Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
File:                     NFtPe0oW256STwkIzuPaJvIq1IE.mft (raw, json)
Hash identifier:          aILsVXaqH6xhvH/VmYVdvY9UpEpQPGENx29YjkkFTKY=
Subject key identifier:   CB:C1:DB:F8:51:EB:42:86:A6:02:B3:A7:8E:0D:AF:93:29:AC:25:BD
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Certificate issuer:       /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial:       01962F0744D7B9CF7703C337F493F0A33B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
Manifest number:          0F8E
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: AOLXuvzQH0F3MDzBXr5hgJth6jA.roa (hash: ANOWCNK1N2HN8iwkM8P3PMXp5btgZ6sFl3wjdGu9Tfo=)
                          2: IUqUo2gZccO5DJEGZ2QrdwAd_rY.roa (hash: N//BCS9/s8yglI9IXPIoNJivxPmiF8d0yubes6L4x2s=)
                          3: NFtPe0oW256STwkIzuPaJvIq1IE.crl (hash: 1hpSaTE2Uf8y+lvJiUgCtnU6hdYyRDVmyLbDcZG1byo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:d7:b9:cf:77:03:c3:37:f4:93:f0:a3:3b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=cbc1dbf851eb4286a602b3a78e0daf9329ac25bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:7a:8f:55:57:68:2b:82:37:f6:dd:95:73:
                    ec:33:f2:46:2b:d1:79:74:80:17:91:a4:9a:32:70:
                    6b:e0:ba:21:95:24:ae:6a:40:57:bf:5b:09:b7:b0:
                    0e:f3:89:32:31:e5:08:a5:00:48:93:cd:74:09:78:
                    2b:6e:82:d3:0d:49:d9:92:d8:0e:a1:38:ca:b7:47:
                    23:aa:7e:f3:7e:64:34:c5:db:00:2d:94:64:2b:16:
                    f9:43:a3:54:03:d5:88:cc:06:fa:08:08:35:f7:ad:
                    d5:1c:16:79:27:38:a5:a7:f7:c5:75:56:82:92:2c:
                    3c:48:93:0a:61:91:c5:40:0a:56:45:e7:af:4b:b4:
                    91:57:fa:47:02:fc:b9:e5:37:fb:65:9b:c5:0d:e9:
                    e3:02:79:be:57:58:63:9c:36:88:f6:d5:f7:f8:f3:
                    bc:01:06:98:f0:bf:b5:9f:d4:16:1a:50:8a:eb:c4:
                    e3:63:77:ff:42:3f:f0:85:43:0a:9c:b9:b2:8c:37:
                    1f:6b:7a:22:d2:65:c4:99:c2:b6:63:af:b5:68:98:
                    3b:49:3f:38:50:6b:6f:9a:41:48:89:c7:10:54:85:
                    08:2b:e3:50:36:89:8f:28:a5:ce:16:23:09:2e:d6:
                    97:04:63:c6:3e:b7:a8:39:b7:fc:e7:25:1f:2f:c7:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C1:DB:F8:51:EB:42:86:A6:02:B3:A7:8E:0D:AF:93:29:AC:25:BD
            X509v3 Authority Key Identifier:
                keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0d:4f:55:48:c6:ff:ea:22:32:96:48:3b:93:82:11:2f:46:
         31:59:d9:23:30:a1:d7:5c:27:e9:97:b0:78:d3:d4:a5:20:b3:
         bd:7b:73:68:3a:ac:a5:64:06:c2:71:76:36:28:22:d3:ea:86:
         e3:9f:91:6b:05:c5:94:76:10:e9:e2:9b:c2:a6:74:bc:1e:91:
         d1:53:0b:6e:8e:16:01:30:bd:27:e6:61:70:56:cf:f6:50:d9:
         d8:11:2f:62:cb:84:bf:79:bc:a5:fd:01:96:3a:e6:fb:6c:2d:
         e1:e3:8b:25:69:db:2c:cd:19:1a:7b:b4:99:21:ca:ed:5e:2c:
         f7:fd:5b:ff:6c:f5:56:a1:51:38:0f:da:9b:6d:e6:60:c3:3c:
         4f:72:47:29:33:53:b3:22:45:39:1a:9b:40:bb:49:ea:ce:b8:
         4a:cc:71:62:ca:c6:90:cf:65:63:c9:20:ac:7c:a9:20:0b:a6:
         70:3f:82:a2:9c:56:3e:42:35:a5:32:a2:2d:01:35:33:29:28:
         0c:2a:c7:53:86:68:d9:57:95:a8:f4:5c:0f:df:95:c0:89:b0:
         d0:af:fd:32:17:6f:e1:ec:8b:ae:c0:eb:fa:5f:b8:90:30:5b:
         1d:77:12:55:69:24:c1:86:0e:fa:6b:d8:17:72:3f:44:57:12:
         c6:f9:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----