Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File:                     NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier:          1gnydN7UN/ZbyvISpe6A3eLm1D+OHAZMWRztDQqPyv0=
Subject key identifier:   54:FC:8E:8F:77:C3:A7:C1:9D:9D:4A:06:A2:D9:6F:D4:F0:56:1C:4A
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer:       /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial:       01962F06B092242F3E928F84F430894E1366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number:          97
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=)
                          2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: P2p6gIdMYRzWb4uJo3Qii6HuqSB5aU6LXGU6NDaLqnI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:92:24:2f:3e:92:8f:84:f4:30:89:4e:13:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=54fc8e8f77c3a7c19d9d4a06a2d96fd4f0561c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:cc:9a:fe:74:ad:8a:2a:48:a1:44:80:50:
                    df:b6:b4:0b:8d:8c:51:07:99:3a:16:94:54:78:45:
                    99:d3:fd:ae:f8:f3:68:4c:c7:61:05:70:a9:b9:87:
                    67:64:ae:bf:6c:f6:8c:62:a6:09:1b:56:18:ea:05:
                    82:1f:4b:ec:d6:0d:36:35:7b:5a:ce:0a:ee:bb:f4:
                    85:9d:f2:f7:23:06:eb:25:75:c4:71:62:00:27:4c:
                    7e:8a:8c:0e:b5:b5:34:2a:2c:e2:1e:4e:49:c7:f9:
                    e5:62:f2:6d:cd:0a:3d:f7:78:d1:93:7f:9a:d7:32:
                    77:2c:83:34:9c:97:ac:ce:64:38:44:35:2d:2a:40:
                    0f:cd:e9:13:81:7c:60:f5:ca:34:73:60:8b:86:6e:
                    c6:ff:0d:06:d2:77:e0:50:51:d9:84:92:4d:ec:10:
                    ea:73:78:ce:bd:0c:c9:23:87:4e:d2:92:d2:67:36:
                    be:c4:70:d2:14:bb:b0:f9:e6:de:3b:45:33:85:e4:
                    43:ff:fd:f3:9d:46:06:23:0f:17:8b:78:13:d0:42:
                    d4:14:dc:fd:ba:ac:15:0b:da:87:6a:95:d9:dc:73:
                    37:77:b9:49:9b:db:b4:cc:cc:6a:c7:a8:64:68:d6:
                    e2:5c:4e:ad:e3:9a:c9:ed:4a:3b:d1:50:c8:70:0b:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:8E:8F:77:C3:A7:C1:9D:9D:4A:06:A2:D9:6F:D4:F0:56:1C:4A
            X509v3 Authority Key Identifier:
                keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:37:81:da:fb:71:6c:4e:b8:d2:0a:33:b1:92:e7:ea:5a:eb:
         53:8e:6a:85:43:31:39:c5:1a:11:6e:76:a6:9c:ab:e5:c6:82:
         6c:cc:4d:3b:ea:fb:7e:cf:da:7f:3f:e3:7d:86:03:2f:5a:16:
         1e:bb:e3:ae:ac:3a:81:01:df:50:bb:91:cc:6b:c1:18:18:9b:
         c6:8d:be:90:8f:e8:b9:42:eb:11:56:89:d7:83:f0:46:40:71:
         11:b0:7a:77:d6:ca:25:5b:ca:34:4c:3e:ea:11:06:e1:e3:8a:
         f0:c3:9e:c1:84:d9:4f:e6:22:78:56:bf:ed:dd:a3:41:6e:41:
         f1:b2:5b:d9:07:c7:89:82:23:05:e8:4b:1f:64:d1:d9:6b:94:
         a7:df:a3:97:5b:b9:b7:94:2d:16:73:0f:1b:8e:1f:11:81:5e:
         c6:ff:fc:d0:11:2f:8f:d1:c5:21:89:96:da:63:50:02:07:8a:
         52:21:9e:40:e2:5f:70:b2:55:0f:bd:c1:4d:e6:f5:eb:f0:1b:
         ae:22:5c:27:01:54:df:f0:02:2a:f1:56:a5:44:64:c4:b6:d1:
         34:66:e1:1d:a4:c1:69:f6:d4:5c:7f:a2:cf:e4:91:be:63:45:
         b4:76:25:26:69:f7:98:75:c2:0d:76:43:d8:6e:e5:14:d1:eb:
         08:a3:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----