Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft
File:                     nDKfMzH1ND8pDrSkHxbENjooLJA.mft (raw, json)
Hash identifier:          6mSfdNyVIDc9wr/ge7LKqTvBKDeHrMpK41PP7UlwJbM=
Subject key identifier:   4E:B0:23:F4:DA:E5:97:6D:68:BB:E5:60:78:8F:8E:CF:24:BF:78:E4
Authority key identifier: 9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90
Certificate issuer:       /CN=9c329f3331f5343f290eb4a41f16c4363a282c90
Certificate serial:       01962F07206C632AC293CE1B156D13535A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: nDKfMzH1ND8pDrSkHxbENjooLJA.crl (hash: hVTIkzOz+SaEUTiHBlqqxj9gQYhqhBfrVYoZDFGkGOc=)
                          2: xXqtZaQE8p1BJ-LrGDHK3ctGl88.roa (hash: 19HlQM5dbXIMn5dc2AbBJAmDmCjDbQENEnPoWF/ZUJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:20:6c:63:2a:c2:93:ce:1b:15:6d:13:53:5a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c329f3331f5343f290eb4a41f16c4363a282c90
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=4eb023f4dae5976d68bbe560788f8ecf24bf78e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:19:f3:65:a8:f8:dd:3d:b5:f9:f6:41:1c:
                    aa:86:28:a6:6a:0f:08:8a:02:d1:0a:f0:cb:d0:d7:
                    3f:de:4d:9f:8d:27:bf:98:38:d5:98:f8:53:1e:95:
                    aa:b1:1d:2b:78:39:c7:9f:fc:09:dd:af:42:76:d8:
                    0e:e6:d5:b3:d5:1a:65:b4:4f:da:6c:ad:39:1e:3f:
                    a7:ce:ab:91:25:14:23:4c:f3:23:1b:27:7f:0e:41:
                    8d:30:5c:14:ff:d9:1d:3f:2c:d3:f4:34:c8:aa:3a:
                    52:fc:96:bd:5d:59:3b:00:01:cb:78:09:00:bc:e3:
                    02:e0:d4:58:0b:f2:71:bb:3f:81:f9:d7:37:ca:f3:
                    25:2e:69:7b:34:a4:b4:50:35:01:56:a2:86:33:27:
                    68:19:df:5e:b8:81:ae:72:39:85:0b:0a:9f:04:28:
                    78:58:7e:c4:86:d9:63:76:5d:7b:1a:bb:98:37:36:
                    49:1e:6e:e6:8d:23:d7:fe:5c:bd:84:be:f4:c1:85:
                    07:03:ab:7d:8b:d9:74:c8:93:ce:d1:60:ce:81:16:
                    36:e4:bb:bb:86:25:cc:b3:4d:e1:2b:39:9e:a9:f3:
                    50:6f:2c:9c:f4:af:24:cf:97:c5:6d:b5:49:7f:dd:
                    8f:58:d1:08:f5:5e:4c:a2:9a:75:10:47:d1:ca:91:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B0:23:F4:DA:E5:97:6D:68:BB:E5:60:78:8F:8E:CF:24:BF:78:E4
            X509v3 Authority Key Identifier:
                keyid:9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:fe:d2:10:e2:7e:cb:d4:47:ae:8a:86:a8:30:aa:2b:87:ff:
         ff:4c:d5:12:a8:5e:c4:f1:4d:0c:fb:05:bc:fe:64:09:a0:a2:
         25:f6:0e:66:e9:09:a9:3b:9a:8d:c5:7c:ef:57:18:c4:c2:65:
         66:3d:61:df:48:74:60:b8:78:ec:48:fb:7b:d1:57:ef:9a:5b:
         a1:a2:49:b7:87:9a:1a:c0:98:be:51:79:f3:ee:47:53:c0:c7:
         52:19:86:ac:01:f1:dd:11:e8:cd:ef:42:f0:cb:2b:c7:1b:1d:
         61:03:17:b7:38:1b:f6:18:7d:6f:31:33:9a:9b:5e:13:76:cc:
         9f:d7:98:c1:07:83:09:97:b9:fc:0f:68:f4:0c:f0:d8:56:31:
         d7:e1:99:f4:d2:bf:8d:04:ad:9e:23:46:55:79:83:a7:22:64:
         a1:bf:b1:18:a5:40:05:c3:db:38:a3:e5:88:ae:bf:ca:9b:09:
         77:e6:d7:22:3b:dd:f6:e9:4b:fc:a4:9f:94:fa:e2:52:3b:cf:
         44:77:bb:14:bb:e8:dc:4c:2e:ac:60:4f:98:f4:9e:df:95:a6:
         40:a9:b0:f8:cf:c7:40:79:bc:3e:02:e2:a2:71:30:26:74:e7:
         f5:1e:20:87:7f:5f:b0:0b:e6:86:2a:8a:da:76:0e:55:b4:aa:
         c9:e4:e5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----