Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
File:                     NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft (raw, json)
Hash identifier:          ActNDsTR//fGrzqiGcGc0QPdo9xOb6gWTM7h1mLA0+M=
Subject key identifier:   03:F2:40:3D:43:0A:53:9D:63:73:49:16:FE:23:9C:87:1A:E3:2B:A5
Authority key identifier: 36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18
Certificate issuer:       /CN=36a1daece1c6e878546dbd1333da09feb8bff018
Certificate serial:       01962E2B040B50DADD11B226B5880BEE2C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft
Manifest number:          0203
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl (hash: /XeKoeIzQBmxa/PyQDf4E2AOd4z/fCcrlZY0Rpj9170=)
                          2: v9WYkBz15RpwA0n7rXgCIDyTPvU.roa (hash: vUv7k6coWvAmWrqVuPUy83SA1mmkmDGBast/PkGxxu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:04:0b:50:da:dd:11:b2:26:b5:88:0b:ee:2c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a1daece1c6e878546dbd1333da09feb8bff018
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=03f2403d430a539d63734916fe239c871ae32ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:e3:b3:ab:fb:ab:36:12:c3:16:e0:52:b2:
                    dd:7b:cf:90:ac:d9:33:13:a7:05:a1:53:60:0b:25:
                    32:41:c5:7f:89:fe:49:3b:5a:e9:03:e3:26:42:cf:
                    72:1e:12:44:8d:09:2d:1d:d4:6f:35:21:06:c3:ed:
                    43:d7:9b:0c:86:05:28:ef:a3:e1:c4:45:7a:31:a2:
                    46:c9:6b:e1:a4:65:1b:ed:b7:a7:f2:60:72:37:48:
                    06:92:a3:6a:28:81:52:2f:bd:fc:4b:aa:d6:91:66:
                    06:b5:b8:94:8b:9e:48:01:22:35:8b:ba:96:e8:fa:
                    56:e8:8d:28:a1:22:5b:32:1c:6e:c0:04:54:df:cc:
                    b7:9c:d1:d5:b5:78:86:1d:a0:d3:ec:0f:0f:2f:ab:
                    5e:78:c6:3c:1a:6b:da:1e:5e:e2:d9:eb:a4:1c:5d:
                    99:a7:d7:fc:00:52:7f:12:fb:14:86:1f:1b:4d:23:
                    ae:b4:ef:7b:3f:0f:6d:56:96:5c:f8:7e:fe:b3:33:
                    70:3f:d5:fa:bf:48:c1:c7:cf:52:7f:8a:5b:2f:12:
                    d6:fb:54:e0:7e:ea:e2:f3:3b:78:e3:fe:14:0a:27:
                    4f:45:10:c1:a3:46:34:89:64:bb:cb:db:44:b8:b4:
                    5b:f4:72:0f:28:d8:74:12:5d:3b:42:38:dd:fb:8b:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:40:3D:43:0A:53:9D:63:73:49:16:FE:23:9C:87:1A:E3:2B:A5
            X509v3 Authority Key Identifier:
                keyid:36:A1:DA:EC:E1:C6:E8:78:54:6D:BD:13:33:DA:09:FE:B8:BF:F0:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/745c65-b877-45f2-b898-b30b0e5265a8/1/NqHa7OHG6HhUbb0TM9oJ_ri_8Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:25:ab:02:97:04:8b:64:3a:13:ab:82:db:c4:bc:73:b1:43:
         16:c1:f8:4d:32:95:e2:9a:e1:7e:56:e9:00:83:38:b3:8b:b2:
         f0:fe:30:86:2c:9c:92:b3:69:71:b2:ce:d3:53:a3:56:f2:4a:
         69:f8:02:07:9a:bf:52:de:25:07:ae:2f:9f:67:ea:77:93:6f:
         87:16:0f:1a:5f:6f:66:b4:cd:b3:d2:06:16:b9:8e:0f:44:19:
         24:63:76:e7:f5:77:9e:11:ba:39:08:5e:b6:f5:4b:18:5f:e0:
         db:e0:3e:0e:8a:8d:e5:fb:91:28:2c:20:76:01:ae:a0:bf:36:
         17:95:e5:5c:0c:79:2b:87:7d:8e:04:27:37:01:b6:e0:a6:96:
         95:0c:2f:40:1a:23:32:45:d9:58:dc:56:0c:a4:9e:50:03:9a:
         bf:bb:36:35:35:b4:82:32:f6:04:da:f2:d2:94:f8:31:72:5d:
         b3:4b:7a:b8:ef:88:59:dd:d7:9c:68:21:e6:15:26:4b:75:69:
         cb:7e:7d:a0:4d:de:00:a3:79:9a:15:5a:6b:0a:07:1a:99:a3:
         ff:d1:8f:f7:8b:1a:57:7f:6b:8e:63:80:dd:b0:c5:9c:8b:ed:
         d6:24:cd:5c:80:30:17:71:b6:79:64:0c:14:12:58:02:1d:3e:
         a2:28:dd:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwQLUNrdEbImtYgL7iyKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YTFkYWVjZTFjNmU4Nzg1NDZkYmQxMzMzZGEwOWZlYjhi
ZmYwMTgwHhcNMjUwNDEzMDgwMTMyWhcNMjUwNDE0MDgwMTMyWjAzMTEwLwYDVQQD
EygwM2YyNDAzZDQzMGE1MzlkNjM3MzQ5MTZmZTIzOWM4NzFhZTMyYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05/js6v7qzYSwxbgUrLde8+QrNkz
E6cFoVNgCyUyQcV/if5JO1rpA+MmQs9yHhJEjQktHdRvNSEGw+1D15sMhgUo76Ph
xEV6MaJGyWvhpGUb7ben8mByN0gGkqNqKIFSL738S6rWkWYGtbiUi55IASI1i7qW
6PpW6I0ooSJbMhxuwARU38y3nNHVtXiGHaDT7A8PL6teeMY8GmvaHl7i2eukHF2Z
p9f8AFJ/EvsUhh8bTSOutO97Pw9tVpZc+H7+szNwP9X6v0jBx89Sf4pbLxLW+1Tg
furi8zt44/4UCidPRRDBo0Y0iWS7y9tEuLRb9HIPKNh0El07Qjjd+4tNvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPyQD1DClOdY3NJFv4jnIca4yulMB8GA1UdIwQY
MBaAFDah2uzhxuh4VG29EzPaCf64v/AYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgt
YjMwYjBlNTI2NWE4LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83NDVjNjUtYjg3Ny00NWYyLWI4OTgtYjMwYjBlNTI2NWE4
LzEvTnFIYTdPSEc2SGhVYmIwVE05b0pfcmlfOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiWrApcE
i2Q6E6uC28S8c7FDFsH4TTKV4prhflbpAIM4s4uy8P4whiyckrNpcbLO01OjVvJK
afgCB5q/Ut4lB64vn2fqd5NvhxYPGl9vZrTNs9IGFrmOD0QZJGN25/V3nhG6OQhe
tvVLGF/g2+A+DoqN5fuRKCwgdgGuoL82F5XlXAx5K4d9jgQnNwG24KaWlQwvQBoj
MkXZWNxWDKSeUAOav7s2NTW0gjL2BNry0pT4MXJds0t6uO+IWd3XnGgh5hUmS3Vp
y359oE3eAKN5mhVaawoHGpmj/9GP94saV39rjmOA3bDFnIvt1iTNXIAwF3G2eWQM
FBJYAh0+oijdNQ==
-----END CERTIFICATE-----