Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File:                     Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier:          s+Eu6dHlXfkWvccdZzHRdUeCb62kXmS6NxrMdRNgQ+s=
Subject key identifier:   D8:D8:87:3F:50:4C:42:95:7E:FF:F9:FF:F6:07:7E:4C:40:B5:CE:E3
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer:       /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial:       01962F0648802090AEDD89C57AFD4CBDC514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number:          03CA
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: Jhc6bBs1+i530Y67TLdfu0nRv6SxZN2MLw1fRKeJzwE=)
                          2: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
                          3: gZkzIGBCOcCNiXUZazqSYQeGbpg.roa (hash: SNGs7fhDLTyLRk6mGoAtMtemcP7ESy0f3pn7nCib2+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:48:80:20:90:ae:dd:89:c5:7a:fd:4c:bd:c5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=d8d8873f504c42957efff9fff6077e4c40b5cee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:b3:ea:ac:21:cd:6f:23:45:55:79:97:9d:
                    78:8d:3b:6f:28:0b:42:15:88:27:34:2c:14:79:b2:
                    5a:b6:0b:d9:d6:ba:ff:b5:54:ed:ca:82:32:1e:a3:
                    14:c4:78:b6:d6:ce:49:93:af:b0:a2:5b:1b:74:0a:
                    e8:83:82:54:43:55:50:cb:d8:57:10:90:85:50:db:
                    6c:c4:33:b5:0f:da:1b:eb:37:f8:98:65:bd:48:f5:
                    c0:77:a2:2a:d3:0f:0e:57:09:8c:d4:65:de:65:9d:
                    f1:67:0e:ee:99:ab:ea:45:0f:6f:f5:2f:25:59:94:
                    35:58:d0:7a:55:b6:e3:b3:18:24:c6:8a:de:95:7d:
                    35:e0:b4:e8:54:0a:ed:94:8b:ff:69:f1:bf:a0:80:
                    d7:35:e5:8d:10:69:2d:47:53:55:2b:c5:9c:e8:e9:
                    47:f6:54:26:60:42:30:30:dd:2f:c1:8f:da:c3:03:
                    e5:1b:01:6a:c2:36:27:b6:7f:cb:e9:cb:c9:3b:46:
                    2b:e9:8f:a4:b2:46:9d:02:ec:5a:95:53:57:22:90:
                    0f:43:72:4f:df:f6:0a:1a:d8:01:74:a0:89:21:63:
                    22:83:8e:44:ea:a4:4b:af:ae:91:66:73:48:62:e9:
                    aa:15:ca:97:1e:24:34:55:57:42:79:b4:2a:d0:07:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D8:87:3F:50:4C:42:95:7E:FF:F9:FF:F6:07:7E:4C:40:B5:CE:E3
            X509v3 Authority Key Identifier:
                keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:68:8b:f1:02:9d:e4:0e:a1:de:43:47:7d:11:95:17:1f:bc:
         e7:5d:e4:3d:4a:e9:67:99:dd:ca:d7:7c:90:83:af:d8:4a:6c:
         2c:a2:ba:3f:52:79:a5:5f:a7:ec:4b:12:a4:37:06:e7:ca:06:
         82:fd:b1:25:14:4c:48:c9:e4:cf:52:0b:6f:3e:21:3d:09:50:
         57:50:6c:df:f9:f9:c6:f8:90:25:7b:e4:e3:7d:91:8a:7d:d2:
         34:e8:6c:55:a7:a4:0a:76:ef:52:ad:72:7f:6f:7a:18:0b:96:
         8b:ec:3a:cf:c4:00:93:b1:8c:01:bd:47:a1:3e:6c:97:da:ef:
         3e:c5:f3:3d:ac:e9:48:4e:e8:71:9c:9d:e1:1b:f6:e6:e5:3d:
         82:17:f6:12:51:af:75:ff:8d:5f:30:91:bf:af:90:f8:08:02:
         a3:22:ed:6d:a9:6f:13:b7:bd:03:7c:0a:39:eb:ac:f6:23:01:
         81:58:23:fe:1a:ae:5a:17:c6:df:5b:0b:71:52:f3:0f:b0:75:
         e4:c1:55:78:fd:be:0f:27:2c:88:04:2a:cc:f9:81:9a:47:55:
         9f:c8:b5:e1:84:3e:de:1f:08:2f:d0:72:cf:5c:c9:4d:6f:a0:
         8e:e5:8e:e4:cb:37:6a:43:ea:76:8e:b8:b9:e4:26:de:0c:8c:
         71:e6:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----