Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File:                     nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier:          klHyHCGNblFHH53brMu9HgMSdU4X7s+qslxeGFRNuGQ=
Subject key identifier:   A8:2D:1D:08:AC:6D:E2:02:95:5C:FA:3B:49:B1:EE:CD:B9:6F:B6:C9
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer:       /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial:       01962ECF909AFF30A34D8FA478E254270C4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: N5EAL31Rq1vkAkIwQt79yxTP8F5qBwxobttmYGtXZAQ=)
                          2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:9a:ff:30:a3:4d:8f:a4:78:e2:54:27:0c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=a82d1d08ac6de202955cfa3b49b1eecdb96fb6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:af:9c:28:81:37:b5:98:28:a4:5c:1c:bd:
                    ce:54:0b:81:4f:4e:14:e4:5f:71:98:6f:33:3e:ae:
                    e0:a5:34:c6:d2:a6:d2:6b:3e:de:ca:fa:1b:f6:d9:
                    77:61:a9:f7:a0:d8:d6:c4:84:cd:72:71:4f:95:f4:
                    57:35:59:ab:ea:9f:a1:f5:01:a3:17:a3:05:0e:b9:
                    5f:1e:7d:62:0e:7c:e5:51:83:4d:30:e2:5e:af:4e:
                    37:f3:f0:3c:e2:38:17:76:2e:b6:58:3b:e6:2d:4a:
                    f5:d5:ac:ed:d2:f1:29:1d:44:02:bd:fd:f2:c9:e1:
                    db:70:9b:25:18:6f:33:de:76:a2:f4:05:c6:37:b8:
                    a2:67:24:0a:2d:f2:e2:9e:7e:a5:af:11:f8:e6:99:
                    45:36:8d:00:dd:53:f8:63:06:73:88:c2:da:ca:05:
                    38:6c:07:71:65:83:75:60:f2:b9:4f:21:22:95:9e:
                    01:3a:7d:71:82:0f:ac:79:12:ba:bf:cf:10:57:00:
                    e4:b7:04:de:34:37:53:8e:a6:af:f9:76:f8:aa:f8:
                    fb:72:f0:d3:59:23:d6:b6:44:5b:95:57:f9:fd:32:
                    6a:97:32:eb:eb:9c:09:95:89:de:ed:ec:61:06:92:
                    06:64:29:a3:0c:d2:98:12:96:74:19:04:ca:cd:7e:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2D:1D:08:AC:6D:E2:02:95:5C:FA:3B:49:B1:EE:CD:B9:6F:B6:C9
            X509v3 Authority Key Identifier:
                keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:27:5e:99:9f:00:b6:3e:fc:ae:67:5a:24:d3:0e:c7:8d:
         9f:63:8e:35:de:67:9d:26:7e:ac:69:93:e8:a0:2f:fe:c7:42:
         35:f1:f9:b8:a8:81:a7:bc:8a:30:9e:ab:7d:c2:19:ee:95:56:
         24:de:df:a8:18:c9:f1:84:bd:f2:51:bd:f8:80:2d:45:36:e2:
         74:22:6b:b8:47:77:0c:74:8b:aa:44:d1:83:47:ac:d7:1d:ee:
         33:91:12:3d:18:39:3d:e3:8c:97:36:d3:64:ba:71:a7:cc:78:
         fa:50:c6:d6:e4:55:aa:73:20:2f:cf:80:06:f2:09:09:c9:11:
         c1:73:12:d8:b9:c4:0f:8b:0d:a6:69:95:b7:8b:aa:51:ed:a9:
         8a:4d:cb:bf:90:5f:bb:a8:6b:5a:31:66:ee:6f:c0:f0:33:16:
         f6:b1:2d:4b:a3:a4:d5:fd:b1:a8:ed:46:a7:91:da:24:54:49:
         b6:c4:c7:f8:dc:3a:59:e0:19:fd:d9:cd:aa:2b:76:c8:9c:8b:
         af:59:9f:32:bc:2d:91:fd:db:41:e1:49:3e:7e:8a:66:6c:ca:
         c1:14:98:f8:22:5f:de:0d:02:5f:e6:b1:a6:5c:43:3a:de:a7:
         0a:f4:3a:b4:94:d0:1b:d3:64:49:03:ac:36:b3:6f:b5:5e:36:
         5b:e2:47:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----