Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
File:                     NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft (raw, json)
Hash identifier:          9vjI29pXDwgH8jjLI47QOcjaQjK2Ee21Q6i95N/tNWk=
Subject key identifier:   6B:C6:1B:5B:4D:39:DC:09:B1:E8:87:33:76:0A:F6:1C:A2:EE:F0:FB
Authority key identifier: 35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74
Certificate issuer:       /CN=35902c9b640fc6d57c237714ed24da17f2d3e474
Certificate serial:       01962E98867A4149AD864D9E69E1E94E635A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft
Manifest number:          1224
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl (hash: ZG20bJzS/iTqxTVfmo+xrN182IRit6ivs7t8k54P0Cc=)
                          2: PI3Xutx0lBlZBeuZQlV0XuCJsGo.roa (hash: blvqW+4kvuy1OSWZbcSuvZwm2naQgc2Xk5GnN0G+YPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:86:7a:41:49:ad:86:4d:9e:69:e1:e9:4e:63:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35902c9b640fc6d57c237714ed24da17f2d3e474
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=6bc61b5b4d39dc09b1e88733760af61ca2eef0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ed:34:7c:92:cf:53:7e:81:4b:53:ef:5c:03:
                    d9:b7:30:f0:0c:85:ed:1c:9c:e5:a4:f6:a9:1d:80:
                    8f:91:bb:34:59:f1:0f:34:57:64:13:da:75:cd:ab:
                    55:4e:87:c8:84:2c:4a:58:7e:ca:35:c9:27:c1:19:
                    79:ef:a9:fd:60:3c:18:ee:2d:ac:ce:41:83:5a:ff:
                    e7:11:53:6f:07:01:a9:27:21:0c:9a:57:e1:b9:3f:
                    c7:d1:78:0b:2b:ae:3e:5f:20:a5:b4:9f:00:1e:56:
                    69:a5:47:7b:01:a5:54:c4:77:8f:05:df:63:a7:af:
                    66:41:8c:9e:e9:c6:96:91:98:0d:ec:de:93:4b:2d:
                    bc:02:94:76:38:a4:da:9f:a5:99:58:33:67:d9:c3:
                    dc:22:45:05:9a:28:a3:30:20:28:ea:e8:e3:6d:bd:
                    86:77:16:b6:45:e7:c0:22:bc:01:b8:d3:65:61:fc:
                    a2:4e:2a:40:62:ea:df:0a:8f:33:8f:64:bf:04:4e:
                    db:48:13:cc:84:1b:68:15:d1:a2:7a:8e:d9:b9:e0:
                    58:83:ce:68:45:88:79:e4:f1:bb:80:21:6d:e5:95:
                    4e:26:ca:31:bf:4d:d7:89:0d:e6:22:a7:f3:f4:cd:
                    dc:8e:0b:40:e1:6c:75:c8:2f:86:c2:6f:fa:a0:14:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C6:1B:5B:4D:39:DC:09:B1:E8:87:33:76:0A:F6:1C:A2:EE:F0:FB
            X509v3 Authority Key Identifier:
                keyid:35:90:2C:9B:64:0F:C6:D5:7C:23:77:14:ED:24:DA:17:F2:D3:E4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZAsm2QPxtV8I3cU7STaF_LT5HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f96baf-41f3-4986-b93a-417b4fa564ea/1/NZAsm2QPxtV8I3cU7STaF_LT5HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:21:ab:b8:11:be:61:73:7d:63:47:d7:22:2c:8d:0a:73:
         22:c1:53:f5:83:4d:e8:92:23:72:14:37:85:86:9a:04:33:20:
         a0:f7:85:c9:44:41:cd:4a:15:c3:21:54:4f:fa:6c:b1:1e:2e:
         3e:11:72:c1:95:c9:ca:f6:46:a0:7e:b2:71:31:f6:b4:cc:ee:
         4a:b9:99:a3:1d:55:06:fa:04:30:d9:f8:da:8e:70:54:82:23:
         ed:ee:00:7b:fe:82:59:fe:28:aa:0e:12:25:e7:dc:8b:13:f1:
         fc:17:76:e1:3e:72:ff:2f:df:34:40:e9:31:25:5e:6d:e6:92:
         02:98:82:69:50:a7:8f:ed:f7:82:b3:a3:64:56:66:3c:f9:b6:
         90:4f:4a:15:fd:f8:22:68:65:c9:c4:18:dc:04:de:8f:59:ab:
         f1:f1:ff:20:2f:ec:59:cc:83:d8:6c:06:30:e0:fa:84:f3:39:
         97:95:7e:79:bc:23:a8:6d:33:f9:1b:8f:8e:7b:9b:72:eb:b4:
         45:a6:f8:31:e1:5c:53:9c:23:e7:5f:d2:9a:03:75:c8:04:ba:
         c7:5a:43:cf:21:88:3b:a1:7a:18:cf:4e:1c:2d:bc:6e:fe:df:
         97:e2:c9:ab:f8:a1:81:e5:a3:de:07:76:8b:b3:36:4d:10:20:
         b3:ac:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----