Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft
File:                     nGfqNKARpHc4cVg-w5VOeR2MAo0.mft (raw, json)
Hash identifier:          L8NaHJKqjd0hRuI717nat/SIhWELC2a6ghBeAiRDtjM=
Subject key identifier:   7B:E9:AD:62:5B:27:5A:FE:79:BC:C7:A0:FC:E0:90:3A:DC:A2:A9:F6
Authority key identifier: 9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D
Certificate issuer:       /CN=9c67ea34a011a4773871583ec3954e791d8c028d
Certificate serial:       01962F74725FDD4BFE379056B00C1A2C1BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: NCPzn1GpZq4vT4gRDeBcmpEUhRQ.roa (hash: Vq8Q1+OKJnlcLx/yX0O6NcYNdeQRXSpw2T1WMWL6+Zw=)
                          2: nGfqNKARpHc4cVg-w5VOeR2MAo0.crl (hash: 0Md1OVQ5cJcJ9UQ5RNq7mEcmkadB9V9YQ+CuNNaeIKY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:72:5f:dd:4b:fe:37:90:56:b0:0c:1a:2c:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c67ea34a011a4773871583ec3954e791d8c028d
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=7be9ad625b275afe79bcc7a0fce0903adca2a9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:bc:78:75:8c:9b:87:6c:ef:d7:4a:70:c2:
                    f0:a8:8c:45:e5:37:3c:79:6e:27:a1:9c:8f:cb:48:
                    2c:9d:25:a1:ea:b6:38:30:21:da:ba:c8:98:dc:89:
                    3d:a0:75:42:fc:60:1b:cf:ce:64:e0:e8:9d:dd:de:
                    2d:0c:13:a3:5c:e9:ef:e6:a1:83:c3:09:3d:96:b7:
                    7a:ea:c0:68:d4:90:45:82:b0:1b:02:c9:99:ce:a7:
                    c6:e3:89:56:60:5c:0b:0f:7c:af:11:25:82:15:b7:
                    14:35:e6:d5:86:44:1f:c9:55:eb:a8:9e:e5:92:e5:
                    8f:99:1b:83:e0:02:f8:6f:3e:0e:87:bd:02:0f:e1:
                    f9:df:6b:19:fa:41:19:78:07:96:e5:e7:b2:1f:d8:
                    31:bc:ca:4b:69:96:fb:84:f8:9b:37:bd:d1:d1:f5:
                    9e:59:28:15:a5:8e:2a:4f:bb:28:8d:8d:d2:0c:93:
                    19:96:16:89:d1:fc:ae:d7:95:62:ce:65:69:61:23:
                    ba:49:24:23:eb:5c:7f:50:0b:f8:62:d5:f5:47:27:
                    1e:97:c2:81:f7:af:65:2c:97:2a:77:0b:72:6f:30:
                    6a:c9:b1:c1:4c:6d:40:a9:64:9b:f0:61:76:c3:9a:
                    cf:dd:c4:f6:4f:17:b2:3b:70:7c:19:bc:31:64:d1:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:AD:62:5B:27:5A:FE:79:BC:C7:A0:FC:E0:90:3A:DC:A2:A9:F6
            X509v3 Authority Key Identifier:
                keyid:9C:67:EA:34:A0:11:A4:77:38:71:58:3E:C3:95:4E:79:1D:8C:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGfqNKARpHc4cVg-w5VOeR2MAo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8669d3-76cd-4cb0-8278-82c67c69e923/1/nGfqNKARpHc4cVg-w5VOeR2MAo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:23:21:af:6a:f6:33:d2:b0:40:a7:72:50:43:0c:a5:50:d6:
         42:77:e1:f8:13:ff:30:4d:fe:8e:ff:dd:c1:ec:50:37:2d:b2:
         c6:3a:17:f3:51:45:9e:95:d2:7f:65:a2:a0:77:cb:65:47:8c:
         02:67:56:a0:dc:35:85:82:f7:39:a8:12:7b:6a:df:50:d0:af:
         b7:40:c7:d7:29:da:13:9e:74:7d:69:e1:b4:a1:5c:72:94:1d:
         5a:05:9d:a0:9c:bc:11:39:f3:dc:8f:05:a8:fc:06:1e:0e:32:
         9c:c3:4d:e4:33:0d:88:aa:29:97:5c:8a:61:01:bd:ef:51:38:
         00:aa:d7:aa:37:c7:bf:51:73:70:49:40:20:84:63:c3:c4:ca:
         4a:78:11:88:db:57:3b:60:28:14:de:0b:c2:dc:40:bc:f1:b8:
         94:80:f8:3e:d5:b5:b7:0d:a3:e4:56:95:e4:48:28:c4:67:e7:
         25:43:b0:7d:39:88:71:d1:c0:a7:14:0a:ab:d9:59:62:6f:ce:
         3e:94:0e:b7:fe:00:61:8a:c3:ec:62:bc:30:0e:74:4d:4b:2c:
         23:2d:f0:c5:be:a7:fa:7c:97:a5:91:50:96:b6:4f:1d:14:ed:
         4a:6a:37:c0:aa:de:e8:85:2b:fa:ed:b1:5d:a3:6b:80:4c:d8:
         4a:72:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----