Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
File:                     ngoRprHRiWV8f7luwUWLr8oYZPQ.mft (raw, json)
Hash identifier:          qhxHMGXuU/wg3YeIbuF2wto6if0P3gR3TufcgJmShAA=
Subject key identifier:   14:2A:C9:48:D7:A6:2C:9E:4E:66:0F:42:9D:BB:BC:9B:35:E0:E4:62
Authority key identifier: 9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4
Certificate issuer:       /CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
Certificate serial:       01962F06796BCAE7F9A722CF2F005C5C7FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft
Manifest number:          09A3
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: ngoRprHRiWV8f7luwUWLr8oYZPQ.crl (hash: +2/0rZE3Bgt88gjz+UDxjTYXkpB8pePBPmlkBuVkfZw=)
                          2: vOtFwLdGF7PMmv2kt6Y0Mhv9xgc.roa (hash: 37qkO8fAeK5+9nWdH5nkM409M5On3UG7sBmDzTvbUVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:79:6b:ca:e7:f9:a7:22:cf:2f:00:5c:5c:7f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a11a6b1d189657c7fb96ec1458bafca1864f4
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=142ac948d7a62c9e4e660f429dbbbc9b35e0e462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:b5:9a:49:27:dd:20:60:2c:12:13:27:6a:
                    8e:bb:25:0b:50:ad:c3:21:49:d5:d3:6c:63:4a:90:
                    d1:d8:4d:d1:ec:6d:7e:21:f3:09:66:e6:c1:df:38:
                    0d:50:8e:fb:ca:7e:7b:88:f5:65:a7:14:3f:c9:b9:
                    57:00:f3:82:6f:27:e6:32:73:59:d6:6f:18:ee:ae:
                    99:40:f3:13:5a:ab:8b:88:28:bb:7a:bd:f5:24:34:
                    f4:ae:fb:60:f2:9e:ec:88:f0:a1:c3:56:d5:7e:7e:
                    1c:be:1f:61:10:bc:57:3d:f9:88:40:b5:10:7d:be:
                    a3:4d:f6:46:54:eb:84:74:11:aa:49:c1:f7:60:79:
                    5e:f7:d2:98:cf:9f:4c:ce:be:ec:9c:99:d0:78:d3:
                    14:ac:d8:c8:5b:68:4a:28:f5:ea:d0:c9:26:50:bc:
                    85:0e:35:0d:7f:b3:09:a6:2e:a8:83:4e:b4:f7:4c:
                    f7:32:29:5c:24:d6:c7:00:0a:91:97:10:6d:1d:80:
                    42:a8:12:c6:46:2c:ac:9c:e0:39:22:2d:5e:2b:79:
                    a3:7c:f5:d0:e6:0c:82:1a:a3:a7:2d:96:5a:2b:37:
                    da:b4:62:34:40:9a:08:5b:3d:5f:71:d3:89:bf:b2:
                    b9:e6:cc:b1:f9:09:b7:bb:ba:2b:6c:9c:1c:43:e1:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:C9:48:D7:A6:2C:9E:4E:66:0F:42:9D:BB:BC:9B:35:E0:E4:62
            X509v3 Authority Key Identifier:
                keyid:9E:0A:11:A6:B1:D1:89:65:7C:7F:B9:6E:C1:45:8B:AF:CA:18:64:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngoRprHRiWV8f7luwUWLr8oYZPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1cdace-4e00-469a-8c50-58cb830875f5/1/ngoRprHRiWV8f7luwUWLr8oYZPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:07:70:69:ea:4c:40:56:54:df:68:09:6f:74:fc:b9:65:d9:
         32:89:7f:aa:6c:4e:a1:71:82:77:fa:86:34:e6:ab:d2:54:e5:
         d3:49:13:cd:bb:c8:54:e2:ae:a3:fd:9b:5b:51:46:91:5e:2c:
         aa:37:7e:b6:fd:84:41:fa:e2:21:66:f6:62:b7:64:18:28:20:
         41:1f:db:64:7e:66:72:1a:7f:75:13:df:08:d1:d1:28:8a:38:
         cd:92:67:f8:90:1e:ec:41:55:8e:17:f3:55:b3:27:8a:f0:49:
         58:72:57:63:d5:7b:37:e0:69:ae:17:5c:ef:da:bc:43:e8:25:
         98:f0:08:f5:68:18:2d:3b:cc:8a:ce:45:ab:47:6c:1f:a0:2b:
         8f:2a:46:76:0f:66:f2:19:c6:cd:20:ce:c7:2f:af:17:68:a7:
         b3:cd:f5:d6:5a:ed:1a:8f:02:35:e4:3f:3b:2b:92:86:80:e8:
         90:47:7b:bb:9e:57:28:fb:0b:96:72:69:cf:50:e3:89:2a:be:
         ec:0a:cc:5a:59:18:da:bd:fc:75:c7:b2:87:07:9f:b9:f1:c5:
         c9:e8:5c:16:7f:fc:4c:cc:5c:eb:0f:ba:4c:59:fc:eb:b9:5d:
         f1:1f:51:39:b0:56:18:20:3b:dc:1f:dd:83:41:2d:a9:0e:13:
         67:7b:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----