Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File:                     NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier:          ht/Tlu+LgI2LVRCPbybAoeaLjCXFpS+rE4h9wEs3V4c=
Subject key identifier:   AC:3C:EE:99:D8:2E:FA:86:8C:A3:43:D4:BF:1C:97:AB:21:DF:C1:85
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer:       /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial:       01962E98DCAFF2A200415891643D2FE6995B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number:          01F7
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: nqiFLR6Nc0St02BWXcIOI4fPsIraAl0n+WLOiNxZNVI=)
                          2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
                          3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dc:af:f2:a2:00:41:58:91:64:3d:2f:e6:99:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=ac3cee99d82efa868ca343d4bf1c97ab21dfc185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:b5:62:cc:39:3e:e0:44:af:57:0e:84:1a:
                    35:5e:6d:2e:03:5c:10:ba:44:4c:38:57:e2:9f:a5:
                    46:b9:70:ba:0d:41:dc:cd:1b:52:cd:58:04:65:98:
                    54:de:7f:12:be:51:5a:82:10:7c:92:f8:28:d3:c8:
                    1f:8f:89:6e:df:0e:1f:38:ab:c6:50:6a:dd:8f:a3:
                    23:23:31:e5:e0:2c:0d:c4:e7:e9:20:78:12:42:77:
                    ef:e0:d7:36:cb:dc:35:bf:79:85:ee:76:2e:59:b6:
                    4f:13:e2:d1:75:97:b9:c4:7b:b0:bf:d3:4f:db:0d:
                    53:8e:83:f7:d7:f8:c5:a4:8b:92:fc:5c:d1:78:95:
                    0e:dd:f4:bd:62:e3:97:f1:a7:4a:0a:30:ec:c1:8f:
                    0e:89:cd:05:8c:b9:a0:af:02:df:74:3f:06:73:ee:
                    c9:d8:4a:b2:64:e9:b6:54:e3:71:34:86:a6:74:23:
                    c8:50:b0:20:69:ca:80:f3:58:ae:16:07:1b:12:e7:
                    0d:e7:a5:c6:b2:c2:7e:f7:80:98:c1:27:5d:4c:d1:
                    ef:c4:a5:dc:d1:28:0c:69:e6:bb:f6:92:b7:22:30:
                    56:4d:68:24:00:25:ab:39:de:33:a9:6c:f2:22:84:
                    27:ec:18:5c:c8:88:be:d5:13:a4:0d:5e:95:9f:4e:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:EE:99:D8:2E:FA:86:8C:A3:43:D4:BF:1C:97:AB:21:DF:C1:85
            X509v3 Authority Key Identifier:
                keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:27:24:9f:b9:bb:d9:e9:a8:92:4c:bf:a9:a7:11:e0:70:be:
         7c:3c:67:8f:9b:7b:3f:fa:96:e8:ce:ae:4a:7a:4e:d5:96:74:
         23:0c:5f:4f:1c:74:e9:cf:91:dd:e5:c9:93:f0:5e:c7:e3:38:
         98:36:84:b5:3d:a0:52:44:f3:de:3a:36:57:5e:87:d8:79:93:
         9f:a0:03:2f:ab:b9:ca:95:34:64:69:ea:be:e5:12:c7:91:45:
         ba:84:de:51:f2:af:9b:32:ec:65:47:a7:ad:ca:f8:64:fb:6b:
         b9:c3:8f:25:7e:92:21:67:d9:09:e0:32:ad:09:af:fb:38:f3:
         8c:5e:a4:90:42:c4:27:66:fd:6b:9e:f8:6c:1b:1c:e6:4f:06:
         89:38:22:fa:b4:93:d6:ea:41:fc:fc:47:2f:be:33:0b:9e:14:
         37:1d:44:72:2f:fb:af:ec:a3:3d:8d:6c:66:75:ea:9c:6e:e0:
         d5:ec:33:8d:1a:74:3a:d4:f2:98:66:35:63:93:f9:23:33:2f:
         48:a5:12:4f:6a:25:fb:29:f8:aa:09:1f:07:2b:07:38:98:b0:
         ec:84:a0:7e:7a:21:25:e1:70:aa:3c:5f:87:80:b1:c2:f1:0a:
         1f:a1:c0:78:e9:28:8f:70:1a:02:eb:f9:82:1a:bd:9e:bb:ea:
         a9:5f:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----