc:07:f4:41:e1:72:
                    b1:73:cb:90:1f:f1:9f:7b:2a:7b:bb:94:5a:4c:14:
                    70:27:ea:8c:91:35:b1:85:3b:86:0b:84:b0:1e:ff:
                    15:c6:ab:8e:0f:a3:5f:f5:ba:4d:da:c6:71:34:9a:
                    e4:4e:67:05:7a:e0:ab:b5:55:65:8e:b5:1d:76:e2:
                    5d:97:a0:e9:eb:75:94:2b:d7:c2:6a:b8:4f:4c:95:
                    25:ca:37:19:4f:0b:0a:14:49:46:d1:64:05:a5:90:
                    f6:23:5f:af:20:65:14:68:c4:82:f6:ac:98:7f:3e:
                    e0:7e:05:d2:ef:d0:fa:28:b6:45:fb:04:c6:30:04:
                    a4:d0:06:bf:52:e6:b7:49:1a:76:eb:d3:b4:a6:10:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:3C:C5:C3:83:5C:4D:CF:F4:72:BB:94:DC:DF:B0:89:2E:D6:72
            X509v3 Authority Key Identifier:
                keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:10:a8:39:18:fd:00:b0:d2:3a:e1:d8:ee:f6:7b:87:db:d1:
         19:9b:13:7e:ef:47:41:be:3a:5f:4e:80:29:ff:a8:f9:c7:cd:
         42:77:4a:ba:40:5e:ee:fb:6f:d2:66:57:20:49:79:2f:37:3d:
         fd:e7:3b:1a:3f:33:4d:4a:95:e1:ad:09:0b:e9:c3:6b:45:8a:
         ab:d3:e0:e6:6a:aa:12:80:75:43:49:27:17:1c:d1:e1:8b:8e:
         35:1c:72:e2:2d:03:13:03:9c:23:0f:b2:5a:1b:8e:22:94:a0:
         2e:c7:be:5b:11:51:0e:e6:a0:b4:20:b6:4d:ab:3b:5f:76:14:
         7e:8b:d3:7f:08:60:10:2e:a0:c7:78:6f:ef:b2:08:3a:0e:8c:
         5b:b3:ca:cf:92:12:e0:33:45:45:b7:c1:29:86:78:e5:eb:ab:
         58:eb:93:f6:1d:38:40:73:88:f0:f1:3c:2f:0b:d6:da:64:11:
         11:c9:b1:84:c9:1e:76:74:d1:2e:38:b3:78:55:be:46:98:f5:
         b9:45:4f:1e:98:dd:48:62:cd:98:8d:53:89:d0:67:08:cb:de:
         6a:04:20:01:29:55:95:b7:68:f2:ab:b0:a7:bc:16:7a:7f:8d:
         39:bb:e9:0c:5b:a9:f2:3c:38:3a:4b:f2:03:2a:56:11:7a:a7:
         07:b3:08:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----