Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File:                     1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier:          ZF2hzN2YE9F1xKPacy3L4nhJG35lwi7+MdVLiXI+tIM=
Subject key identifier:   F3:3C:9D:37:ED:3F:CB:A1:97:CC:A9:65:59:B5:C8:C0:27:66:1C:CB
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer:       /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial:       01962F069901099404BDED9A71BF3D412476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:23 +0000
Files and hashes:         1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: 2kbpnyPSCO65RF7GtjVbaib0654oevwdvZH6NihMJyE=)
                          2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
                          3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:99:01:09:94:04:bd:ed:9a:71:bf:3d:41:24:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
        Validity
            Not Before: Apr 13 12:01:23 2025 GMT
            Not After : Apr 14 12:01:23 2025 GMT
        Subject: CN=f33c9d37ed3fcba197cca96559b5c8c027661ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:ee:d6:f4:b2:18:bb:4d:de:50:ad:87:f0:
                    7e:83:8e:91:73:c3:43:f2:99:09:06:96:c1:cb:07:
                    9d:56:f5:5a:a7:03:3d:c4:97:3e:16:a7:89:bf:59:
                    8e:b9:8d:91:df:a8:6f:92:be:b3:cb:92:a0:32:a8:
                    13:06:ce:5f:ee:99:08:02:57:ce:cc:54:1e:ef:f9:
                    db:e5:0b:59:ae:f4:f1:02:43:69:16:44:45:34:b0:
                    04:a1:05:2a:72:91:b5:5f:56:87:b3:3a:5e:09:9d:
                    5f:e5:b0:a0:42:e4:4f:04:dc:77:c4:b4:5f:dc:b4:
                    01:ac:c6:c1:a1:72:c1:c4:af:9c:c7:fd:81:f7:ea:
                    c2:c2:83:f7:ff:e1:15:6b:cd:13:e1:10:52:15:d9:
                    92:50:87:cd:25:3a:46:f1:0f:64:e1:70:e0:cb:79:
                    83:67:e0:70:3b:f6:b2:4e:0a:ac:9c:b3:2b:2d:5c:
                    8b:a2:9d:4a:69:84:1f:cb:89:4c:46:0d:ec:93:8b:
                    f6:2b:64:04:1e:d6:11:05:c5:17:d6:1e:1e:dc:29:
                    1c:08:6e:1f:2c:ee:3a:ea:f2:0a:39:02:6e:52:ee:
                    bb:80:6f:1a:8b:e7:14:f0:b6:72:68:b4:e9:08:1b:
                    a3:ba:0f:1e:5a:35:d4:8b:b0:62:b8:7e:e5:e1:77:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:9D:37:ED:3F:CB:A1:97:CC:A9:65:59:B5:C8:C0:27:66:1C:CB
            X509v3 Authority Key Identifier:
                keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:9d:25:55:ce:f2:de:5d:d6:f6:b1:07:0c:79:c0:38:5a:
         89:1a:0e:07:51:83:c3:a4:c1:bd:5c:40:a6:f0:49:56:b9:19:
         6f:91:25:c7:19:cf:b8:d7:24:31:31:9f:b5:c3:2a:12:2f:07:
         90:5a:7a:4c:42:73:ab:e7:99:16:04:cd:66:77:97:81:45:62:
         73:7b:a3:82:dc:01:20:b9:04:45:b7:84:f3:09:0b:86:73:e1:
         e5:66:0f:38:18:d6:59:4a:b0:1e:25:da:80:ba:e8:71:4e:39:
         77:1d:de:75:9b:70:e6:2a:07:ed:85:49:fa:7a:98:52:71:c2:
         f4:20:e6:06:46:3c:aa:d1:38:4d:f3:c1:93:bb:03:21:e7:18:
         e6:e0:0a:50:c6:f6:38:65:6a:0f:3b:c4:3e:dd:f7:e5:d7:c4:
         21:07:21:9b:ca:4c:e3:8f:b9:a6:e9:a6:e5:49:50:15:e8:7d:
         3e:9a:d2:34:cf:ed:ec:db:18:e8:06:66:33:9e:b5:33:38:07:
         6e:c7:ce:6a:c3:ec:b3:ed:5e:61:f7:bf:9f:6e:91:2a:9e:55:
         db:55:76:b2:1b:91:6d:3c:49:ee:e5:67:fb:d2:72:b1:74:bb:
         1d:96:e0:82:e2:a0:25:8d:29:d6:91:c5:3f:52:2d:2c:3a:46:
         65:6a:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----