Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          tYPwX63jl9zPpQXo5h8rEoSrlqQAbqxctmn3ijAqb28=
Subject key identifier:   22:A4:63:0C:5F:B3:08:BE:BF:5F:71:32:33:47:79:81:C6:60:70:2F
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       01962F746397E9B60CBBFC360ADDBB4FA6B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          050B
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: MkbWl3udNo3s0CDJSE6sEvIDHGKsYd0eiWNySTBMtSc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:63:97:e9:b6:0c:bb:fc:36:0a:dd:bb:4f:a6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=22a4630c5fb308bebf5f713233477981c660702f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:f5:6c:16:09:20:f0:43:33:88:95:3f:68:
                    ef:95:f6:5a:2f:5e:59:a4:1c:1a:6c:79:cf:24:48:
                    5f:30:b9:ce:46:a7:68:d2:5d:2c:c0:3b:46:6b:81:
                    d7:ce:0e:26:71:f1:48:0f:95:ba:67:f1:07:5a:e9:
                    d3:00:7a:d4:c9:89:0d:6b:6a:3d:59:f5:34:63:06:
                    37:0b:dc:99:75:31:d2:8b:8d:da:fc:db:f5:ec:9e:
                    28:3f:e8:3c:4d:92:2d:85:58:4b:49:35:5b:51:64:
                    0d:48:b2:f9:eb:33:e5:b4:06:bb:47:39:dc:d0:03:
                    c3:81:6f:ab:ec:77:1a:c5:3f:34:3b:62:24:cc:97:
                    22:0c:79:7e:21:b2:19:84:98:25:85:7d:b4:7b:ad:
                    1c:0f:40:c0:71:e2:69:6c:b1:cb:e9:14:9b:f0:4e:
                    a0:4d:2f:fb:17:9d:48:3a:f2:f9:89:87:e2:86:2d:
                    50:9a:3f:92:b6:a3:d5:99:fb:53:36:13:0d:32:67:
                    10:a3:a5:df:c9:d3:be:81:f0:cd:bb:dc:29:c3:39:
                    a5:8a:ed:f8:5a:34:60:f0:6c:0a:17:e1:47:16:25:
                    ad:ef:39:b4:54:e2:7d:db:16:2a:09:55:cb:24:29:
                    96:e9:05:9d:dd:85:02:e6:af:76:08:0b:0c:86:63:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A4:63:0C:5F:B3:08:BE:BF:5F:71:32:33:47:79:81:C6:60:70:2F
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:34:bb:6c:4b:5b:60:52:2b:4c:80:55:5f:0d:dd:14:14:9f:
         6f:71:38:45:3e:ad:32:b2:33:ba:5f:df:9c:e4:f7:1d:65:76:
         75:07:22:79:c1:3a:f2:4e:b6:18:73:56:1c:73:92:2d:95:40:
         15:0b:bd:98:63:c2:56:f0:ad:fa:e0:f5:e1:60:ed:29:7a:c0:
         aa:7c:5d:44:3e:6d:a3:2e:77:b8:70:16:68:9f:7f:19:88:3a:
         77:85:8c:31:87:d4:0f:dc:95:d1:1a:0a:f4:a0:64:da:57:f3:
         93:c4:b1:81:f6:48:60:ab:00:03:38:4f:c6:b3:17:f8:e5:cb:
         c2:35:c9:9e:44:ae:2e:ad:c6:55:fc:c3:3e:d7:59:8e:a8:36:
         82:0b:e1:1a:d9:89:4c:fb:8a:ff:cd:59:1b:27:d3:38:96:1c:
         d7:76:21:4f:62:55:20:07:fc:a8:50:2a:5c:c4:4b:45:7d:f5:
         54:4b:c3:b4:e9:29:5a:4a:23:e6:e4:67:77:18:02:67:fd:2a:
         2a:7c:93:94:9f:fa:62:26:db:b3:60:30:6c:57:45:ed:6f:5e:
         12:b8:a2:7f:8b:85:3e:06:b6:24:3e:87:7e:d7:d4:27:ab:3e:
         af:b9:cc:91:c3:d8:56:74:c9:34:aa:36:6f:27:e1:fc:81:3d:
         c7:95:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----