Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
File:                     0NbmVQW09OT08x2QuLIaOnz7Dr8.mft (raw, json)
Hash identifier:          XHqM5XoGnxfABdEexoeQAb5bJyJn8GqvJHywpvrSfgk=
Subject key identifier:   A4:24:B2:62:9B:A6:16:48:43:52:E1:4A:83:78:BD:7B:3F:EB:F2:57
Authority key identifier: D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF
Certificate issuer:       /CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
Certificate serial:       01962E61F8F896E868A0112EDC03FD9A9BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft
Manifest number:          0A5E
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 0NbmVQW09OT08x2QuLIaOnz7Dr8.crl (hash: G0FPNGEWhAAhUxFtd23bKdlvUXRpzIgW9FMMqwk4R9E=)
                          2: RLT9vWKmEAqKt6hEtNsyMWI1h0c.roa (hash: xBu31AarPg6SaGrJFYKlAHmm3Mw8LW1iAP2FYDxCvXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f8:f8:96:e8:68:a0:11:2e:dc:03:fd:9a:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0d6e65505b4f4e4f4f31d90b8b21a3a7cfb0ebf
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=a424b2629ba616484352e14a8378bd7b3febf257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:0a:ae:05:83:63:47:1c:7a:2a:6d:77:9f:
                    c8:f5:29:58:4c:22:f8:ff:41:30:82:57:03:11:06:
                    3f:78:8b:2e:37:01:fa:5c:36:c5:12:84:62:76:9e:
                    85:bc:13:44:e3:e3:3b:57:94:a2:13:ca:ae:6b:a9:
                    e3:1d:a7:43:cb:f6:98:5c:54:31:49:f0:e5:70:c9:
                    59:e2:4b:48:f8:11:55:6c:a4:f0:dc:ac:12:12:70:
                    d4:04:93:59:c3:dc:e5:57:1d:04:ad:26:b5:a0:6d:
                    6a:40:81:c2:bd:af:24:2a:9d:98:19:4f:eb:cb:32:
                    50:17:78:40:a6:37:3d:48:a7:cb:e4:d2:e2:af:83:
                    a7:23:90:2e:6e:4c:13:3f:ff:96:3e:0e:d2:92:1f:
                    0e:be:0e:9a:fc:61:86:f2:70:1e:6a:e3:96:55:2c:
                    38:e5:a8:5e:0b:82:1f:bd:18:4e:c3:e3:70:d1:98:
                    14:e2:3f:f3:1e:cb:5b:dc:87:d2:5f:3e:ea:54:fc:
                    ca:96:1b:a4:71:d2:a3:09:d3:4d:bc:f5:2b:7c:a1:
                    59:d5:ab:21:68:4e:6f:08:b6:39:82:c2:92:44:08:
                    fe:b6:19:4a:0d:df:33:50:28:e9:ef:5c:eb:4b:1b:
                    79:f3:db:a3:ab:ac:51:4d:28:44:5b:f6:45:cd:f2:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:B2:62:9B:A6:16:48:43:52:E1:4A:83:78:BD:7B:3F:EB:F2:57
            X509v3 Authority Key Identifier:
                keyid:D0:D6:E6:55:05:B4:F4:E4:F4:F3:1D:90:B8:B2:1A:3A:7C:FB:0E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NbmVQW09OT08x2QuLIaOnz7Dr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/465556-70d1-4152-a65a-6c63e152242d/1/0NbmVQW09OT08x2QuLIaOnz7Dr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:13:22:e3:74:fe:2c:1c:3c:c8:0c:d6:9e:c5:fb:d3:d8:
         f0:9a:e8:4f:4c:e7:f7:83:40:51:45:69:88:8a:d7:ab:b1:87:
         5f:2e:9d:f1:c5:5f:d8:3b:04:35:c8:f2:0b:46:1a:7f:88:8e:
         ce:16:f7:4c:b0:7d:50:e4:7a:7b:0d:a0:c1:92:c3:08:a4:43:
         3d:5f:9c:44:c5:ea:25:06:a0:a2:9a:73:e2:b2:d0:21:2b:53:
         11:dc:50:23:d8:47:33:8e:b5:5d:ac:c8:97:dd:75:03:37:2d:
         fa:a8:d2:cd:d9:c1:44:9e:ad:d4:95:99:dc:97:e1:0a:e5:34:
         cb:52:2f:67:3a:6d:73:99:40:a0:59:f9:29:87:c4:19:12:b5:
         b5:79:fc:16:c6:10:65:c9:88:03:c9:ec:86:5f:f4:0f:bc:e1:
         02:3e:fe:f4:f8:2b:f1:ff:6f:f6:5c:2e:30:dc:e3:44:74:4d:
         fb:2e:2c:5a:24:20:7f:00:50:4e:49:5d:53:c1:46:45:5b:4f:
         57:ac:06:25:05:14:d8:d7:e3:a8:95:20:03:65:eb:52:37:64:
         22:95:0e:d1:44:b5:16:64:0d:4a:62:ab:78:4e:e3:d5:d8:70:
         3f:3a:f3:9b:c3:e8:a6:ac:36:48:27:b3:fa:01:58:4c:7f:e0:
         d8:f5:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----