Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          PXP3ErXAQvZZ85A2OU2tiMzX4/W8fE89JDF6V5t+B2w=
Subject key identifier:   49:11:A2:61:C7:63:64:CD:FD:8A:53:CE:28:E3:62:5A:21:D5:3B:76
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       01962ECF7F9D4FA6633F10550890DFF3E9B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          113B
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 6KojKGt8m1JZYflLectBk9G6KyQ.roa (hash: f7oRXtNmZrUg7ECYCX58KaB9kZ/BYKNvyNqrr7ZA0pg=)
                          2: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=)
                          3: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=)
                          4: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=)
                          5: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=)
                          6: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=)
                          7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: a1xDn9C6zhKg/Ios3LpX6EkOk9xmjl6SCMlipfB/2Gg=)
                          8: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=)
                          9: lVLXkjE5u336DUNe5-yOssKJPTU.roa (hash: LZfaMzNKKI5KTD1Ka0mwOqPdg88OEyiRswrf9PDppVQ=)
                          10: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=)
                          11: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=)
                          12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=)
                          13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=)
                          14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=)
                          15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=)
                          16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=)
                          17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:9d:4f:a6:63:3f:10:55:08:90:df:f3:e9:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=4911a261c76364cdfd8a53ce28e3625a21d53b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:05:ed:c6:1f:b9:4d:2f:76:3a:b5:b6:94:
                    08:f0:6a:2a:85:a5:a7:6f:ee:af:3c:19:6f:57:54:
                    33:02:6e:76:0e:a7:e2:76:f6:3e:b4:6c:31:0e:17:
                    af:01:86:8f:d5:71:8d:a9:b0:08:c3:17:22:f9:8e:
                    22:c1:4b:0d:07:c7:43:37:30:7d:d4:97:35:7d:e4:
                    1f:6c:ec:23:09:f0:65:ad:c7:6c:99:4b:b6:3d:85:
                    8b:96:ce:96:b6:da:4e:ab:c3:b8:2a:eb:14:c5:83:
                    10:8a:5b:7f:d5:9c:e6:ce:69:5f:1b:23:fc:43:a6:
                    e0:a6:60:9e:3e:4e:9f:32:7b:09:23:4e:03:9c:9b:
                    15:17:b4:ac:ab:61:06:37:07:fd:10:f6:5a:e5:f2:
                    54:be:a3:24:2f:89:cc:96:1e:59:39:f4:ec:f7:86:
                    29:84:b3:fa:9a:14:ea:34:7f:db:87:fe:2e:bf:78:
                    53:4b:f9:e4:2e:94:c6:2d:dd:80:cd:bc:1c:cb:f3:
                    2b:bc:c6:71:02:c2:ed:79:ba:4b:9e:b1:2a:f1:76:
                    29:22:2a:97:ff:f9:b4:52:29:eb:dc:23:95:95:eb:
                    aa:6b:bc:e8:95:6c:e4:e2:e9:98:55:b8:3c:7c:03:
                    2a:4e:26:e2:09:4f:65:ba:31:76:6d:a1:d4:f7:f8:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:11:A2:61:C7:63:64:CD:FD:8A:53:CE:28:E3:62:5A:21:D5:3B:76
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f6:39:77:b7:1c:79:52:6a:6f:71:0b:45:d1:0b:9c:e3:e8:
         53:ca:6c:8d:63:0a:2e:af:69:7e:26:b2:35:48:9d:d9:5f:db:
         7d:3d:42:b0:59:bc:e4:92:de:ff:7b:be:80:5b:27:72:9e:e0:
         02:3a:d6:14:82:d1:d5:be:aa:b9:36:23:6d:fa:92:00:85:d0:
         52:84:94:08:73:96:aa:f6:ba:98:fb:a6:1e:58:eb:a7:06:73:
         dc:bb:13:e0:42:74:5a:ce:f2:1d:aa:81:4e:4e:dc:50:e5:10:
         5a:9d:98:35:52:f2:e7:68:8f:eb:6f:a0:07:f5:97:e1:89:99:
         8c:ff:58:6b:0b:53:d6:84:6d:5c:1e:0e:bf:a8:54:ec:df:0d:
         44:b3:38:12:7e:cb:45:0d:66:bb:47:01:dd:47:cd:5b:ca:f4:
         20:77:1a:5e:52:61:61:4c:f0:ac:8b:c5:7e:30:4f:b2:71:c6:
         8c:22:55:87:fa:77:16:3a:b7:09:a2:ff:3d:28:19:40:7d:2f:
         3a:c8:25:69:d5:98:58:a4:86:20:84:ed:d9:8b:82:f5:ca:ce:
         7e:18:76:ee:a9:1e:32:86:91:a6:ec:46:00:78:14:2f:ca:77:
         83:88:ab:1c:d7:29:19:f3:5b:f9:ea:39:88:66:54:ec:9b:6f:
         85:9d:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----