Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File:                     NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier:          lDG0Hya325lNju8rWKo58xBuDtTeRvB2wbrexs+AW3s=
Subject key identifier:   93:DE:09:4A:9D:48:8F:69:DB:9F:57:48:27:76:48:03:9C:3A:C3:A6
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer:       /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial:       01962F06C6BE5F0066B1CB3B28FC3ED32E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number:          1058
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: s8alegJFhx3sAtD4iOzpI6fLqvMKg/RWnSjGoopKle0=)
                          2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c6:be:5f:00:66:b1:cb:3b:28:fc:3e:d3:2e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=93de094a9d488f69db9f5748277648039c3ac3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:99:d4:68:c6:27:a4:f9:24:b5:db:df:45:
                    e4:55:fb:4b:25:74:b2:c3:d6:14:ab:51:2f:62:5e:
                    8e:ef:bb:f5:e4:6f:96:dc:04:cb:12:3e:6f:bc:b4:
                    52:ef:db:bb:16:f0:2a:af:3c:3f:07:f4:5f:43:9e:
                    4c:af:53:2f:a4:1a:bd:57:fe:38:6d:39:fc:40:56:
                    fc:f4:d1:36:8e:cb:5f:d8:f8:0b:27:21:f9:15:2d:
                    e1:36:a5:06:2d:66:af:d2:ef:c3:64:68:da:9e:ee:
                    64:f9:5c:cf:3a:e3:e8:19:55:b7:d7:41:6f:1a:c2:
                    c6:00:e2:fb:73:f3:7c:01:89:a1:fa:a8:2f:89:28:
                    d6:50:53:d5:9e:43:fb:e8:47:a3:fe:fb:1a:67:12:
                    3c:24:0b:70:c9:0b:c5:d4:e7:be:b0:14:4b:ac:c8:
                    e1:39:65:1a:31:7d:c2:36:75:a3:04:ed:f4:93:03:
                    78:31:09:e4:62:46:92:f7:a0:32:19:07:75:cd:8b:
                    18:ad:7d:eb:92:5c:26:45:9e:83:a5:ca:3a:6c:5e:
                    80:84:ae:7a:3e:05:11:b1:f8:19:16:1f:9b:93:9e:
                    46:eb:8e:91:3b:6d:b7:f2:5e:93:7e:bd:dd:8a:72:
                    18:66:ad:6c:cc:22:ab:41:d9:e3:10:41:f5:1b:86:
                    65:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:09:4A:9D:48:8F:69:DB:9F:57:48:27:76:48:03:9C:3A:C3:A6
            X509v3 Authority Key Identifier:
                keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a7:dd:0d:3c:02:5d:a6:87:cc:2b:be:c9:55:a6:4a:5b:3b:
         7c:eb:2d:76:f7:12:7b:00:e5:23:3b:c2:a8:fe:72:75:0a:20:
         ef:d9:dd:1f:1c:a0:6b:4b:18:f7:bc:1a:ee:98:48:14:6c:1c:
         b2:62:4f:5d:69:a0:c8:8d:d0:70:cb:3d:c5:02:d1:08:0e:c9:
         7b:b9:cc:fd:2a:7b:a3:db:2a:4a:cb:7c:e5:0e:cc:1e:b1:63:
         02:49:f2:b3:74:46:fa:22:10:94:d6:7b:86:16:d0:16:00:51:
         b6:d4:c4:34:7e:3d:5e:98:5a:13:be:0d:b0:80:73:9d:1c:2c:
         73:5e:87:f0:4d:27:be:c5:f4:fd:56:45:10:80:c9:0f:4f:c0:
         4e:ed:0c:e3:4f:1c:92:27:55:fa:b6:d6:fc:df:9b:12:02:21:
         79:54:28:b6:c4:7c:b0:0d:35:12:b6:b8:02:71:a9:87:4a:54:
         a7:8b:9d:1d:c6:ed:99:f5:82:c1:b2:eb:98:64:da:a4:ab:d6:
         dd:78:44:40:57:f7:34:13:70:c4:c2:76:ff:dc:10:ef:81:db:
         60:89:6f:3b:9d:db:51:9b:2e:65:65:25:7b:51:75:35:3f:87:
         ed:64:76:fc:46:a2:ce:fd:c4:f8:b1:29:8a:20:5a:01:ae:bc:
         0e:b4:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----