Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File:                     navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier:          lHzBStVjptxPDMeytWIUmO/3sZecjjSOkMkMZ6Tleb8=
Subject key identifier:   F2:87:60:C3:CD:53:8C:36:3C:DC:19:22:0F:01:68:64:F8:39:6E:5C
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer:       /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial:       01962DF3FFDDD7FE956112014D54C2CD3D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number:          12C2
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
                          2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: nn8dEABpRoPgQBF6lnNiu8fAcScqe4+Zj8G51n2kCCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ff:dd:d7:fe:95:61:12:01:4d:54:c2:cd:3d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=f28760c3cd538c363cdc19220f016864f8396e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:e8:af:36:bb:fd:2a:6e:8b:e1:0a:da:13:
                    cf:81:83:85:35:68:ff:41:5b:0d:6d:21:2e:7f:a7:
                    aa:7d:b0:88:09:c7:a4:10:8a:4f:7b:cf:da:b8:77:
                    7e:14:c8:2a:d9:84:3e:e8:9a:49:f0:95:b3:c4:59:
                    08:d5:fc:d6:80:6b:00:af:9f:61:a1:7f:46:ec:af:
                    eb:30:28:75:4d:1e:32:ac:41:f4:cf:00:5e:27:25:
                    f4:87:0f:cf:42:64:ae:de:b2:f6:58:98:a9:0e:49:
                    00:dc:1c:ae:86:02:f1:ea:6e:dd:5c:94:b7:8b:79:
                    ed:4f:f7:b5:b1:9e:d2:2d:70:c2:01:de:6c:ba:44:
                    8f:99:36:5b:d1:30:93:a0:cd:c7:58:05:5c:15:50:
                    55:2e:21:0b:dd:f9:d7:6a:19:de:a4:a9:2c:ad:20:
                    97:c3:9a:0d:aa:a7:1f:52:1a:06:38:0b:45:74:ef:
                    b8:3a:20:68:f1:c8:3e:07:27:6f:f5:14:ee:f2:15:
                    e7:71:bf:55:90:f3:7b:3d:3b:1c:6c:52:ee:7f:eb:
                    7f:0f:3e:4c:bb:ba:ff:e5:6c:ee:6f:62:bb:1d:a6:
                    a9:e7:86:2f:3e:bf:06:5a:52:ec:50:1a:d8:ea:29:
                    10:a7:00:3d:54:74:c3:19:da:a2:b5:c3:f1:b1:13:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:87:60:C3:CD:53:8C:36:3C:DC:19:22:0F:01:68:64:F8:39:6E:5C
            X509v3 Authority Key Identifier:
                keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5f:95:be:05:9a:29:d0:da:e2:a5:cc:5b:a0:96:18:27:ca:
         c5:1d:99:d6:6b:54:19:3c:90:fc:f9:e2:a7:a6:3e:00:f4:25:
         65:7f:05:f8:06:b6:9f:9d:81:85:10:7a:d7:00:24:21:fc:f5:
         df:3d:54:a8:76:7d:15:be:b3:c7:6b:ef:e2:01:5b:e2:5e:f4:
         37:10:45:01:a4:17:42:62:1d:f4:ee:78:77:1e:da:e0:b8:8d:
         1c:99:52:e7:be:e4:c2:9b:b2:a9:83:d5:14:96:31:48:c4:5f:
         10:77:f7:c7:1c:22:11:50:75:95:6c:d4:94:7e:cc:d3:9b:97:
         ba:a8:f8:ce:ad:2f:db:54:07:a5:67:87:b3:4e:96:83:3c:b0:
         20:e0:6c:a7:17:56:fe:7d:06:be:d1:5e:1f:bd:bd:80:8a:82:
         3c:98:5b:cc:72:6d:ab:ec:39:23:d6:f2:21:a6:42:ce:ee:af:
         bb:64:19:7f:2f:41:d4:f5:2c:9f:27:fc:27:97:df:a1:a1:02:
         c2:32:10:70:9d:ad:05:56:ea:b9:76:bf:9b:64:3b:c6:ce:4e:
         4d:d4:f9:22:e5:ac:be:bd:fb:84:a7:f9:a3:c5:27:1b:ca:22:
         db:10:8c:18:18:f9:03:bc:c1:24:bb:b2:a2:ba:91:85:89:b3:
         fe:2b:9f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----