Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
File:                     NrEA4fbz_-bjXph-DQGVt5k6jTM.mft (raw, json)
Hash identifier:          H/Mjlk7Iyc9q57wtDBIE2bQYqimoubERFkO7teH8AMs=
Subject key identifier:   2A:19:AA:61:B8:5D:9E:6F:E1:69:F8:2B:E9:5A:DD:23:58:BC:ED:9A
Authority key identifier: 36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33
Certificate issuer:       /CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
Certificate serial:       01962F3DC1190D03B01230A2DFDD9A4B9E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: KwzLAJFh9AChcSwdy64vpYAmPMw.roa (hash: gKP8z3trUWmnbUH4Fi3xjFDbQv59f3+z5G16CBeShsM=)
                          2: NrEA4fbz_-bjXph-DQGVt5k6jTM.crl (hash: VB9GwMrNki3c+APRLORY2fnbGbDfoQJEleLQTd5AFr0=)
                          3: xgRFqxuYECy3s3qxM6WfghCOWpk.roa (hash: C6vhgdbkPh06biK8G7xaWybwcmLZK2bGK2ryBwYlob0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c1:19:0d:03:b0:12:30:a2:df:dd:9a:4b:9e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b100e1f6f3ffe6e35e987e0d0195b7993a8d33
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=2a19aa61b85d9e6fe169f82be95add2358bced9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:f5:7c:ab:6e:1f:69:0f:6f:2e:a0:f7:15:
                    ef:36:82:0b:6d:7c:04:a9:d5:6a:19:66:d0:34:10:
                    54:8d:ce:67:8f:77:f2:5f:dc:68:22:04:de:f3:b8:
                    1e:3f:0c:3d:96:65:07:d0:6f:bc:2d:7c:2b:64:70:
                    d3:df:0e:51:32:3b:28:0c:01:e1:43:c6:ef:0a:4c:
                    af:2f:c5:d0:bd:6c:bf:dc:fa:e4:c8:fb:36:28:f5:
                    8b:a5:d3:84:03:dc:94:39:78:f9:33:d4:4d:a6:0c:
                    f6:9f:d3:6b:bf:6c:99:55:be:60:c0:4c:e7:f8:b3:
                    7d:c4:c3:bd:0d:d8:dc:cf:94:5d:90:ac:26:3f:9b:
                    b8:b3:1d:08:f4:ce:cd:c9:d2:f4:c1:ff:09:5e:15:
                    db:c8:62:65:bb:83:d0:a5:08:c3:a7:8b:eb:37:c2:
                    ff:eb:c7:1e:17:13:0e:34:70:14:22:e4:70:a0:cf:
                    83:c0:ff:3c:02:c9:f6:c7:52:f2:11:68:40:04:60:
                    f0:6d:ae:89:19:8f:6b:6e:9b:21:c8:8a:09:0e:03:
                    76:7d:df:30:3a:23:01:a0:5c:0c:d0:56:36:60:58:
                    7a:78:67:fb:00:21:2e:67:a6:1c:5f:72:31:4b:81:
                    cf:f2:81:ec:7c:1a:7c:e7:7d:d0:91:3a:eb:47:9a:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:19:AA:61:B8:5D:9E:6F:E1:69:F8:2B:E9:5A:DD:23:58:BC:ED:9A
            X509v3 Authority Key Identifier:
                keyid:36:B1:00:E1:F6:F3:FF:E6:E3:5E:98:7E:0D:01:95:B7:99:3A:8D:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrEA4fbz_-bjXph-DQGVt5k6jTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/71338d-e603-4926-a0f4-e22c6ed78485/1/NrEA4fbz_-bjXph-DQGVt5k6jTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:51:cd:7b:27:f4:85:c7:24:92:c7:db:aa:07:73:8a:ba:
         a0:a9:cc:15:7e:5b:7c:78:6d:b7:50:20:5f:7e:9c:c4:0e:f8:
         89:48:13:62:29:e0:4b:56:f4:47:0e:e0:7d:bb:1d:b8:8b:08:
         20:8b:c5:ff:a0:4e:6b:70:1a:65:13:56:ca:35:c4:bc:de:98:
         cc:6b:0f:60:84:e2:21:bb:94:bf:3b:e9:d8:ef:dc:91:b3:0d:
         36:2f:f3:03:a9:c5:dd:32:16:f3:70:47:6d:07:47:ab:f4:a8:
         7d:79:c5:0b:ae:d6:9e:23:14:a4:83:3c:c9:44:33:7a:62:dc:
         49:79:39:7f:60:49:6a:cc:c3:5f:41:a6:18:70:50:80:d7:37:
         35:1b:59:d4:76:11:8c:21:ef:bd:a7:d2:4a:73:f3:a4:c5:9e:
         b6:a6:ed:1d:9f:a5:c3:08:97:e7:5b:f6:0d:05:ca:72:9d:41:
         dd:e1:2c:3e:a9:65:b7:e0:a1:c0:2a:90:09:b7:55:7a:1b:25:
         12:ed:e7:01:d9:d2:84:fb:fd:d4:e1:3f:94:7e:69:27:18:9c:
         54:e7:56:43:33:04:12:5e:26:1f:bc:8c:1a:35:0e:b5:24:4a:
         e0:0b:2a:d4:62:e1:45:38:76:24:5b:b5:f8:5d:03:d9:95:3d:
         dd:9d:c2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----