Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
File:                     NBSgbayFTb7mCYRYjex7MoS1qlA.mft (raw, json)
Hash identifier:          nYZE/tSSAZmlEqFhcCCALidbzBjDIPBsB5ivq54Jaj4=
Subject key identifier:   5A:F0:F7:73:F3:84:5C:29:25:69:AF:D6:34:F6:75:21:AC:6D:6A:84
Authority key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Certificate issuer:       /CN=3414a06dac854dbee60984588dec7b3284b5aa50
Certificate serial:       01962F74745702D9508178C34E82D5027ACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: NBSgbayFTb7mCYRYjex7MoS1qlA.crl (hash: rFldiIeMkOZCc+m4W1w1m2UCcaZho4AzVUlYj1lwUF4=)
                          2: mCH81i7xBtgIGVkVDDWoy8KkJ-g.roa (hash: Z8+T6RRnwrbdCq/N/SZfyv3PBeRfv8rhSz1giWeS+Kg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:74:57:02:d9:50:81:78:c3:4e:82:d5:02:7a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3414a06dac854dbee60984588dec7b3284b5aa50
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=5af0f773f3845c292569afd634f67521ac6d6a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:e2:8c:d6:97:60:f4:b3:a3:12:ec:a4:f8:
                    7b:7c:c9:39:af:0a:df:a0:f3:cd:8c:c8:8e:52:8f:
                    e0:88:d0:2a:4a:15:9f:f4:a6:7b:c6:3d:c5:03:b3:
                    5c:7e:06:ca:f1:0c:ee:7a:df:5a:2d:d6:ff:93:1f:
                    3c:32:f5:2f:70:c8:6e:95:a9:bb:57:10:ee:cd:1e:
                    34:39:66:1a:1b:57:6e:db:dc:19:62:97:9a:f5:3c:
                    f2:25:b6:af:43:1a:88:d7:19:60:68:d8:28:4a:d8:
                    2d:16:2a:4c:5f:fb:fa:10:36:4b:14:6e:11:7c:5f:
                    00:17:d6:89:ac:da:92:c6:05:2b:68:33:e1:53:6c:
                    74:bd:4f:e0:85:67:9c:ed:a1:ed:68:2f:98:9f:88:
                    2d:4a:94:7d:18:6b:cf:7c:cc:86:77:97:28:e4:50:
                    42:14:41:88:bf:13:ed:f6:e9:81:14:88:c7:eb:99:
                    57:97:fa:e8:b4:c2:bb:83:cf:1b:02:76:e3:22:47:
                    7b:6d:99:f6:cb:61:e8:fc:56:84:6d:31:ad:f1:28:
                    a9:0e:7a:c5:cd:f9:c0:5a:bb:d5:44:d7:2a:4e:d8:
                    3d:5f:f4:65:97:c3:5f:ce:63:6a:86:c2:f3:77:8d:
                    f7:7e:ca:51:b8:a2:c1:f0:51:9d:fc:dc:b0:6d:5e:
                    ab:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F0:F7:73:F3:84:5C:29:25:69:AF:D6:34:F6:75:21:AC:6D:6A:84
            X509v3 Authority Key Identifier:
                keyid:34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:fb:ed:18:6d:19:30:36:46:8c:19:e2:1e:d1:a6:ef:0c:
         4a:c5:e7:bc:60:79:f3:17:41:cb:55:d0:eb:19:e9:76:9e:a0:
         6a:6a:32:2a:3f:68:f3:55:53:3a:a7:c1:52:2b:ce:91:04:da:
         25:0a:8a:e8:51:3a:d7:55:38:a2:c4:35:5a:7d:e1:e0:ab:91:
         3e:80:a1:77:90:4e:02:47:13:fd:01:82:67:e3:2f:60:c3:5d:
         81:a9:55:19:2c:14:47:51:0f:a8:73:2c:00:d3:80:c0:1d:c6:
         f0:f2:ba:2a:0f:bc:28:e0:e5:19:2d:f2:35:31:21:3e:dc:c8:
         c2:7f:af:14:6c:6c:2e:60:21:b0:ff:91:84:7a:7b:6d:ec:df:
         8b:3d:66:e6:6d:dc:b3:d6:98:d2:cc:ea:4a:05:a0:73:df:b2:
         72:a9:5b:1a:b3:d2:4f:9f:b3:ab:95:15:81:4c:ee:47:24:ad:
         d9:fd:38:69:ac:c3:2a:41:be:ba:c3:c4:87:af:7f:0e:64:98:
         0c:32:f4:08:95:aa:72:6e:85:16:f1:cc:7e:bc:00:da:f1:56:
         26:fe:1b:aa:9b:8d:da:99:5d:59:49:d8:93:86:2a:91:f4:71:
         22:1f:af:d9:cf:87:1f:a2:e0:9d:78:96:27:62:e4:07:4d:24:
         f2:a8:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----