Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File:                     NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier:          IwTIPWECMoXyOJdc/Qduc6L6/AbNfGctQbpvXhol6do=
Subject key identifier:   B0:F8:4B:7D:11:39:41:1B:F0:5E:7D:0C:55:E3:6F:E8:0D:CC:9B:07
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer:       /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial:       01962F3D6AD9B6896BBE4B04EC1F593B9849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 92pgx6QNH23m1sb49k-ykMttkN0.roa (hash: 6x2mradcGTZ+q9pm81EMeP+6J3k4A+BvCK17T29Njxw=)
                          2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: J2wkh3J+2nWe1JBOY7IBPX1z2tBaSj1tLo3Mwlw3zkg=)
                          3: lZsMnzEe-znnn1V93iNCRM_YAak.roa (hash: z+dECtyUmhjS80QJzbvWDw1cRN0vxIcWCWIADf50+Fg=)
                          4: oYs8paRk9JPLOaUCIoa9pxPnmCs.roa (hash: kBYq1h4wg3W+NuRYMWAaTbphy585KIiOSln9Rszwvtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6a:d9:b6:89:6b:be:4b:04:ec:1f:59:3b:98:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=b0f84b7d1139411bf05e7d0c55e36fe80dcc9b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:34:58:2c:d8:dd:a0:cf:6b:d5:b7:75:8a:
                    6e:81:01:aa:43:bc:88:4f:cc:36:e4:52:43:eb:bb:
                    2f:86:2b:ff:45:17:62:17:25:8a:7c:2a:3c:16:3f:
                    94:4b:47:6d:67:21:5a:b7:ab:ae:54:da:39:75:50:
                    4f:82:40:5b:e0:ae:c2:ea:2c:6e:e6:83:7e:b9:21:
                    f3:f9:db:7c:ef:f2:bc:b7:a4:14:5b:97:d9:82:cc:
                    da:ac:91:c1:36:c3:53:c9:45:4f:1f:dd:39:a8:a6:
                    ab:b1:2c:76:7b:f7:f0:a9:4e:97:3e:08:66:d6:2c:
                    54:14:ba:47:3a:1c:9a:e7:3a:47:1a:16:d4:41:4f:
                    b3:7b:80:c0:2d:93:c3:1e:59:43:03:ea:fd:6f:87:
                    4a:c6:1d:26:cc:86:fc:41:72:1a:0e:0a:fd:8d:1f:
                    d7:8f:9f:ae:dd:4d:77:4a:21:34:af:7a:12:e3:fc:
                    55:06:4a:d0:4a:c7:69:c3:3c:23:62:ed:4d:95:75:
                    49:97:dd:29:86:93:2c:bd:09:57:78:97:f0:1a:a3:
                    c1:da:c0:97:90:47:2b:fa:17:a5:02:b8:31:07:dd:
                    98:15:e2:d5:22:c0:39:bb:13:92:7d:97:6b:d0:7c:
                    5b:32:8b:8a:37:b2:4b:88:38:f1:9d:41:48:70:2d:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F8:4B:7D:11:39:41:1B:F0:5E:7D:0C:55:E3:6F:E8:0D:CC:9B:07
            X509v3 Authority Key Identifier:
                keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4d:be:dd:19:b4:03:03:ed:f4:0e:94:e6:a7:6b:22:64:94:
         eb:85:10:59:8c:f5:3d:e5:2d:13:bb:7b:6f:93:66:38:d9:12:
         ca:cf:3c:3d:85:c0:da:0f:7b:a5:d1:c7:08:b5:0b:48:f9:35:
         ea:a3:27:34:e0:ea:9e:7e:f7:53:f1:c7:ab:de:4e:cb:fd:c7:
         c4:01:91:68:ae:6c:33:48:c6:b0:93:10:3c:04:9c:70:71:dd:
         90:0b:d5:84:7c:83:01:19:b7:35:7d:db:df:c6:fd:55:fc:01:
         e2:0a:bb:79:88:d9:24:42:56:25:6c:b2:24:3a:6c:8a:d6:32:
         b7:c7:8b:a2:a8:7f:66:32:bb:f2:77:30:2e:c1:a4:b8:72:29:
         d5:c5:79:36:05:48:0a:d7:23:59:82:fd:2d:fc:60:1d:34:31:
         67:ac:b5:15:3d:ed:7f:34:67:08:1c:ac:13:c0:50:c0:96:d8:
         31:c0:42:69:a5:46:1a:33:3b:3d:3b:3e:dc:73:6c:ed:f6:dd:
         3a:5f:95:ed:71:65:88:fd:fe:56:93:d1:36:59:e1:ec:39:77:
         c3:ea:00:8b:ca:4e:33:11:5d:93:cf:d6:c3:a6:c1:57:56:be:
         5c:62:29:49:4b:4a:1b:03:32:3b:30:bc:80:c4:08:e7:74:41:
         e1:fb:b7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----