Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File:                     NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier:          DSNIzDBZ+WLyiPKvTfYD60XW+54LE691MlrZDNoL5yQ=
Subject key identifier:   3B:08:CA:E0:1D:CB:E0:EF:4A:45:52:85:8E:27:B0:2B:7E:1A:45:00
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer:       /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial:       01962E99352E1FFD0D3109773B4983D93EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
                          2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: +lEs7Ua7MW7xeYlbsftM2VsCXYvJEEZd2Y/ngE4Od0U=)
                          3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:35:2e:1f:fd:0d:31:09:77:3b:49:83:d9:3e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=3b08cae01dcbe0ef4a4552858e27b02b7e1a4500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:c7:14:d4:8f:dc:09:2b:c7:0c:69:62:9e:
                    0e:b2:b5:67:d7:f8:bf:89:80:9e:d9:ad:c5:45:36:
                    ba:38:cf:25:dc:79:6c:e3:ae:79:19:5c:fa:c5:00:
                    5c:ea:3e:3c:b4:bc:40:d2:cf:14:88:20:1f:16:ea:
                    67:05:f9:de:91:92:c7:1d:49:6f:bd:92:85:16:3a:
                    fc:4c:80:45:14:32:5a:49:e9:fd:4a:40:b5:3e:89:
                    32:ab:40:18:38:05:58:f3:c7:e2:1b:8d:6e:f1:dc:
                    2e:fe:36:bb:30:46:67:18:58:a5:8a:64:47:31:e3:
                    10:6e:06:b2:95:87:86:0b:4b:5b:dc:e0:b6:a6:09:
                    2a:97:2d:e8:0e:62:d2:aa:50:15:e1:57:9b:46:89:
                    f8:2f:1f:d8:0b:fe:a8:f1:d5:02:18:22:29:de:e6:
                    8e:61:60:ed:4a:6c:c6:85:88:6b:12:25:aa:06:f6:
                    dc:72:6e:fe:c7:44:c6:b1:04:f0:37:37:e2:61:18:
                    d7:be:a2:28:52:f9:62:e4:f8:ab:a7:3f:83:36:4c:
                    0c:fa:74:8e:c2:f9:e8:54:0b:ed:96:78:f7:79:83:
                    ff:41:af:43:54:c2:e3:37:b3:34:29:64:2f:89:7e:
                    cd:d5:f4:e4:3d:8a:f8:cd:fe:8e:e0:ae:a0:35:00:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:CA:E0:1D:CB:E0:EF:4A:45:52:85:8E:27:B0:2B:7E:1A:45:00
            X509v3 Authority Key Identifier:
                keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e6:91:5d:0a:a0:3a:77:02:ad:88:88:d0:35:63:77:cd:54:
         ec:99:f5:18:39:fb:2d:7c:65:36:64:43:f4:e3:ae:9a:f0:0e:
         39:d6:74:97:71:2d:17:fb:0f:11:38:80:3f:9d:f9:00:c0:b8:
         b7:e5:97:8e:f5:1d:d1:9c:3b:56:2c:02:da:f2:2e:55:c6:e9:
         fc:e5:b6:88:04:af:8b:65:c6:4b:62:d0:86:0f:ef:d8:ce:f7:
         30:a7:54:59:58:a0:3b:46:f4:ed:7f:fe:46:de:7c:90:64:b9:
         b2:0f:0b:2f:50:b6:58:95:6d:c9:07:e0:94:f9:5b:5c:a4:7c:
         dc:f8:9b:15:ba:dd:39:5a:27:de:75:78:9a:96:8c:dc:91:f6:
         cb:a0:d1:6f:96:20:49:95:de:ad:3b:35:b1:c0:3c:9a:d4:3c:
         f1:be:30:a4:42:92:68:25:12:8d:3a:81:de:0e:c1:86:64:e2:
         e4:fd:7a:bc:9d:a0:ed:af:37:c9:64:aa:81:e9:ad:df:d0:a0:
         32:9e:5d:aa:63:9e:e5:00:de:84:43:b0:d2:70:59:6b:c0:ae:
         f0:b1:9e:d8:fd:dd:3b:04:c7:9a:61:50:30:03:32:67:78:43:
         ef:47:e8:1c:bd:83:77:21:aa:6a:b9:70:73:f6:72:84:12:61:
         df:93:d6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----