Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File:                     NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier:          DXqVp+qUTl+g19mK7MEaXcZh6AxhouHOI4CVPnUIXDE=
Subject key identifier:   0A:BA:48:DE:61:C2:FC:8E:7B:3A:EF:2F:46:06:2F:FC:D1:7E:94:37
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer:       /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial:       01962F3D82A8B499A0C15CE96280F173770E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: t/TEDWstwoHcBHmEjwEIMdEuz5ndm57h5hz4954czjo=)
                          2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:82:a8:b4:99:a0:c1:5c:e9:62:80:f1:73:77:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=0aba48de61c2fc8e7b3aef2f46062ffcd17e9437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:31:84:ad:14:21:1e:a6:96:d4:e7:fe:63:
                    d6:c9:ad:80:d2:5f:53:09:ad:30:5b:c7:d2:90:3b:
                    fc:ca:bc:9a:5e:9b:b1:e5:97:f2:81:3f:d5:ce:53:
                    67:da:c2:37:db:79:71:23:cc:d6:b4:95:78:74:5e:
                    35:bc:a1:23:2c:e7:0d:97:58:d4:a0:3b:16:2c:76:
                    4f:0e:68:c4:41:d0:e8:d0:e0:b1:31:ce:8a:5c:21:
                    6d:6e:f0:da:d5:a3:ec:5c:d8:5b:26:d7:f4:d4:93:
                    9c:62:bf:0f:ad:8e:63:0c:03:72:26:93:3f:b4:f1:
                    45:fa:dc:f7:67:b1:1e:7b:c9:43:24:43:a1:d1:9e:
                    e9:b1:35:52:8d:8d:02:74:11:d8:42:f4:bb:b0:30:
                    dc:41:0d:36:62:be:e1:c6:cd:26:8e:e1:1b:8b:20:
                    e7:82:bd:c6:46:85:3d:2a:4c:e3:41:4c:d3:45:21:
                    57:90:ad:02:a6:55:28:af:61:51:a6:06:3b:80:ff:
                    c0:8f:50:46:20:65:8a:6f:83:65:5b:d9:20:6d:49:
                    ae:74:0b:e0:5e:54:74:1b:e9:a0:14:c2:79:36:9f:
                    de:38:c7:73:18:91:c8:98:cd:87:1f:11:cd:94:ea:
                    cd:3e:ca:85:9e:fd:b7:c9:da:28:5e:c2:b9:a6:44:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:48:DE:61:C2:FC:8E:7B:3A:EF:2F:46:06:2F:FC:D1:7E:94:37
            X509v3 Authority Key Identifier:
                keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:86:f0:86:ff:43:31:40:21:ac:62:06:43:4a:e4:b2:ac:fe:
         ff:7a:0b:a3:70:ec:3c:14:20:f9:86:2b:c3:91:d3:07:b7:02:
         b6:de:93:db:97:29:7f:7a:9e:5e:7d:13:fd:22:88:00:0a:e1:
         d7:12:39:a6:ee:00:b9:80:77:80:fb:70:3c:e6:9c:54:93:fb:
         31:48:22:12:08:07:84:8d:a9:cc:b3:9e:aa:2e:d6:6f:23:ee:
         ca:b2:0b:58:64:6a:ad:0a:44:85:de:ef:fa:d0:b9:66:fd:d4:
         1f:57:08:20:e1:1b:c4:9c:70:bb:e8:4e:f9:2d:16:30:5f:38:
         57:5d:12:e8:7d:8b:e0:b1:ce:5a:9a:a7:b1:29:d0:d3:c5:77:
         4d:27:88:e3:04:2b:bd:73:46:56:bb:a9:71:48:9b:27:a6:03:
         74:7a:78:fe:6a:f6:d9:c6:c2:7b:11:a0:27:b4:98:9d:83:06:
         f5:1d:b5:69:9b:68:75:54:9d:6d:e1:70:3f:14:a6:5e:2a:87:
         27:ad:74:c0:39:5f:1c:31:3b:0b:a7:fd:b4:44:ba:f6:ba:0e:
         1d:05:10:5e:ec:f3:ad:9e:e8:e6:a4:23:3e:36:69:a8:ac:75:
         c3:d5:7f:e6:b8:c4:fc:ba:b1:b1:36:db:a6:b4:eb:b7:75:f3:
         80:76:e7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----