Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File:                     nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier:          eHY3G4Phcfxh512gSlqcTSeCsBNiceuNmf5qEi7BdMQ=
Subject key identifier:   8B:32:0F:BE:86:D4:8F:4A:EC:BD:9B:D1:E2:9F:51:3E:40:81:C8:F0
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer:       /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial:       01962DF448F243155AEEC3D374F18F419264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number:          0B3E
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
                          2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: HdW1wbkteepAclTj8Kk9qz1oJ3BS4ja3GjIpIXJdY7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:48:f2:43:15:5a:ee:c3:d3:74:f1:8f:41:92:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=8b320fbe86d48f4aecbd9bd1e29f513e4081c8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:62:bb:63:95:06:31:11:a0:62:48:7b:80:87:
                    40:a5:b1:9f:c9:01:8c:7a:a9:7d:f4:8c:4c:a5:98:
                    5d:7d:3c:b8:ff:03:a8:01:26:b1:4c:12:8b:b8:d0:
                    56:0e:ea:f9:4f:f8:71:8d:2c:45:96:71:95:7a:bd:
                    3e:93:0d:c7:cf:29:cd:5a:74:b8:7a:c9:6a:fd:0e:
                    a2:f2:5a:da:d3:2a:22:f4:26:91:33:90:9b:9c:46:
                    7e:5a:fe:e7:20:4e:d8:9d:ab:d9:bc:02:41:8a:c5:
                    07:05:44:e3:1c:de:70:e3:90:86:93:7f:78:49:64:
                    99:dd:94:f0:a0:83:78:2b:63:9a:4f:7e:ed:c1:3e:
                    0e:37:c1:2d:96:12:5d:cf:8b:87:4f:7f:98:f2:8f:
                    db:dc:bf:72:c9:1b:15:f5:95:81:9d:33:83:15:3c:
                    4c:66:5f:d2:c8:39:ac:55:d6:b3:c8:14:e1:05:99:
                    0a:bb:1d:ce:bf:ea:b4:68:ea:26:ec:14:43:f2:49:
                    6a:7d:b5:d6:93:2d:1a:8d:61:9d:14:29:0e:be:26:
                    09:94:f2:d2:ea:8a:fc:de:37:40:cd:ad:5e:c6:61:
                    2d:c6:3a:45:d1:86:98:c7:bd:bc:b6:10:f7:f2:6f:
                    53:bc:c8:9e:0c:96:25:63:16:34:22:6d:9c:5b:ff:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:32:0F:BE:86:D4:8F:4A:EC:BD:9B:D1:E2:9F:51:3E:40:81:C8:F0
            X509v3 Authority Key Identifier:
                keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ca:6b:f7:22:70:d7:e2:f2:69:23:14:b1:bb:de:96:be:62:
         76:1e:8c:21:8b:be:73:0e:a4:f9:6f:b0:55:2a:bc:b6:a2:74:
         62:60:52:4c:75:aa:56:1c:1d:04:e8:82:2a:1b:ba:b2:7b:4f:
         da:49:7b:3c:f1:57:3f:fe:d6:dc:2a:46:dd:8b:b7:8d:01:1e:
         9f:29:00:91:3a:fd:10:b0:6f:1c:ca:f5:f7:ad:f4:b0:54:60:
         83:ca:62:03:ef:3e:02:bc:4e:18:b8:5e:86:5e:cc:0f:50:32:
         e3:46:ba:dd:4c:1b:3e:9f:c7:6e:ec:c9:a1:78:61:2e:d6:ed:
         cf:16:70:df:55:5f:ca:1d:6e:48:23:c6:79:64:58:42:8a:e8:
         58:2f:0d:d6:ce:82:78:9b:65:69:ca:fe:57:1a:63:52:ec:4c:
         b3:31:e3:8f:79:c8:75:32:e1:5d:67:d2:49:f4:dc:6b:2b:4c:
         8a:c3:72:5a:42:98:56:90:e3:8d:54:bc:da:fa:fb:94:e1:6e:
         71:d0:bc:43:e5:2d:91:45:22:4e:af:01:fd:11:1d:95:15:25:
         fe:09:5a:58:03:1a:4b:5e:b8:ae:9c:59:e2:43:b9:cb:f8:ed:
         16:0e:19:8d:a0:64:08:15:ab:56:29:ca:12:2c:5c:50:51:a9:
         6f:8c:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----