Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
File:                     NXMLuLJiPn9lphY2BNHIX5EGKI8.mft (raw, json)
Hash identifier:          4Q1Fdu3NHWSRa+rhm+q5DUgdVo5fbVLHf3nGUFZUq6k=
Subject key identifier:   B1:B2:B5:4A:A3:75:DC:0D:0A:BF:93:53:64:65:80:13:2B:A3:0A:88
Authority key identifier: 35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F
Certificate issuer:       /CN=35730bb8b2623e7f65a6163604d1c85f9106288f
Certificate serial:       01962FAB39D7F56923292D63AE36051E71CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: 3u_UTWM5MnsnNlqUobIqKDYLwKo.roa (hash: veRRLy9ZMKOvJkYp1WIUbOdpjqnYEIFrYe5fkHyfQnc=)
                          2: NXMLuLJiPn9lphY2BNHIX5EGKI8.crl (hash: fg6PgSFQWO5PAS5+XpCIWEvkWkFdiY5KDdppYwaGLfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:d7:f5:69:23:29:2d:63:ae:36:05:1e:71:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35730bb8b2623e7f65a6163604d1c85f9106288f
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=b1b2b54aa375dc0d0abf9353646580132ba30a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:f8:10:7d:e7:52:40:39:2b:30:d1:88:99:
                    c5:5c:d8:57:c5:2e:61:f9:1e:bd:d6:63:9e:59:9b:
                    4a:15:01:b6:9e:3d:83:c3:f7:82:c9:c9:83:c7:af:
                    e7:a7:78:0c:cc:70:e5:04:ff:e1:bf:01:a7:1a:e8:
                    41:94:e9:71:8d:25:82:8a:55:4a:3c:50:a4:82:f0:
                    68:12:0e:5a:30:f2:3e:c7:a0:21:e6:e0:cd:ac:82:
                    11:90:cd:3f:7e:f5:a4:be:7f:60:f5:51:65:9d:9c:
                    ab:0e:ca:da:dc:da:76:1e:3b:d5:b9:32:ab:80:28:
                    2c:89:25:c6:27:d1:ab:ef:28:55:e2:e7:f8:bc:b5:
                    1f:1a:22:bf:30:75:a8:32:0a:63:ef:51:b4:1c:1d:
                    1e:9b:4a:42:8f:44:46:0b:5e:49:0d:9c:91:fd:5c:
                    9a:a4:f2:8b:71:e4:80:ca:40:7d:53:b4:df:a3:a0:
                    19:8a:11:50:15:d6:24:58:37:22:71:19:d2:05:fa:
                    9c:3a:21:9c:d8:fa:80:f5:ba:74:d0:17:ef:a0:5a:
                    55:7b:f3:f5:76:27:b6:88:0f:b4:c5:3c:82:43:62:
                    45:31:48:a3:31:0f:ea:98:0e:7e:36:8f:0c:2a:82:
                    39:ff:19:5b:9e:62:dd:bc:f7:2a:f0:4d:c6:2c:58:
                    28:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B2:B5:4A:A3:75:DC:0D:0A:BF:93:53:64:65:80:13:2B:A3:0A:88
            X509v3 Authority Key Identifier:
                keyid:35:73:0B:B8:B2:62:3E:7F:65:A6:16:36:04:D1:C8:5F:91:06:28:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXMLuLJiPn9lphY2BNHIX5EGKI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5c5138-aee4-482c-913c-3a4dff8e8ded/1/NXMLuLJiPn9lphY2BNHIX5EGKI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:ac:70:8b:5c:fb:e2:8b:87:5f:9c:b9:eb:47:19:49:cd:
         6d:f0:f1:02:85:c7:34:87:8a:e2:35:ed:2c:e7:48:c0:73:b6:
         db:2c:0d:46:7d:6f:37:5b:f9:8f:5a:ef:32:f0:ab:13:2b:8d:
         31:c3:f3:ca:95:e2:d6:2d:d2:ea:7c:99:7f:2f:78:74:b6:8a:
         6d:64:4f:33:0d:cb:d4:75:1c:b5:10:de:17:ac:08:cb:78:43:
         20:8d:a1:2d:a7:1a:18:03:59:79:65:eb:7a:cd:97:c5:34:86:
         44:57:24:30:6b:0b:0b:e3:bf:c5:d9:ea:50:66:98:22:fe:32:
         ac:51:eb:d8:43:d9:e3:8e:30:b2:bb:1a:5a:6e:05:9e:d2:fd:
         ed:0f:b3:0c:d5:f5:66:c6:bc:82:bb:f0:c5:16:e5:c8:a8:c8:
         ea:3b:d1:d8:da:95:ef:db:7f:ad:76:dc:f8:00:14:1e:df:4d:
         24:f0:83:91:19:56:53:74:22:23:79:2e:df:27:85:f5:a1:49:
         3a:97:d7:f3:a6:9c:1a:77:43:e1:df:37:28:1a:8c:f3:d4:83:
         56:20:95:cf:e2:35:20:7a:bd:5c:4e:ae:85:f0:28:05:eb:36:
         38:f6:cb:26:ab:7d:00:4b:1a:d3:19:78:1a:bd:74:55:cf:37:
         3a:78:a8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----