Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File:                     NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier:          BHrj+VjwlSGde2R3L9mw70Gvk52NBYHxJctqfr4etPY=
Subject key identifier:   07:44:24:F0:3C:13:BE:7D:A0:21:1A:9B:B5:CE:2C:5D:B8:77:49:EA
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer:       /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial:       01962ECFA011585DB7DF41B1E0ABBF8E9B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number:          0CEF
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: ZNGDVMrxlgdNujJQz0kCN91j2yNi3Fu0gwPoAG6nKb8=)
                          2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a0:11:58:5d:b7:df:41:b1:e0:ab:bf:8e:9b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=074424f03c13be7da0211a9bb5ce2c5db87749ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:f4:37:69:05:64:89:e5:11:bf:9a:db:27:
                    22:c7:c8:63:47:79:3f:4b:85:bc:7b:c2:ec:6b:f8:
                    2d:d3:91:28:5a:1f:82:e4:32:24:98:8a:26:33:bf:
                    e5:4b:93:fb:e4:0b:80:7e:5c:dd:01:10:3e:e3:20:
                    57:24:73:e4:bd:16:cd:54:cb:26:76:56:f8:82:ee:
                    ad:9f:1a:65:dd:fa:6f:a2:9d:59:d9:cb:35:88:c7:
                    3a:c3:6b:4f:4e:51:42:c2:25:73:2e:c5:1e:bc:f9:
                    b6:3f:4f:9a:2a:ea:94:ab:55:7f:77:f9:18:9c:48:
                    cc:65:b0:62:00:0c:bb:02:59:3e:51:da:1a:64:24:
                    18:86:5d:bf:dd:51:cb:31:23:fb:74:07:a8:46:a7:
                    91:2b:59:c2:7b:eb:71:84:d1:9d:de:0a:e7:31:73:
                    84:31:6a:dd:62:81:7c:c5:7b:47:2a:9a:ab:c2:ab:
                    42:f7:5c:a7:b1:8b:31:11:4c:5f:1c:f1:b3:33:16:
                    17:5b:de:78:a7:65:ea:19:74:20:1b:21:e3:71:ae:
                    0f:61:14:95:d4:68:7c:45:41:d5:d4:19:6d:e6:59:
                    a9:75:a8:9b:df:f1:99:5e:7b:b0:9b:be:26:38:b8:
                    df:d6:c0:66:a5:c5:77:83:6b:0b:21:80:12:a1:8c:
                    48:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:44:24:F0:3C:13:BE:7D:A0:21:1A:9B:B5:CE:2C:5D:B8:77:49:EA
            X509v3 Authority Key Identifier:
                keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:19:25:d3:3e:98:52:4b:5b:3e:5c:6f:76:a0:06:62:b9:9f:
         66:48:e7:81:b1:c1:82:c4:37:42:c8:0b:82:f4:01:19:35:19:
         6b:50:f8:08:5e:f2:1b:f5:11:b0:f4:5a:c3:a9:db:aa:36:f7:
         61:31:aa:c2:af:87:4d:94:b0:f8:e2:31:04:e3:9f:6a:c3:f6:
         96:0a:45:3d:d5:75:6c:84:b2:ed:d6:b3:c2:bc:31:f3:81:b1:
         8c:13:f1:32:ec:3b:81:ff:47:3d:e0:c2:da:89:60:fe:dd:48:
         40:a0:16:0d:d0:18:14:9c:e6:85:32:ff:23:fd:76:b2:06:05:
         77:1d:95:3c:92:30:87:20:26:e3:90:29:76:03:ab:88:fa:64:
         3b:8b:02:60:b3:43:96:ce:82:77:00:c0:94:21:de:ba:79:2e:
         6c:d3:a7:05:c9:df:21:ac:30:92:f0:ba:a0:65:4c:bd:2a:71:
         18:06:bb:a1:05:7d:4b:3b:be:6e:c3:51:f0:a1:3e:07:71:cc:
         b2:10:03:bd:79:cc:70:be:62:b9:02:95:ff:4e:88:a6:ab:af:
         89:fd:bf:1c:f7:1d:a1:9f:11:bc:29:b0:5a:aa:9e:a8:5e:42:
         4a:7e:7e:c4:d3:64:7c:a6:0e:8f:0b:e3:f2:a1:84:00:72:aa:
         fc:6b:e7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----