Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File:                     NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier:          LY1UPMpXSyHEtIYfFJsg6jINp5/R1PhZm1rWSs+4AnM=
Subject key identifier:   70:1A:79:A9:C9:13:85:E0:D2:3E:C4:F7:F2:18:F0:B4:30:FC:39:2D
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer:       /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial:       01962E2B09A7F46765AC4F90FB3D33721E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: IC7oMxdOzlUZd2e+roSL1KPZpFSC4lRK6rt4w+9V69k=)
                          2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:a7:f4:67:65:ac:4f:90:fb:3d:33:72:1e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=701a79a9c91385e0d23ec4f7f218f0b430fc392d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:8b:44:8a:f2:c2:3d:48:66:a7:68:e8:74:
                    9f:b5:3c:e5:ee:a2:31:d5:83:ee:70:bd:76:ee:12:
                    a8:42:f2:51:3e:8f:4d:d8:6c:dd:44:03:72:52:7c:
                    d1:51:c4:9d:6c:2e:02:01:ae:f8:f6:5b:2f:4b:2c:
                    a5:cc:f0:8d:ec:5c:16:b5:89:59:e8:cf:2e:4d:d4:
                    2b:73:b8:7e:96:58:c8:2e:43:e0:90:df:23:d7:64:
                    f4:01:b5:5f:c8:c1:80:0a:90:d0:c9:d4:8d:be:c6:
                    0b:f0:18:22:b4:f1:b6:ca:aa:96:29:1a:f0:cc:72:
                    3c:a3:d0:c8:6b:82:7a:90:7b:79:c4:1e:93:33:94:
                    fb:63:51:27:29:eb:7b:75:41:43:63:c5:0a:d9:b1:
                    1a:56:fa:58:f0:b6:1b:37:7b:63:22:e4:14:cf:17:
                    94:e9:3a:53:fc:ca:c1:19:a9:64:f5:ce:bd:3b:19:
                    fa:7b:a0:fe:cc:cf:a8:11:3c:0f:f1:a9:07:4a:24:
                    87:99:79:9f:12:d3:df:a8:bb:38:9d:f2:e3:7d:fe:
                    16:56:f0:01:7b:17:8a:46:f9:85:c2:52:2d:49:31:
                    6a:52:00:a7:2f:12:1d:eb:62:b2:a2:f8:83:2e:b5:
                    98:fb:d7:fd:af:d9:0f:4f:f8:aa:47:ae:14:17:f1:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:79:A9:C9:13:85:E0:D2:3E:C4:F7:F2:18:F0:B4:30:FC:39:2D
            X509v3 Authority Key Identifier:
                keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:27:24:6a:03:d9:57:69:13:6c:39:7a:1c:06:23:88:95:
         47:28:45:29:19:70:57:24:aa:57:f0:04:b4:07:64:9f:f0:f2:
         08:7c:95:f9:90:fc:c8:11:92:76:3a:61:47:91:16:57:31:ef:
         d4:ce:7b:07:af:d4:16:36:cc:0d:da:a3:d7:92:45:4a:bd:36:
         64:0f:43:e3:2b:c4:7e:6c:02:a6:6b:fa:41:0b:66:b7:f0:4b:
         f2:0f:0b:b2:e5:7c:5f:15:6e:29:48:61:59:6c:f3:c9:3f:fc:
         84:e3:bb:4c:4f:12:6b:cf:f7:7e:e1:c1:76:d4:a9:19:50:36:
         a4:2f:82:fc:02:98:ca:a9:57:a5:e2:59:50:3e:09:83:9f:67:
         f5:5b:65:2f:f1:80:c0:e6:c5:e2:fd:d4:82:37:66:01:1a:d3:
         2c:cd:20:64:ad:c1:ca:2b:59:5d:87:de:00:e2:2b:b5:4d:da:
         83:79:0b:74:a8:57:be:88:d3:91:d1:69:4f:eb:ac:cb:8e:01:
         af:80:a4:b3:3c:89:d1:42:16:99:b9:fe:a2:38:fc:b5:0b:f3:
         7f:a2:93:fc:0a:57:cb:8e:cd:18:43:03:d8:57:77:ff:9f:e0:
         7e:b8:26:27:00:2d:50:c6:d1:42:c8:f2:96:47:8c:23:04:59:
         50:c3:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----