Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File:                     NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier:          Undz3IlwxeQcwKtrVuxnrDw7EvNZUuX6pWWS70zu+VU=
Subject key identifier:   7B:2E:9F:EB:FD:83:03:08:08:95:EA:79:14:AE:A6:E8:F1:49:3D:9B
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer:       /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial:       01962E61CF26EA2C8CCB0A4BAD532E76C878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number:          122B
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: U1ZXVrWk9cVNk9KvFbJsXpKxDWTRYlhHTragfcVtQbw=)
                          2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cf:26:ea:2c:8c:cb:0a:4b:ad:53:2e:76:c8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=7b2e9febfd8303080895ea7914aea6e8f1493d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:7d:b2:68:47:41:5c:28:30:be:9c:6c:73:
                    d9:35:e3:e6:a1:17:e9:32:80:59:fd:03:65:ad:81:
                    9d:fe:14:3a:f7:56:84:f2:b4:b6:fe:70:12:6d:42:
                    7f:37:d5:53:49:b9:d9:9e:51:ec:d9:79:52:25:65:
                    88:66:2d:05:30:ab:98:6f:06:ed:da:d9:c9:34:ed:
                    5c:89:cc:58:e1:49:c9:08:64:1d:23:d9:ce:0e:43:
                    07:d3:db:7c:25:a0:ea:62:26:d1:ac:7f:14:3e:8f:
                    6a:78:64:58:e7:59:1b:23:70:05:e2:49:d5:6f:77:
                    91:dc:cf:e1:92:57:b3:ba:f2:27:8a:97:cf:2f:f1:
                    73:2f:74:b3:1d:0f:74:61:43:aa:68:ba:ee:73:7a:
                    9b:c3:57:4a:b0:0a:6c:8f:97:27:f1:2a:ce:1a:60:
                    a0:07:b3:f2:c3:58:41:c7:59:be:a9:66:87:fc:2f:
                    cb:e6:8d:10:3d:a5:02:38:3f:a3:2c:7b:06:65:0b:
                    24:f5:af:b4:09:4f:98:64:28:40:91:3c:bc:a2:79:
                    7a:89:90:c1:21:b9:07:56:57:3a:0b:ee:5d:2e:58:
                    1f:8b:bc:ea:98:72:fd:0d:bf:a3:c6:f3:57:53:3c:
                    19:04:e5:b1:2c:0f:b7:f2:50:a6:a1:d9:97:4e:98:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:9F:EB:FD:83:03:08:08:95:EA:79:14:AE:A6:E8:F1:49:3D:9B
            X509v3 Authority Key Identifier:
                keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4b:ea:91:43:1c:a6:84:cd:97:fc:c8:8d:52:87:b3:73:bd:
         12:1f:78:cd:86:4b:04:19:9b:33:17:c8:70:56:5a:35:43:b6:
         79:72:c2:39:ca:57:ae:f4:f8:af:6c:cf:c0:22:87:15:95:16:
         57:d5:f9:e1:44:94:70:6a:12:94:85:19:58:34:75:44:c3:64:
         7f:07:df:e9:88:e4:81:93:6e:5b:0f:e9:ee:80:ea:35:ac:a6:
         94:55:48:82:cd:1f:8f:b9:e7:e4:be:0a:b7:f2:ed:b8:0a:eb:
         6b:56:f2:a5:1b:34:c2:41:66:e2:5b:bb:30:0b:21:d3:2b:a8:
         26:45:63:2b:2a:66:05:e6:fb:3f:69:4d:4e:e0:40:e8:87:69:
         b8:ef:c0:73:fc:b6:52:fa:3f:44:b3:86:fb:7a:c3:ed:d3:d3:
         95:bd:15:c7:d9:eb:3c:01:a1:35:b6:5d:e6:28:20:e7:f2:95:
         b5:56:06:e4:7c:5f:38:90:ca:67:9b:31:bd:f2:a0:8c:0a:c5:
         ec:cb:b9:52:03:13:64:28:e6:8f:cb:5a:d6:c2:dc:fc:96:4a:
         ed:5d:b6:ac:ab:f2:ea:48:9e:35:77:29:8f:59:f2:23:db:a4:
         97:7d:7f:89:77:97:b1:ca:8b:e0:8b:cd:54:db:f6:e8:c6:63:
         e5:fc:e2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----