Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
File:                     nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft (raw, json)
Hash identifier:          f6oxmyuhJX2UsEio3hc78YXZNXGBjgXvSLs1T9Iqfws=
Subject key identifier:   99:F1:53:AA:D8:3F:CF:AB:BC:40:7A:8C:25:E6:27:41:A9:CD:A3:B2
Authority key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Certificate issuer:       /CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Certificate serial:       01962F0743A511DD215D63AD7B011625C1E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
Manifest number:          067E
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: bre9O2wrDggeCO-gClQtVcXHgMs.roa (hash: TZRQyZuvSyRj0lGzf2b/FG9R/6ZAoSht1L/fXzqCZUg=)
                          2: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl (hash: S0nNBYlHyk9OMibe8rry8UovpN7flm9ctQhgkmJtcl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:43:a5:11:dd:21:5d:63:ad:7b:01:16:25:c1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=99f153aad83fcfabbc407a8c25e62741a9cda3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:ac:9b:80:10:4c:5e:55:33:3b:ea:fd:d4:
                    d4:43:6e:cf:90:55:14:0c:5e:46:29:f1:5c:d1:03:
                    15:cf:9e:6d:6f:36:6a:f7:98:b9:71:91:93:2e:14:
                    99:a1:88:dc:75:9e:bf:08:99:ea:a6:6c:9e:dc:72:
                    59:eb:b2:9a:40:54:83:88:53:c5:64:ee:5f:61:5f:
                    70:96:5a:cc:1f:42:30:9e:88:b6:ca:40:1f:ce:b2:
                    ab:8b:54:8f:46:94:c9:a3:ef:ee:1c:ee:3a:4f:f7:
                    be:0d:ca:bc:40:a5:98:81:47:5e:f0:74:51:0a:20:
                    1a:57:18:2d:fc:54:3b:b6:a9:af:8b:d9:4a:11:0b:
                    5f:24:e9:50:b6:bd:7c:65:0a:f0:61:53:b7:88:8c:
                    02:08:ad:59:c1:5a:e4:13:4f:5e:27:af:90:69:27:
                    d7:a1:b1:3c:b1:96:5c:09:24:af:14:98:80:0e:41:
                    76:7d:91:31:f0:e6:8e:5d:00:07:da:44:74:e1:f8:
                    8f:e4:6c:7e:d5:93:5d:d3:b5:f9:15:35:2e:d5:fc:
                    20:db:34:b3:04:5e:e2:fb:5b:cf:a2:0a:70:5f:86:
                    7b:e5:b0:8c:ae:8a:36:a2:b8:e3:67:99:8e:ae:e6:
                    0b:ec:9f:70:ee:41:10:b1:2d:ff:fc:09:04:2c:d8:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F1:53:AA:D8:3F:CF:AB:BC:40:7A:8C:25:E6:27:41:A9:CD:A3:B2
            X509v3 Authority Key Identifier:
                keyid:9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e3:32:61:82:11:c9:04:96:9d:ee:55:72:ef:fd:04:54:3a:
         78:d8:67:dd:89:f8:7e:10:da:fb:6c:41:7e:71:56:71:c8:15:
         f1:a8:5f:ad:e3:54:11:f1:7d:69:7c:92:26:58:aa:10:c8:47:
         54:b7:7d:37:7e:48:45:a8:ff:c0:ff:90:32:81:ca:ae:d2:e4:
         98:44:42:f1:14:22:ff:22:58:6e:4d:e6:32:0f:21:93:fe:0f:
         17:9d:db:ac:3f:1a:6c:d5:8d:d2:96:eb:a1:26:73:ef:9f:8b:
         ca:24:31:27:54:ec:97:77:00:a3:2d:1d:d7:86:60:39:1a:67:
         67:e7:c0:b7:a1:52:96:54:eb:99:43:3d:09:fd:02:de:96:32:
         48:a2:8e:f4:21:2e:57:4d:8f:ae:fb:c0:71:2b:91:c1:0f:1d:
         a2:c3:a8:b1:c8:88:4f:0f:6c:99:bf:75:39:89:ec:16:76:b4:
         fd:a5:bd:c8:40:5c:35:67:14:d6:15:cd:34:d2:04:b9:8f:5c:
         26:0f:02:e7:c0:99:54:87:ad:d7:d3:d0:f4:fa:3e:3e:80:d2:
         4a:14:61:06:6b:27:53:7d:07:d3:82:2a:bf:61:4d:42:43:c7:
         60:fe:62:6a:c4:6d:9d:f5:40:3f:09:f8:cf:62:2a:97:23:f1:
         f3:57:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----