Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File:                     nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier:          Pjvc7TNouKwneUH8NDoEpqs/fzBclGS/P3ZOZEJiLxM=
Subject key identifier:   A0:C2:BF:49:79:6B:54:7F:4C:79:F1:28:AD:C7:12:39:57:51:FE:EE
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer:       /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial:       01962FAB4C971B92D8D69496D3B536C3E654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=)
                          2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: eQUQ2EC7OoX1lOzQLAgB++uuEXfuNllHd9TvDa4Bcis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4c:97:1b:92:d8:d6:94:96:d3:b5:36:c3:e6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=a0c2bf49796b547f4c79f128adc712395751feee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:de:e5:ee:64:46:28:27:8d:6c:5c:ad:be:
                    56:24:32:0c:01:c4:70:a7:ab:d1:a1:6e:a8:e4:30:
                    63:f8:6c:d0:be:dd:2a:d0:55:7f:40:4f:0c:67:42:
                    e2:af:01:b6:a4:94:c8:0b:67:38:77:4d:72:85:d7:
                    9c:24:f1:80:65:e8:a0:43:40:81:f1:9e:1e:fc:c8:
                    23:ed:50:14:5d:cf:58:d2:a4:72:e3:d6:3b:b4:5f:
                    83:cf:49:8a:42:61:27:aa:95:cd:14:1e:d2:f7:ed:
                    56:e0:a9:9a:f8:ff:8a:d2:e2:7e:3d:05:18:ea:01:
                    23:66:3c:3d:f6:0b:6d:29:06:96:13:13:46:17:1c:
                    ff:d4:91:b7:09:d5:f4:92:30:d5:85:18:45:f0:3b:
                    ae:61:72:d7:7d:99:2b:2c:45:d7:2c:72:54:f4:40:
                    dc:99:3a:a5:f3:84:5b:28:5a:2d:64:ac:36:ec:83:
                    5a:71:a9:7c:93:20:54:97:80:32:c9:5b:2d:4d:dc:
                    3b:6c:81:9b:39:80:c2:d5:9d:ad:4e:8b:09:b9:ed:
                    d6:4b:d4:1f:de:fb:e3:2e:ae:6c:86:5d:0c:9b:63:
                    92:75:fa:19:cb:31:84:52:81:a0:15:e4:9d:07:b7:
                    d0:c0:bd:e9:53:04:e2:90:1e:b7:07:d1:b8:54:d1:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C2:BF:49:79:6B:54:7F:4C:79:F1:28:AD:C7:12:39:57:51:FE:EE
            X509v3 Authority Key Identifier:
                keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:50:83:db:1d:f0:52:81:d3:3c:cd:3d:a4:f7:0e:95:5a:3b:
         7f:58:41:a2:d9:44:1f:f0:97:69:f3:fd:b1:ed:66:bf:99:71:
         bf:e1:f6:ba:c9:9b:07:4f:98:79:87:17:b7:1d:50:61:9d:94:
         b1:2d:cb:00:76:cd:7c:ff:ce:4d:66:d3:e3:33:f1:dd:ee:7e:
         54:59:35:72:f3:78:f5:cd:11:a1:25:63:e3:9c:31:11:af:65:
         9a:dd:43:95:61:dd:11:40:a9:3e:dc:9c:15:03:0a:4d:a6:fb:
         b6:a9:a5:bd:ae:63:c3:16:46:4d:9b:89:f1:01:1c:be:a8:83:
         bf:e8:1e:5f:db:77:91:42:b3:ad:30:d8:f5:0d:74:22:d7:cf:
         6e:95:bb:97:2b:34:9f:a6:eb:36:5c:1d:74:ab:6d:4f:63:39:
         ab:85:cb:5b:33:1f:61:b3:56:26:a8:12:f9:2c:14:91:6c:2e:
         4f:3f:9b:67:70:11:e5:2e:af:0b:74:44:64:cf:e8:e0:07:b0:
         7d:b4:ca:23:5c:65:60:ce:ed:85:98:ad:0e:b6:81:97:71:51:
         d5:ea:d0:c0:de:f4:50:67:ed:a8:7b:fc:66:7b:66:43:54:b8:
         4a:97:fc:77:c3:09:7e:78:53:d3:e7:e6:49:e0:7f:d9:98:29:
         29:b6:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----