Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File:                     n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier:          2E5ZxVG6c0CNUa08+U4UVrlldvGFIku5xfnei1YpFYo=
Subject key identifier:   F8:B1:EB:70:7A:A0:06:07:20:03:C8:90:FA:65:C5:A2:B8:1C:CA:78
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer:       /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial:       01962E619DAFDF14101FB4F151610A8506ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number:          02A8
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
                          2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: GeTptXnar+LZ5Xr/kqHwUOeAWCBZi0ZXOPXmmx5dt2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9d:af:df:14:10:1f:b4:f1:51:61:0a:85:06:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=f8b1eb707aa006072003c890fa65c5a2b81cca78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:98:8f:77:f6:3e:e2:bd:c9:45:70:4e:0d:
                    12:48:b3:6b:80:7b:43:82:65:0c:7c:33:1a:7a:3c:
                    1c:09:ef:25:84:f1:07:78:19:8f:d5:c2:48:bd:2e:
                    ad:bd:db:ad:73:90:f6:b8:6c:2e:ed:64:7c:4a:fc:
                    62:a0:60:b0:27:77:5f:3e:59:a0:9e:13:a9:cc:1e:
                    6e:34:48:03:5e:2d:be:f6:f8:4a:bd:7d:41:0f:ae:
                    9f:96:a9:1b:54:3a:08:db:f1:12:56:bb:f5:01:bf:
                    2c:07:dc:17:32:26:ac:c1:cc:73:3f:92:e0:a2:9c:
                    e1:1f:41:2f:b1:4c:35:a6:8c:20:b7:fa:87:e9:02:
                    b3:c5:ad:72:f8:17:96:94:09:a6:6b:54:9d:61:b6:
                    37:20:73:b2:53:36:1b:ec:54:91:43:f2:0e:78:e4:
                    c3:af:61:56:52:b6:54:c9:bb:be:e4:cc:9b:8d:15:
                    de:ba:61:09:92:6f:77:7e:f9:23:68:ad:ed:e0:2b:
                    02:ef:a4:c3:37:bc:bc:8c:cb:67:56:fc:4f:29:d1:
                    45:d9:96:e6:73:4c:a5:69:8e:fb:7e:98:e8:93:a1:
                    e9:2f:65:60:c1:0b:97:23:be:9e:06:86:3e:62:5c:
                    64:6d:ba:b1:a3:22:6b:89:3f:55:64:42:9b:01:a1:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B1:EB:70:7A:A0:06:07:20:03:C8:90:FA:65:C5:A2:B8:1C:CA:78
            X509v3 Authority Key Identifier:
                keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:09:eb:52:1f:30:54:f5:33:04:cd:43:c0:54:f3:3c:0e:84:
         e1:b8:55:c7:31:fd:6c:c9:e5:89:7f:72:89:2b:de:98:4b:83:
         ab:fe:b1:ec:b1:58:86:3e:4f:42:a7:53:ca:6a:98:9b:d7:17:
         94:31:f2:e4:8f:35:b4:50:46:32:e7:92:7b:66:37:27:b5:8c:
         ec:91:81:4d:15:99:b9:4a:29:25:76:08:a1:63:58:eb:60:b2:
         57:09:1d:19:19:33:02:75:da:0c:20:10:c0:a3:e8:dd:ad:ac:
         22:a8:8e:d5:05:2e:6c:86:71:7e:03:52:d9:c3:d1:79:8c:c1:
         72:b9:32:f2:80:f4:ae:61:db:07:8d:ec:d3:17:8e:ec:4d:9a:
         82:82:59:17:86:7a:df:7d:4a:57:14:a7:dd:01:8b:c6:f9:c7:
         81:3d:d3:e6:10:71:8f:7a:42:61:ca:3b:60:00:e4:66:bf:c6:
         f2:87:26:5c:56:19:10:b8:41:b5:1d:36:1d:f9:20:d6:c6:a3:
         01:56:33:cd:27:e6:d3:76:fe:03:69:e3:f4:2d:fb:41:9f:cd:
         16:63:c3:a4:5c:08:f9:39:f2:88:12:67:bd:2f:95:7a:9b:2d:
         21:8c:f1:f0:a5:89:6f:f3:49:ee:95:a3:22:10:fb:f9:f5:67:
         9c:d3:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----