Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
File:                     Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft (raw, json)
Hash identifier:          1BfmJx4NiRD80ImcAlMYhOSWK5cBVqaTTL82No/DlYM=
Subject key identifier:   AD:3A:A9:C8:F6:B7:69:67:5F:62:4D:D0:E9:F9:85:FF:F0:B2:4B:F4
Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Certificate issuer:       /CN=3618be04417a6bcb9f33942a631518be533ffaf4
Certificate serial:       01962DF3D262FB5139EA03564CE6B9DCE9AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 8JFEQ15V1WkFsHsLCpH1WN9k3hk.roa (hash: S3+H2pUWxDExgmiMXa3i+Ddat9VWGJWFmy60af4zAEw=)
                          2: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl (hash: EgsRIwEVXHbCdXp9iyle0WyaZuYbeZPtF6JVLnWSqK0=)
                          3: m_yuF_gKCaNoEVKUC8-fWWQ7lec.roa (hash: T7vZt2YpwQuwzPcw42BsApEdPgoH6UgHCbnE4qt5NfM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d2:62:fb:51:39:ea:03:56:4c:e6:b9:dc:e9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=ad3aa9c8f6b769675f624dd0e9f985fff0b24bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ad:33:6e:52:b6:3f:33:79:e1:d5:a5:01:b7:
                    35:71:66:91:b7:36:fa:7d:a9:6e:df:a3:3b:ad:95:
                    1e:96:b0:d2:08:27:55:b6:78:ec:ca:6c:89:6b:9f:
                    27:04:3e:c6:44:12:8a:20:50:12:28:36:d5:1a:4a:
                    32:11:b5:06:72:16:21:1b:da:d5:61:18:9a:83:a7:
                    b9:47:bf:9a:30:15:f6:cd:27:00:9d:58:1d:fc:70:
                    0f:c9:71:0a:71:d0:b4:73:6f:0b:c4:77:77:e7:aa:
                    48:7e:d4:b9:e6:81:31:02:e2:ec:58:44:c0:84:57:
                    80:28:ac:b3:36:72:ca:db:de:64:ad:b2:6e:2e:3d:
                    10:40:27:70:eb:f2:de:84:1b:44:d0:d3:01:c2:0f:
                    c3:18:60:be:0b:76:48:af:e1:59:5b:e8:ff:5e:7a:
                    f0:8f:3c:71:c9:f8:19:b5:64:f6:b3:9f:e2:c6:bd:
                    60:2d:b3:fe:43:66:42:b3:c4:dc:30:68:01:31:2b:
                    b0:17:bf:24:da:0d:d4:9d:87:88:6a:06:2c:46:33:
                    9e:e2:87:a9:7f:41:24:fa:d2:2a:ee:b4:3e:99:9a:
                    cf:17:f8:32:b3:bb:40:67:15:cc:17:b4:55:38:5a:
                    67:60:32:40:a7:d3:e9:f0:2c:1a:12:43:06:d9:07:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3A:A9:C8:F6:B7:69:67:5F:62:4D:D0:E9:F9:85:FF:F0:B2:4B:F4
            X509v3 Authority Key Identifier:
                keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:f3:bf:78:40:cb:59:3c:c9:c0:3f:54:52:16:59:fa:29:
         51:5c:9a:fd:1b:7f:ca:3f:20:b3:89:79:dc:ef:2d:79:66:12:
         03:b3:dc:57:78:9d:de:ee:41:9e:4c:89:ac:9f:12:f9:76:66:
         b9:23:e0:d8:54:bd:0a:e5:79:b7:f2:87:3d:29:b2:47:b7:b8:
         e8:de:5f:4c:7a:6a:c6:c5:c4:bb:ef:01:67:d6:7e:ee:da:6d:
         f6:91:df:32:bd:f2:fd:22:46:54:fe:c1:a9:8e:80:68:f8:b8:
         f0:15:8c:ee:c9:c9:7b:4d:fc:28:78:0a:d9:4d:f8:60:ff:eb:
         d9:53:68:54:f6:55:c2:4a:12:3c:12:f5:f1:1a:71:0e:59:3b:
         b7:89:bd:6f:32:9b:da:8c:0a:78:1b:c4:a9:37:97:b3:c4:a8:
         63:a4:df:0a:13:f0:6f:0d:02:b4:ba:01:a6:b3:83:7f:82:d1:
         cd:95:5b:cd:61:d3:66:60:b4:4a:3d:80:da:88:80:a5:09:0b:
         26:30:dd:fc:07:ac:d0:dc:b6:20:95:09:92:ac:9a:b5:a7:ab:
         ba:05:50:32:81:dd:5b:f4:02:bf:31:87:6f:8e:0f:1c:81:e8:
         0a:e0:7c:6d:d7:45:ac:72:5e:ca:ba:32:39:48:51:8e:66:74:
         2a:d3:9a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----