Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File:                     NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier:          eh8BmuVp9uPVS/+ZcBgPXOM2zL1TPAw01Rgb6JlyEvg=
Subject key identifier:   56:F4:2C:2D:AA:32:A3:D2:2A:8B:E4:B9:14:FE:D0:79:17:0A:33:B8
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer:       /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial:       01962E99AC87FFFFDBD447E8B66F2B7075FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number:          0E4F
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: TIpchoQmtyNM5OSmjFPE0mMDwEjnc3RpWu3Gf1JpfPc=)
                          2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ac:87:ff:ff:db:d4:47:e8:b6:6f:2b:70:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=56f42c2daa32a3d22a8be4b914fed079170a33b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:ac:a0:c5:ec:bb:bc:d0:77:1c:af:8d:d5:
                    66:67:d1:c8:60:45:ca:fd:cb:f3:5c:1f:8a:7a:0b:
                    a4:d1:da:b0:32:78:53:49:12:06:75:39:c6:51:79:
                    7e:59:f6:8e:f7:5f:cf:dd:cc:73:1b:f0:a2:9c:9d:
                    e9:26:01:06:a8:3e:7f:df:96:38:5c:8c:8f:56:04:
                    a5:fc:83:33:fc:36:97:3e:8c:e9:8c:c5:b4:f8:e0:
                    be:91:3e:70:14:6c:aa:ab:83:b4:de:d8:8e:d5:99:
                    d3:51:37:7c:f2:ce:aa:a9:2c:bd:42:91:5d:e0:2f:
                    6f:8a:80:65:35:c0:64:3a:80:c2:0c:99:ab:3f:b8:
                    28:0d:e7:a7:b5:61:79:61:d5:94:2d:ec:7b:cf:50:
                    15:3c:54:15:35:69:8d:62:89:2e:a0:4b:29:0d:70:
                    e3:2d:c2:1b:59:49:f4:a4:cf:9a:17:75:8e:07:4f:
                    ac:8c:05:77:35:80:e0:e8:75:d5:e3:df:33:b5:9b:
                    e3:97:d8:b7:36:37:15:7f:15:74:7b:cb:6b:da:cd:
                    b6:8b:78:7b:17:eb:31:b1:80:47:68:85:33:1d:1d:
                    49:2a:da:cc:24:4a:a5:79:68:4a:c2:bf:7a:36:f1:
                    9f:20:ad:cf:0c:15:5d:4a:42:39:54:88:a1:62:fc:
                    d5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F4:2C:2D:AA:32:A3:D2:2A:8B:E4:B9:14:FE:D0:79:17:0A:33:B8
            X509v3 Authority Key Identifier:
                keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:ba:18:5e:a9:70:40:95:ef:fc:99:f4:ee:fe:ef:07:b6:
         b8:f6:26:a9:b4:f3:8f:51:5e:fc:f1:cd:0d:56:e7:cb:08:3e:
         1c:bd:6d:02:91:38:4f:94:25:6e:62:0d:0c:f7:04:33:56:e8:
         1c:99:c3:a1:0e:3b:8a:c6:4c:12:f6:65:dc:ca:4d:b7:dc:12:
         38:f3:aa:93:a1:66:6c:f5:1c:94:d6:54:50:8e:dd:1c:1a:9a:
         c7:47:55:24:ec:fc:2d:59:45:ac:d2:97:32:ac:04:40:83:ae:
         80:2c:19:31:d1:6b:a2:17:ae:21:ee:78:5f:09:65:b8:65:76:
         a7:63:be:b1:e2:63:ba:53:e1:a7:59:41:b1:47:1e:e9:61:90:
         22:ce:b2:3a:e8:dd:ec:bd:48:33:1e:bf:17:3b:1b:c8:1b:7a:
         c1:dd:d5:e6:30:af:b2:fc:db:19:d0:0a:05:c4:15:c4:e0:7f:
         6b:3a:fe:3a:50:2b:ca:8f:2e:9c:82:c6:ed:22:f4:25:33:e9:
         19:de:a1:39:8b:78:6a:59:e5:83:aa:65:18:c8:27:9d:79:79:
         f9:30:0d:41:81:e8:eb:4f:6a:94:09:57:51:a3:19:08:a9:a5:
         47:02:be:dc:43:b6:fb:b6:d5:b0:2b:54:7a:68:9d:2d:d1:82:
         c3:c1:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----