Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File:                     NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier:          cXHMDUXXJCu5xgsw/6Kje3+ft09bol7FP3dQTorDN+c=
Subject key identifier:   E1:E8:69:9D:45:00:0C:B7:07:A0:B9:C0:4C:C6:8E:66:59:84:FD:3D
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer:       /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial:       01962F7450A24F1B88CC439F1685B525ACB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number:          1224
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
                          2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: HuRUc5j1+mB4WIZ1rgEg9QHZA9+/EomYGzDjRn1CQFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:50:a2:4f:1b:88:cc:43:9f:16:85:b5:25:ac:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=e1e8699d45000cb707a0b9c04cc68e665984fd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:36:b4:3f:e7:ca:b3:01:b4:2c:7c:ee:3f:
                    3e:1d:55:da:f2:40:72:1d:5a:95:d6:32:f1:10:db:
                    57:d6:c0:24:c7:bc:6e:43:2d:85:e3:74:4f:59:b2:
                    20:cc:e6:93:3c:f2:98:e1:d8:f3:9a:1d:65:4f:c7:
                    d6:c8:d7:b7:d3:97:b4:f1:a4:e0:83:2e:c8:c0:43:
                    3a:0f:ac:09:49:dc:d2:45:e9:dc:75:d7:0a:c1:b2:
                    41:28:ac:c5:1b:e1:bb:6c:37:39:a1:99:ec:99:11:
                    56:f5:c9:39:f7:e1:99:db:46:17:16:fc:79:37:5e:
                    d7:7e:40:6c:90:7b:95:56:f3:c1:97:53:91:2b:a1:
                    21:6b:0c:c8:a7:14:b4:b9:d2:20:35:98:6b:cb:6e:
                    68:72:3e:45:61:21:a3:76:c5:36:16:f5:7e:1a:42:
                    6a:e6:c8:c0:6e:41:8f:c0:b1:a0:ce:9c:6b:b9:0a:
                    ea:92:58:6d:24:df:c2:70:8e:39:55:2f:46:c3:ba:
                    79:31:bd:78:cd:7c:8b:94:f9:6a:22:dd:4e:08:6a:
                    af:37:39:25:c5:e2:3f:a7:a5:7e:e1:ff:f8:7b:f7:
                    3c:db:12:34:ca:06:57:ee:45:fb:fd:0c:75:04:a8:
                    49:20:7c:83:79:4d:95:cc:45:ce:c6:eb:3b:1b:dd:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:69:9D:45:00:0C:B7:07:A0:B9:C0:4C:C6:8E:66:59:84:FD:3D
            X509v3 Authority Key Identifier:
                keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:fd:93:50:5e:8b:05:04:00:69:1d:e2:a8:68:1b:ca:26:a6:
         4f:8a:81:04:25:4f:6f:26:22:35:ec:ac:62:24:2d:11:66:1a:
         62:ca:26:8d:01:89:d3:37:62:44:57:eb:b2:b9:dc:ff:db:d8:
         f8:5f:2a:73:32:00:75:05:c5:9e:78:43:93:7f:e2:9a:b2:76:
         41:60:19:94:82:2a:86:6e:2f:b3:66:c1:70:05:b7:68:69:59:
         8e:39:84:71:98:91:45:9d:50:78:d1:7d:2f:79:c5:cb:11:3a:
         81:ba:ba:4c:fa:ae:eb:4b:8e:16:59:59:4a:e3:dc:57:65:89:
         32:c0:f9:40:41:25:5b:9e:62:fb:2b:58:b2:1f:8c:ba:3b:fa:
         5e:fb:2c:da:d5:0e:18:83:6f:88:bd:0d:a4:bd:15:5b:8e:ac:
         a3:0e:59:cd:b1:d0:d2:9a:15:89:d7:7c:11:8e:18:79:b2:5b:
         ac:82:18:0c:58:c0:85:cb:be:01:81:8f:16:7c:32:03:c0:3b:
         5f:98:a8:f1:e6:8b:95:19:16:23:ec:8e:17:63:68:e4:be:e0:
         b1:c2:43:3c:96:e2:98:29:cb:db:14:09:9b:74:e7:65:8f:0b:
         87:42:82:5c:35:8c:6f:79:e7:39:c6:31:c5:5f:24:69:e1:a1:
         40:14:5d:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFCiTxuIzEOfFoW1Jay5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjhkNWY5MTM4NTY4YjUyY2IwOTM2ZTJiNGM5NGY3N2Nl
NTdhZWMwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
EyhlMWU4Njk5ZDQ1MDAwY2I3MDdhMGI5YzA0Y2M2OGU2NjU5ODRmZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXg2tD/nyrMBtCx87j8+HVXa8kBy
HVqV1jLxENtX1sAkx7xuQy2F43RPWbIgzOaTPPKY4djzmh1lT8fWyNe305e08aTg
gy7IwEM6D6wJSdzSRencddcKwbJBKKzFG+G7bDc5oZnsmRFW9ck59+GZ20YXFvx5
N17XfkBskHuVVvPBl1ORK6EhawzIpxS0udIgNZhry25ocj5FYSGjdsU2FvV+GkJq
5sjAbkGPwLGgzpxruQrqklhtJN/CcI45VS9Gw7p5Mb14zXyLlPlqIt1OCGqvNzkl
xeI/p6V+4f/4e/c82xI0ygZX7kX7/Qx1BKhJIHyDeU2VzEXOxus7G93NywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHoaZ1FAAy3B6C5wEzGjmZZhP09MB8GA1UdIwQY
MBaAFDS41fkThWi1LLCTbitMlPd85XrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUt
ZTIwZWJiZDA4NWUxLzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9mYzU4MjAtODE5Ny00ZjNkLWI2MjUtZTIwZWJiZDA4NWUx
LzEvTkxqVi1ST0ZhTFVzc0pOdUsweVU5M3psZXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv2TUF6L
BQQAaR3iqGgbyiamT4qBBCVPbyYiNeysYiQtEWYaYsomjQGJ0zdiRFfrsrnc/9vY
+F8qczIAdQXFnnhDk3/imrJ2QWAZlIIqhm4vs2bBcAW3aGlZjjmEcZiRRZ1QeNF9
L3nFyxE6gbq6TPqu60uOFllZSuPcV2WJMsD5QEElW55i+ytYsh+Mujv6Xvss2tUO
GINviL0NpL0VW46sow5ZzbHQ0poVidd8EY4YebJbrIIYDFjAhcu+AYGPFnwyA8A7
X5io8eaLlRkWI+yOF2No5L7gscJDPJbimCnL2xQJm3TnZY8Lh0KCXDWMb3nnOcYx
xV8kaeGhQBRdhg==
-----END CERTIFICATE-----