Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File:                     ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier:          Dhz2OH/Nsag4NCA5iFMRkUid9MLcyFY2sEZ9qePxyqw=
Subject key identifier:   F1:43:31:1C:ED:96:0B:9A:94:E9:61:1F:F2:2F:07:0B:07:97:DF:50
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer:       /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial:       01962E61D2FA804067EA74608AA7A866E87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number:          0F59
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
                          2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: kKgT5CEMs4VkU13x7fC8ePTdN7nSugHkwstzr0rDtkk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d2:fa:80:40:67:ea:74:60:8a:a7:a8:66:e8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=f143311ced960b9a94e9611ff22f070b0797df50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:72:41:63:bf:2f:f9:74:ce:a2:ae:2a:21:
                    34:40:b2:b6:9b:aa:aa:13:f6:8d:41:d5:99:90:c4:
                    e0:e5:f6:08:ce:d3:1b:bf:2f:02:96:83:27:47:16:
                    ac:d3:59:3f:d9:a3:d5:a0:11:81:d4:57:dd:3b:bb:
                    c5:18:93:59:f1:23:a5:a8:27:25:38:5a:38:95:ec:
                    93:3a:90:d3:f7:df:af:43:b0:2e:7b:95:e4:d5:2e:
                    d0:6f:7c:74:e0:94:9f:ab:95:b8:ec:17:c4:af:4e:
                    6f:ff:66:84:ec:74:6e:ec:9b:e0:b9:34:7a:06:e8:
                    c1:35:6b:05:c2:db:a3:2d:15:03:ec:ea:7c:cd:3e:
                    90:08:7a:8c:d9:08:cb:b5:5f:9e:96:58:6b:b7:a0:
                    2a:21:f0:06:80:13:fa:aa:b5:fd:f6:bb:53:2a:bc:
                    26:02:b7:ec:fb:25:b4:41:21:b0:14:98:c8:b1:fd:
                    0a:fe:f8:0c:41:b2:a3:2e:96:cf:50:e7:84:f5:e3:
                    30:cf:53:a1:a6:18:8f:fe:75:c3:eb:6c:fb:21:81:
                    22:b7:b1:a3:0e:27:83:13:bd:e1:de:fc:dc:57:20:
                    ad:5a:ec:ea:92:35:70:23:2c:58:2b:0f:76:37:5a:
                    a2:e2:13:d5:83:c3:60:f8:6b:3f:22:5a:ef:a9:54:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:43:31:1C:ED:96:0B:9A:94:E9:61:1F:F2:2F:07:0B:07:97:DF:50
            X509v3 Authority Key Identifier:
                keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:67:e4:52:e7:08:04:70:93:be:ac:69:3e:e0:74:75:6d:
         87:75:16:0b:ba:9a:fd:19:b1:27:42:01:8d:a5:af:30:62:b5:
         09:91:b4:8d:d7:47:f0:84:62:09:61:55:e1:a5:7c:fd:4e:aa:
         e0:c0:e7:0b:22:24:35:16:1b:4c:97:24:66:e6:09:9b:69:d8:
         0e:ab:73:7d:6a:47:54:19:bc:51:66:43:5b:c7:c3:26:0e:43:
         1d:33:ba:7d:8f:92:b0:3c:8e:ce:cb:86:ac:eb:20:c7:e9:03:
         9a:65:85:33:10:66:e7:ec:93:e5:1e:d7:11:42:73:a2:37:38:
         2d:e4:fc:ea:ff:32:51:9d:b6:e5:a4:22:ae:52:70:76:27:8b:
         32:43:f9:f8:ad:da:11:eb:5c:d6:16:32:b5:0a:ba:f8:0c:30:
         2a:70:dc:05:db:1c:a0:18:59:de:35:3c:3b:f9:fe:79:83:d1:
         74:ad:f1:25:c5:42:eb:aa:4b:4b:b9:43:52:92:9b:b6:48:4c:
         97:9d:8f:6d:9b:a6:b9:cc:bf:b5:f1:1d:5f:06:0c:7f:e9:0a:
         6a:ef:58:fa:cf:11:ef:1e:9a:97:92:5b:41:10:1f:51:bd:96:
         7a:33:ec:c1:a3:40:1a:2e:a3:b1:d1:b2:dc:dc:ad:a9:fb:a9:
         92:dc:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----