Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File:                     nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier:          dfz5YVfe1+/nCvc2PxAbwnHn65/Twyfsx4XZ2nTFAkY=
Subject key identifier:   0C:9B:A4:DB:FF:DB:0A:29:77:06:B3:7E:9C:DB:31:22:A6:07:AD:84
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer:       /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial:       01962E988141E5F0D974AB0B52A3CEECA41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number:          10AD
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
                          2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: 3y+NYOHUBqj/697+7xsC5mGVZwBgeH/zKkirkzu6R4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:81:41:e5:f0:d9:74:ab:0b:52:a3:ce:ec:a4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=0c9ba4dbffdb0a297706b37e9cdb3122a607ad84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:41:3d:87:f8:5f:c4:d6:51:ca:5d:c0:92:
                    e3:9f:84:f0:56:a2:18:6c:2c:b7:c7:33:53:09:18:
                    d1:26:75:3d:7d:65:37:48:bf:d1:38:21:51:35:3d:
                    0f:a1:46:55:e2:bb:1a:e6:1d:3f:7a:8e:2a:6f:a1:
                    c8:4c:07:7f:9f:22:40:4d:f3:5b:6f:6c:87:1b:7c:
                    49:cd:01:b5:c9:40:bc:e3:54:73:3c:5a:7e:8f:77:
                    59:77:35:e6:8d:4e:2f:20:18:6b:c4:01:c7:cc:1d:
                    a1:29:8f:c2:84:ad:80:62:39:18:d0:09:f0:1d:96:
                    73:b0:0c:06:92:19:29:96:c3:b1:d6:9d:8c:e3:0b:
                    3d:fa:33:ff:8f:e4:38:26:f9:43:e0:c8:76:35:4d:
                    f8:a3:69:20:5a:1c:51:b9:70:ae:bf:72:d3:62:7c:
                    e3:25:68:58:d7:17:2b:5b:08:2c:8e:09:a0:45:67:
                    75:91:03:56:c2:35:fe:d5:ad:e4:91:7c:d8:24:33:
                    59:c3:06:1a:21:92:4b:87:ac:39:ba:59:3c:85:91:
                    c9:52:99:8b:0c:55:bc:39:da:4f:c8:17:5e:28:cf:
                    69:7f:eb:da:0a:aa:69:cb:dc:9f:b7:9b:83:53:c3:
                    ca:df:d7:29:c2:29:41:e1:27:c5:a1:d5:a0:2b:e4:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9B:A4:DB:FF:DB:0A:29:77:06:B3:7E:9C:DB:31:22:A6:07:AD:84
            X509v3 Authority Key Identifier:
                keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:fc:e6:b3:11:ab:47:c8:0b:b6:7b:4e:55:74:a5:86:31:
         5e:93:7c:95:be:1e:8b:3b:3b:27:43:a7:74:99:4d:49:ef:91:
         98:8d:1a:a7:2f:4c:5b:6a:f2:b7:4d:59:2c:eb:b9:fd:89:93:
         a5:95:dc:69:47:b3:59:55:a8:e6:8a:7b:57:9c:b6:b9:12:29:
         47:d7:eb:5f:b1:4e:81:a1:67:52:7a:a4:2f:89:ec:40:0d:29:
         1c:21:8d:e4:a5:ce:64:61:d2:85:73:54:2f:cc:69:05:33:d2:
         4f:49:a1:3d:e4:4b:4a:1d:be:15:f8:33:2b:4c:4e:84:b5:e8:
         00:7e:d1:46:16:fb:1e:3b:18:6d:cf:81:77:65:fe:f4:dd:fd:
         61:bb:97:6f:c6:39:67:2a:c6:1b:36:eb:a8:0e:16:84:55:69:
         48:32:76:21:69:04:5a:97:6b:78:e3:59:ef:a0:0b:4c:5c:89:
         a9:95:2f:36:0e:06:21:bd:32:f8:b9:b1:b1:60:09:9b:7b:31:
         70:ef:36:c3:19:5a:60:36:66:de:fe:d7:89:b2:f4:33:b4:f6:
         cf:31:9f:25:af:44:94:c7:4d:6c:fa:4a:8c:0f:0f:d4:4e:26:
         f8:5f:c6:6e:9c:84:f1:67:3b:be:25:1e:8b:5b:b3:8f:f1:ff:
         4d:09:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----