Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File:                     NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier:          5jgdB23D5L6mn5iIxa6YRZiCCvHUX0Le927Hw1Pdpkk=
Subject key identifier:   0C:42:1F:C1:A4:F5:98:72:4F:D1:A0:93:A8:17:2A:38:E6:E3:1D:1D
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer:       /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial:       01962F74E9B94A3DB3D4AD77468AFB658F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number:          1219
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
                          2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: Te+xqjqbz1pTrmc65awUgj1vsxgj4uq84r2UUHslm+k=)
                          3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
                          4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e9:b9:4a:3d:b3:d4:ad:77:46:8a:fb:65:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=0c421fc1a4f598724fd1a093a8172a38e6e31d1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:3b:c2:ef:45:7f:02:07:db:74:11:b0:83:
                    bd:df:1a:b9:4f:64:c2:ea:a3:4e:a6:59:42:fb:4a:
                    d4:f4:ba:7d:cd:e3:62:76:6a:02:f9:af:cb:5b:3b:
                    80:3b:4c:01:70:0a:a5:70:09:f6:ea:65:27:d2:54:
                    ee:90:92:32:8f:06:d7:a9:41:dd:ca:27:ba:8f:8d:
                    b4:3e:59:2e:3b:aa:df:e3:a6:65:83:12:e3:3f:bd:
                    2d:d8:83:23:b8:68:34:1c:95:d2:4f:8d:73:7b:0f:
                    28:15:0c:f6:d4:e5:06:d2:8b:a2:43:98:2c:67:05:
                    8f:de:58:04:19:0a:a5:c3:3f:19:40:e6:b1:c6:86:
                    b1:d0:b3:a1:da:d5:05:8f:d3:6c:58:d5:0f:c8:ff:
                    da:44:5f:e2:49:29:90:9e:d8:82:79:99:62:55:db:
                    15:d7:28:4e:52:1c:2e:41:2d:9a:a0:1d:49:5b:d2:
                    a6:33:20:4c:33:26:b9:f6:0c:4f:ad:3d:7f:6a:50:
                    22:ac:62:ea:d3:cf:21:e5:4a:aa:1e:cb:eb:76:ab:
                    8d:7c:d7:d9:3e:6d:c1:58:ab:6f:5a:f7:79:3a:3f:
                    57:35:5f:07:aa:45:73:b5:c4:e5:75:22:07:96:c7:
                    6b:f6:0f:7e:d2:ef:c9:15:c1:10:74:fc:55:5b:53:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:1F:C1:A4:F5:98:72:4F:D1:A0:93:A8:17:2A:38:E6:E3:1D:1D
            X509v3 Authority Key Identifier:
                keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:74:13:3a:94:01:ba:1f:ed:4b:09:2e:89:0d:d7:15:ca:
         ed:09:45:87:ec:f0:75:5a:34:50:38:7c:9a:4b:2a:b8:57:76:
         9e:2e:05:19:b5:46:6f:64:62:dc:7d:86:19:bb:83:8d:46:10:
         4b:93:37:1b:d4:e4:34:7b:c6:53:13:f3:67:43:bb:96:2e:1b:
         c1:59:56:b1:62:95:32:35:5a:4d:cf:99:9f:4a:76:77:86:12:
         b0:9f:09:21:3c:67:ef:f7:8d:d2:e8:01:fc:11:5b:88:c5:c4:
         5e:86:c6:e0:be:1c:9d:96:a6:b2:3c:4c:0e:c5:4b:38:07:d0:
         88:4e:2a:b3:7e:c2:65:56:f6:5c:c3:14:f9:87:78:e4:90:ef:
         da:98:8e:73:9c:c9:73:59:38:80:4f:1b:3d:ca:11:ed:a2:b9:
         b9:e0:3b:bc:89:14:bd:73:f4:23:d3:fc:76:9b:b9:14:92:85:
         1e:a3:23:1d:df:53:fe:d7:89:9c:6e:1b:fd:43:cf:64:f8:30:
         27:8f:c9:34:59:64:11:d5:42:17:be:6e:17:ae:b5:19:70:bb:
         ce:f3:c1:59:b6:3e:9e:4d:dd:f7:00:e2:8b:0b:7f:53:ed:e7:
         29:49:9d:f1:9c:3a:a1:2b:ce:2a:35:19:e9:11:b8:23:66:b8:
         8d:18:8c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----