Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File:                     NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier:          QxmB73t6B3nLOqccKmROb2N3aUtfyf4ghAVWkarR6M4=
Subject key identifier:   FA:7B:7C:AF:F5:0B:3B:87:E3:8A:F0:32:5E:7E:15:16:E6:C1:06:81
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer:       /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial:       01962F0742BF4F92708D607524CBF9C987AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number:          14A9
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: z3twdP2HWSLesdGKYCO9cYnYYEHl/hdRsX2T40sSnh8=)
                          2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:42:bf:4f:92:70:8d:60:75:24:cb:f9:c9:87:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=fa7b7caff50b3b87e38af0325e7e1516e6c10681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:af:08:a1:1d:16:02:53:b3:6a:2b:e3:38:
                    e1:3e:cd:71:eb:db:9c:36:e8:56:c2:8c:cc:c3:ef:
                    24:97:7b:7e:88:84:05:f9:7c:74:dd:b8:ce:37:14:
                    6d:5d:58:9d:ac:e0:89:b9:f8:d0:53:6c:75:1f:62:
                    56:4a:53:2d:dc:51:45:fc:c7:a8:a7:cd:9e:6e:5f:
                    4a:fa:f2:ab:a7:c5:85:4e:19:b8:3d:5b:28:cd:82:
                    23:8f:3a:db:0d:50:64:92:1e:9f:80:1b:e4:bf:f1:
                    cc:9e:9c:4d:34:e5:c3:7e:14:fc:74:db:4a:42:3d:
                    38:4a:e5:a2:7c:66:84:fe:fe:66:43:3d:2d:ad:e9:
                    4f:eb:40:6d:e6:e0:6c:6c:c3:c9:5d:86:49:9a:1a:
                    c6:f8:f1:81:61:1a:c2:8d:5d:9d:2c:9b:0f:27:29:
                    dc:27:cb:35:ac:d7:e2:8a:46:0a:4a:58:e1:61:4a:
                    f3:42:04:6d:10:a7:98:d8:95:52:94:b1:16:d2:d6:
                    88:72:62:b6:f7:f3:90:de:ea:49:bf:eb:50:f4:5d:
                    49:80:b1:51:50:40:07:74:fd:7f:f8:31:1c:ee:e2:
                    8a:fa:76:90:2d:ef:08:61:a2:5a:cc:2e:f0:7b:10:
                    b5:6c:6f:a4:9e:e5:93:ed:42:19:8b:5b:71:20:f1:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:7C:AF:F5:0B:3B:87:E3:8A:F0:32:5E:7E:15:16:E6:C1:06:81
            X509v3 Authority Key Identifier:
                keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:12:46:3a:27:4e:27:25:b3:a4:30:98:b8:b2:83:e7:69:1e:
         4c:9c:70:2c:99:c9:08:4f:7e:53:9c:35:df:91:8c:8c:92:b9:
         33:b7:be:7f:ba:47:89:d7:c5:87:18:7d:51:88:b6:c4:f5:8e:
         6f:ef:b7:92:13:de:4e:c6:c8:47:f6:c8:88:e6:e3:8e:e9:7b:
         32:b5:98:eb:d2:11:b6:cd:85:a7:cc:3a:c1:38:10:9f:39:ce:
         6d:9b:5e:86:47:87:d2:7b:16:12:7d:06:51:b0:a8:29:46:00:
         10:59:48:b2:94:12:33:4a:a0:10:da:cf:cb:f9:78:0f:c6:55:
         fc:17:35:9d:44:e5:a3:dc:ba:ff:b8:9a:d0:de:34:5d:23:11:
         ff:81:c5:cf:a5:85:26:43:5a:22:c0:52:ca:99:7b:dd:59:a1:
         85:1f:08:98:a8:5d:26:59:46:9a:5a:7c:bc:cc:0e:3f:1a:75:
         e7:71:6c:f0:88:89:96:be:fb:66:54:52:b4:e2:93:6a:7c:29:
         c4:da:41:35:63:30:96:ef:d0:a8:b7:1a:c1:46:a9:1e:ba:48:
         bd:d6:c1:d6:68:9b:37:9c:c8:53:61:9d:84:c3:ed:64:59:88:
         16:d0:84:ee:76:bf:7e:3c:45:cb:eb:2d:0c:3b:11:4c:0a:cc:
         5a:74:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----