Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.mft
File:                     NPM_RxPoDLM-4zE5fxfwW2gAzo4.mft (raw, json)
Hash identifier:          0vmegGpFwBnorvwI2yITVguE+D9XUwaoPNZvh0TgkTo=
Subject key identifier:   74:9D:B7:98:75:3B:78:91:4A:2B:E2:2C:94:A1:B5:F5:80:C7:0C:16
Authority key identifier: 34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E
Certificate issuer:       /CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
Certificate serial:       0189D4849EE89CDD8795C3C1C172DC5720BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.mft
Manifest number:          0815
Signing time:             Tue 08 Aug 2023 09:40:08 +0000
Manifest this update:     Tue 08 Aug 2023 09:40:08 +0000
Manifest next update:     Wed 09 Aug 2023 09:40:08 +0000
Files and hashes:         1: DMJdAVIymWuHzZWp5d2iKGzBi6Y.roa (hash: 45/EEJLe/ITJVgFt7IzZ5bjXlTXqEofNEiQvxDGPHJc=)
                          2: NPM_RxPoDLM-4zE5fxfwW2gAzo4.crl (hash: N+VG2DOBpIWBFlTIcp6lJ/C2gtINsvTffN+8M69ja9o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:84:9e:e8:9c:dd:87:95:c3:c1:c1:72:dc:57:20:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f33f4713e80cb33ee331397f17f05b6800ce8e
        Validity
            Not Before: Aug  8 09:40:08 2023 GMT
            Not After : Aug  9 09:40:08 2023 GMT
        Subject: CN=749db798753b78914a2be22c94a1b5f580c70c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:f1:e0:1c:eb:f0:f3:7a:db:ef:d8:34:79:
                    8c:fe:a3:3e:52:d2:7f:73:f9:ee:f4:6e:a5:f8:cc:
                    9a:a9:7b:08:4a:ef:61:c2:90:c0:5e:76:a2:9a:3d:
                    6a:7d:06:c7:51:22:dc:f2:c0:e8:ec:fb:6b:6a:d5:
                    1a:dd:2b:db:dd:1b:18:32:d3:e4:d4:3b:2a:db:42:
                    c6:f6:91:6c:df:c2:22:a0:70:be:33:44:45:64:2c:
                    98:99:86:a1:b3:92:56:d3:74:a9:16:be:e3:24:92:
                    81:59:94:4f:b8:9c:60:16:22:4b:4d:73:60:df:1d:
                    a9:2a:47:ca:47:e7:a8:9b:0a:45:da:f7:dd:53:53:
                    a8:28:ec:02:81:36:63:54:6d:27:05:e7:74:eb:f5:
                    0e:10:4b:7e:2c:aa:a1:2f:ab:24:79:cb:bb:f3:87:
                    23:a5:60:86:c7:c5:9c:52:fb:0a:19:f7:44:3a:cd:
                    a7:f7:f3:2c:e4:7d:4d:0b:66:6d:f2:77:d7:0c:a3:
                    78:69:09:8d:46:3f:06:b6:fe:82:65:bc:ef:2f:30:
                    b8:57:98:86:48:70:08:ac:da:3e:e9:13:5d:af:93:
                    63:c6:1f:c4:52:88:30:59:42:87:f5:dd:e1:5a:6f:
                    99:51:15:9e:52:87:03:89:9c:d6:be:61:ba:ec:63:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:B7:98:75:3B:78:91:4A:2B:E2:2C:94:A1:B5:F5:80:C7:0C:16
            X509v3 Authority Key Identifier:
                keyid:34:F3:3F:47:13:E8:0C:B3:3E:E3:31:39:7F:17:F0:5B:68:00:CE:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPM_RxPoDLM-4zE5fxfwW2gAzo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/975947-9928-4768-a4cc-cdf168ba4b58/1/NPM_RxPoDLM-4zE5fxfwW2gAzo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:ee:0a:4f:c8:05:ed:ae:e4:a9:88:7e:56:4c:87:0c:7d:
         57:ac:a0:f3:0c:39:29:ee:57:d9:85:da:82:49:63:fb:c8:21:
         e9:51:f2:4a:4f:55:4e:f3:31:98:af:6d:51:af:d4:ee:d5:c3:
         c3:8b:80:ab:f7:0d:93:6c:f9:38:b2:61:5b:88:6f:b7:41:af:
         95:08:0f:01:71:fb:62:8b:6c:67:f9:a9:42:7d:99:71:ea:12:
         e7:79:16:c3:73:65:9d:c3:5f:d5:d9:cc:40:23:3d:32:f9:ae:
         d6:31:ef:bd:f0:47:53:00:d3:61:1f:6e:fd:85:3c:ec:fe:0e:
         49:03:12:3c:4b:53:60:af:11:97:f8:f3:02:b7:57:cd:24:34:
         cd:3c:17:3a:17:04:8a:80:07:aa:31:6e:0b:30:9e:50:24:5a:
         2f:21:85:40:8b:ac:54:4a:44:62:91:af:db:fc:8b:94:c1:cf:
         58:f5:68:dc:58:80:c4:26:79:69:e3:33:9e:b2:44:a5:36:83:
         bd:89:77:66:bb:e1:d8:02:9d:99:92:8c:4f:11:85:96:e4:9c:
         3d:61:46:f4:79:93:78:f3:8c:7d:6d:5f:09:67:8d:ae:02:8a:
         0a:3b:4c:7e:98:0f:75:14:22:a9:98:bc:d3:0d:48:c4:b0:d8:
         7b:cf:19:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnUhJ7onN2HlcPBwXLcVyC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjMzZjQ3MTNlODBjYjMzZWUzMzEzOTdmMTdmMDViNjgw
MGNlOGUwHhcNMjMwODA4MDk0MDA4WhcNMjMwODA5MDk0MDA4WjAzMTEwLwYDVQQD
Eyg3NDlkYjc5ODc1M2I3ODkxNGEyYmUyMmM5NGExYjVmNTgwYzcwYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt3x4Bzr8PN62+/YNHmM/qM+UtJ/
c/nu9G6l+MyaqXsISu9hwpDAXnaimj1qfQbHUSLc8sDo7PtratUa3Svb3RsYMtPk
1Dsq20LG9pFs38IioHC+M0RFZCyYmYahs5JW03SpFr7jJJKBWZRPuJxgFiJLTXNg
3x2pKkfKR+eomwpF2vfdU1OoKOwCgTZjVG0nBed06/UOEEt+LKqhL6skecu784cj
pWCGx8WcUvsKGfdEOs2n9/Ms5H1NC2Zt8nfXDKN4aQmNRj8Gtv6CZbzvLzC4V5iG
SHAIrNo+6RNdr5Njxh/EUogwWUKH9d3hWm+ZURWeUocDiZzWvmG67GM20QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSdt5h1O3iRSiviLJShtfWAxwwWMB8GA1UdIwQY
MBaAFDTzP0cT6AyzPuMxOX8X8FtoAM6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBNX1J4UG9ETE0tNHpFNWZ4ZndXMmdBem80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85NzU5NDctOTkyOC00NzY4LWE0Y2Mt
Y2RmMTY4YmE0YjU4LzEvTlBNX1J4UG9ETE0tNHpFNWZ4ZndXMmdBem80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85NzU5NDctOTkyOC00NzY4LWE0Y2MtY2RmMTY4YmE0YjU4
LzEvTlBNX1J4UG9ETE0tNHpFNWZ4ZndXMmdBem80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4vuCk/I
Be2u5KmIflZMhwx9V6yg8ww5Ke5X2YXagklj+8gh6VHySk9VTvMxmK9tUa/U7tXD
w4uAq/cNk2z5OLJhW4hvt0GvlQgPAXH7YotsZ/mpQn2ZceoS53kWw3NlncNf1dnM
QCM9Mvmu1jHvvfBHUwDTYR9u/YU87P4OSQMSPEtTYK8Rl/jzArdXzSQ0zTwXOhcE
ioAHqjFuCzCeUCRaLyGFQIusVEpEYpGv2/yLlMHPWPVo3FiAxCZ5aeMznrJEpTaD
vYl3Zrvh2AKdmZKMTxGFluScPWFG9HmTePOMfW1fCWeNrgKKCjtMfpgPdRQiqZi8
0w1IxLDYe88Zhg==
-----END CERTIFICATE-----
Generated at Tue Aug 8 10:49:41 2023 by rpki-client on console-ams.rpki-client.org