Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File:                     n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier:          2AGkOKr1W2suomb55I7lvHEWfq1Zt0FbpwWHdd7RaVo=
Subject key identifier:   49:3F:2C:9B:22:75:80:FB:F9:1A:45:26:CA:D1:12:0A:DD:62:9A:C2
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       01962E617AAE0221B9970F75CE9A5EAEA34B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: Jzi6jJ9SZ3rViS6uZE0u8bf720A.roa (hash: eJjmExeoetRrFmsV6X8Y7xVRrkNxyQjjkQ/pmteWEY0=)
                          2: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
                          3: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: 48tPhGcGNAySN2S8Sh4CG/yZ3QMvoGilqXF4w68/n4U=)
                          4: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (hash: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7a:ae:02:21:b9:97:0f:75:ce:9a:5e:ae:a3:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=493f2c9b227580fbf91a4526cad1120add629ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:f5:76:aa:b1:3c:f6:b3:a1:98:bd:c1:89:
                    5b:21:4f:9f:60:2b:a1:29:9c:b4:4e:16:89:51:3b:
                    3b:36:55:78:5b:cd:41:1a:59:13:cf:1b:9c:77:a7:
                    70:4d:76:12:a5:8a:4a:58:1e:70:78:db:7d:14:bc:
                    ad:b2:da:67:f2:36:5d:a8:fa:e8:ea:31:64:48:3d:
                    76:3a:32:b5:65:ad:29:7f:48:1b:c0:29:24:50:ff:
                    25:fc:a6:d5:04:e4:d5:b5:1f:03:86:2e:66:d3:75:
                    da:67:82:0c:64:6c:e4:a7:0b:43:93:17:2d:ca:3b:
                    63:48:f2:28:90:20:16:01:e6:bc:43:c7:bb:a7:e5:
                    a4:e4:96:19:a3:c5:14:a7:32:cd:0d:33:b9:02:4e:
                    e0:59:57:b1:cd:f6:d9:69:f2:74:d1:55:2d:f0:20:
                    7e:12:2e:c6:98:60:82:33:8d:cb:fd:2c:fe:60:da:
                    39:b5:8d:46:76:58:ef:e1:39:fe:b0:96:cb:17:6b:
                    c2:d3:be:82:05:5c:f6:a0:af:ba:dd:9a:6d:cd:5f:
                    bd:81:23:d5:d7:1d:6a:08:a1:3c:18:6d:1c:db:88:
                    a2:69:57:c8:4b:40:ed:42:d0:04:df:b2:25:8a:33:
                    80:d0:c6:ec:be:bd:da:63:91:a4:d2:ad:ce:9f:a4:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:2C:9B:22:75:80:FB:F9:1A:45:26:CA:D1:12:0A:DD:62:9A:C2
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3f:a2:88:1a:21:32:1a:66:c4:cf:b0:9c:bc:7a:96:0d:ae:
         74:c2:61:b6:1c:f8:57:c1:15:ac:23:a7:c0:be:b9:83:ea:cd:
         ea:71:97:fb:12:e1:b8:53:06:5d:2c:77:14:22:0a:6d:b5:e0:
         c6:5c:71:fd:e8:32:6f:f9:0d:eb:66:62:0a:c7:23:b0:1f:b5:
         46:6b:9e:fa:2f:f8:ca:f3:ed:eb:dd:70:48:33:89:4c:49:7f:
         1d:79:a4:c2:18:66:09:55:90:ec:5a:c1:2b:fe:7b:d4:0d:da:
         0a:69:04:f1:23:7a:df:4f:c8:1e:79:ab:aa:e5:99:fc:de:d9:
         e2:b7:a8:e2:74:0a:96:67:b1:3e:e1:5a:a4:66:54:b2:05:62:
         d9:84:7a:3e:4e:0d:bb:58:b7:a1:8b:d5:81:1c:c5:6b:79:fd:
         6f:0d:c8:49:76:55:6c:06:d3:da:9a:c9:e6:fc:83:7e:26:d8:
         16:12:0d:0c:9e:0e:30:fb:40:57:9c:98:ef:11:b2:71:d6:77:
         31:9b:56:fa:9a:ee:58:39:82:c3:a1:a4:95:dc:77:61:4e:0d:
         11:82:eb:18:d8:e7:8b:7b:e0:d1:91:2d:96:6b:fe:c0:b5:1e:
         1b:c7:c4:95:be:59:98:a9:a4:79:88:af:f3:f4:35:2c:3c:67:
         30:f4:2e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----