Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File:                     t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier:          AoKObWbB6iYO/4TKlMFYW+uX+BWoC1Uve8Ioq7uI7GA=
Subject key identifier:   D1:DC:A7:D0:91:1E:69:97:C3:CC:FC:F0:AD:9E:9A:5C:B9:23:AF:4E
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer:       /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial:       01962F06EE3C9190C5D852A86F98FB0E30FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
                          2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
                          3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: rKQ9qLbW8yELDkhbrdBLAEnFoepegmiRZX0RL4A44Xw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ee:3c:91:90:c5:d8:52:a8:6f:98:fb:0e:30:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=d1dca7d0911e6997c3ccfcf0ad9e9a5cb923af4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:ac:df:ea:b4:26:a9:29:a0:1e:a4:71:fd:
                    79:1b:b0:60:4a:e6:93:78:1a:30:ad:c9:bd:26:6f:
                    50:cb:fa:16:db:35:68:0d:35:ad:b5:01:aa:8d:d1:
                    e3:9b:0e:82:cb:9f:12:ba:ae:49:62:43:ec:47:9e:
                    3e:4a:e3:ae:bd:1a:9e:6e:88:5b:98:95:d0:b6:7b:
                    ab:ff:0e:23:2b:72:89:2b:71:18:f8:0d:ca:d6:2b:
                    3c:80:9d:b8:2a:45:67:b3:9f:1e:26:94:c3:7a:67:
                    56:98:e5:88:8e:3c:3b:b6:f7:d5:ca:e8:be:09:ae:
                    98:38:3b:c0:7c:22:66:3e:1c:82:48:9f:10:68:7b:
                    f0:87:57:24:de:5c:4a:64:dd:24:fb:43:84:dc:d8:
                    9f:96:ae:ec:6c:b8:b0:43:42:82:fe:ee:d1:7a:fd:
                    2d:68:0a:39:9a:9b:42:18:85:27:b3:ab:98:5d:a4:
                    97:90:c9:59:f0:f9:d2:24:3b:e1:e3:06:35:68:8e:
                    b8:a9:78:13:48:3d:8f:e2:5f:8c:2c:bd:56:3a:80:
                    aa:61:67:2f:e1:de:1e:2d:06:48:27:ca:23:87:d1:
                    96:bf:26:fa:9a:b6:08:2c:d8:83:06:3b:ce:58:f2:
                    12:5d:8c:32:b2:3d:04:ed:c8:ff:db:00:5c:fe:59:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DC:A7:D0:91:1E:69:97:C3:CC:FC:F0:AD:9E:9A:5C:B9:23:AF:4E
            X509v3 Authority Key Identifier:
                keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:c0:da:fd:e1:46:ed:55:f1:33:20:d5:52:75:8c:04:86:
         0f:fa:5a:48:aa:57:b1:28:0c:df:2b:47:45:83:63:21:00:56:
         66:be:a7:8f:39:49:ee:34:50:60:ae:a0:a1:aa:b2:94:2f:ed:
         61:9a:59:16:bf:60:39:98:07:35:4e:df:59:8a:c8:25:e4:7b:
         3c:26:39:ad:f9:b4:a1:f2:91:a0:a3:4a:ae:cb:5b:42:79:c1:
         61:89:6f:dc:35:b0:19:ac:b8:6d:7a:ef:50:5c:7f:44:97:40:
         cd:04:7f:b9:aa:0b:8c:3c:d9:9b:a3:cf:c5:df:b8:b6:39:15:
         73:8e:0f:40:2c:f5:8b:8f:3f:f1:56:19:46:fa:63:bd:ac:0e:
         60:3c:dd:96:8a:7a:8c:fd:b5:f8:01:70:a6:22:33:b5:29:53:
         01:0a:1d:81:53:b0:ba:b1:4e:e8:6d:56:42:8a:9f:4b:4e:16:
         77:d6:d2:91:92:52:7c:56:24:c0:a9:53:58:31:f2:9b:1c:68:
         1f:e7:cf:a1:3c:60:a4:f4:af:38:b4:ae:67:9f:ff:8a:2a:c3:
         12:29:0e:d0:4b:75:9e:97:2d:08:96:ec:f5:f4:68:20:8d:48:
         64:c4:7c:71:e0:fa:38:1c:62:11:72:72:7b:6d:9d:38:18:87:
         66:c1:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----