Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
File:                     nlY8Qm0ark7R5_WVNnSQIgiehHk.mft (raw, json)
Hash identifier:          oiK/ExNFCsOfWwdp6aa2gILq6xuOxI+M6oAVErz4mFk=
Subject key identifier:   2F:6D:F4:99:07:E7:FC:64:4F:E5:E5:68:3F:F9:49:CE:81:52:1A:77
Authority key identifier: 9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79
Certificate issuer:       /CN=9e563c426d1aae4ed1e7f59536749022089e8479
Certificate serial:       01962E2AF72EAF08BD8AB232792CA370839A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft
Manifest number:          09AB
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: DLPCyIKM7jz79PsqVnrxNoMgYXE.roa (hash: +QgaTeTZpZ2fDtls8hcOtAF0lYWHQbDmqjy56TBm3AY=)
                          2: nlY8Qm0ark7R5_WVNnSQIgiehHk.crl (hash: N4+p9VY1art5H7RjU+gllE6PJrmMT23Fa6Y9VaqtzLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f7:2e:af:08:bd:8a:b2:32:79:2c:a3:70:83:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e563c426d1aae4ed1e7f59536749022089e8479
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=2f6df49907e7fc644fe5e5683ff949ce81521a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0e:9d:41:d6:59:8e:7c:5e:90:63:43:32:fc:
                    8e:3b:30:62:08:22:90:35:1d:06:4d:03:c9:e1:1f:
                    4f:aa:9a:7e:86:04:ff:9f:eb:b5:85:76:ef:f9:99:
                    8c:14:c1:4a:32:8c:b1:85:ff:20:72:cc:0a:36:6a:
                    d3:0d:22:31:51:d8:78:ca:cb:18:7e:54:07:5a:40:
                    06:59:26:f7:a1:b9:76:a9:2f:1e:d9:ef:1a:23:4b:
                    80:99:70:7c:5b:d5:fa:1c:16:0e:e7:c9:2e:c3:b4:
                    78:e1:54:ed:ad:b2:36:6e:bf:cb:a2:e3:ff:17:a2:
                    a2:0a:60:38:dd:29:fb:06:87:c1:e8:c0:ac:bc:cc:
                    b6:6d:04:38:d4:17:a8:ae:f1:b5:eb:5a:14:2d:f9:
                    a7:da:97:56:d3:d3:11:61:eb:2e:46:8a:f5:61:6a:
                    cd:80:05:f6:d0:13:53:89:4f:61:21:af:20:1a:87:
                    77:aa:b0:d5:96:33:d1:9a:51:ea:dc:74:4a:9c:1f:
                    9c:4d:fc:ba:2a:87:a2:11:f5:0a:11:85:d3:86:e1:
                    39:81:69:a0:2f:74:6f:f8:43:7b:8b:d3:62:7e:71:
                    22:f1:7d:34:a2:97:fa:bb:c8:ff:60:d8:4a:28:be:
                    e1:0a:a3:52:6b:cf:02:5b:a5:9f:2c:92:e2:2d:a8:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6D:F4:99:07:E7:FC:64:4F:E5:E5:68:3F:F9:49:CE:81:52:1A:77
            X509v3 Authority Key Identifier:
                keyid:9E:56:3C:42:6D:1A:AE:4E:D1:E7:F5:95:36:74:90:22:08:9E:84:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlY8Qm0ark7R5_WVNnSQIgiehHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/55d595-d0bc-4ba2-80a0-afbcf366bb07/1/nlY8Qm0ark7R5_WVNnSQIgiehHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:01:b7:92:d6:1b:ec:37:d4:79:e1:c4:9d:5f:7e:10:b1:a3:
         f1:76:9d:ad:96:a6:f7:b3:68:4b:00:9b:62:05:6f:40:b3:3e:
         47:56:49:a2:ea:18:07:b3:9a:53:fe:94:ed:14:ba:bf:f9:28:
         b3:a2:25:72:fa:d3:84:a3:39:66:01:56:8b:a9:55:f9:19:12:
         ab:46:9a:99:b0:0b:0d:3f:bf:4e:85:89:b8:a0:20:1c:94:ff:
         82:fd:c1:ed:c0:55:98:5c:5e:a5:70:9b:95:26:9a:5d:08:54:
         8e:2b:81:73:de:19:80:f1:cb:d4:1d:47:ea:23:fa:ab:86:d4:
         47:1b:31:02:84:b1:fa:07:45:8a:b2:6c:89:ee:12:cf:56:b0:
         2d:3b:20:3a:62:65:46:6e:69:95:6f:09:c7:7e:d0:30:55:97:
         79:02:e7:a3:b3:aa:73:48:ea:9e:f2:95:de:6e:90:0f:8f:a3:
         35:8e:8b:64:41:0f:87:af:5f:d0:d1:16:1d:26:a9:98:ce:38:
         b2:01:9d:9b:0c:99:c5:ea:37:c3:38:22:f9:44:a2:be:bb:9d:
         d5:ce:50:d3:0d:99:2f:3f:b6:d8:5e:cd:52:7d:14:ae:61:2e:
         08:75:47:97:f5:68:76:d8:21:a5:28:e9:4a:f9:a0:de:63:a4:
         c5:96:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----