Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          aMpEBC3cf4A74497j9tyD9Hp0IvXRfwzMY6TJJ6L77Q=
Subject key identifier:   67:88:AF:0B:9B:62:67:94:0D:38:1C:EB:53:57:9F:58:1B:C0:63:AF
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       01962F3DA187E0B6AEA5906D699BA26DAD7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          01F3
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
                          2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: Wow3yM9JBmIpg0Z6Oh5kA1uQSoV5lq0nVclG8mRp5fk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:87:e0:b6:ae:a5:90:6d:69:9b:a2:6d:ad:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=6788af0b9b6267940d381ceb53579f581bc063af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:35:5c:b0:0a:72:38:0c:bd:ff:0f:41:8b:8c:
                    bb:1f:26:bb:f3:f7:38:10:97:a1:69:b5:45:6c:0e:
                    30:d8:50:ee:4d:94:ad:f3:84:ff:b3:ff:ac:c3:0a:
                    c0:30:27:8f:62:85:0f:ad:48:a6:ca:20:b1:5a:30:
                    b4:6d:81:72:a9:cb:e5:c7:77:c1:6a:56:b1:da:8b:
                    c6:1b:45:dd:4d:4d:cf:8f:bf:d3:32:32:bd:c7:ca:
                    d1:c2:d0:f7:fe:56:ce:86:90:c8:06:ff:8d:96:75:
                    55:82:d1:42:09:05:68:9d:bc:2d:99:a2:cc:5e:52:
                    01:82:db:1f:40:29:4a:b7:a2:2f:48:2b:bf:ef:48:
                    05:99:ff:af:68:a8:dc:3b:31:00:8e:33:b9:a5:e7:
                    0a:99:15:a4:69:27:de:7b:0a:39:49:f0:12:7d:c6:
                    7e:ab:a8:03:49:0b:d1:41:4c:2f:c2:42:2d:08:50:
                    71:dc:a6:fe:fc:d2:26:16:04:85:31:a0:d4:10:6c:
                    26:8e:5a:32:18:45:09:60:29:6b:13:a6:a1:12:5c:
                    7a:d9:f6:3a:e7:26:e1:58:f4:1a:3d:79:59:a8:96:
                    f3:b4:b9:b0:1d:b8:75:5b:7b:51:cf:33:26:80:10:
                    ad:6a:12:cb:08:2e:72:df:f6:06:f0:ac:81:dd:d3:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:AF:0B:9B:62:67:94:0D:38:1C:EB:53:57:9F:58:1B:C0:63:AF
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:5f:29:c1:0a:20:a0:a0:d1:e8:33:17:99:8b:75:90:8e:
         c3:db:fe:ee:13:6b:1c:ce:7d:77:b7:55:2c:2d:81:07:7e:90:
         c3:99:e3:7c:f4:fc:99:e9:6a:4d:ee:0a:02:10:a5:9d:43:4f:
         f6:9c:98:56:cf:80:da:2e:56:40:7c:0e:42:f7:d1:b0:4e:ae:
         e6:92:d1:26:59:9e:3b:39:69:f5:8a:f3:7d:04:bc:39:1d:b1:
         67:2b:4b:ac:35:46:ca:51:66:81:52:f4:18:de:8f:a9:da:49:
         d5:6d:45:20:6e:2e:8d:67:78:28:69:3b:4a:a3:65:c1:01:3e:
         a3:f7:f2:0a:3b:d9:d4:d6:7e:6f:19:ed:47:9b:1b:bd:f5:66:
         57:1a:25:10:1c:50:da:18:39:87:00:f5:8f:52:c4:bc:c9:84:
         5d:88:4e:ed:2d:7f:8e:be:cb:24:3d:47:2b:e9:92:b9:38:1b:
         e1:63:be:c9:01:d9:82:c4:0c:df:ad:bc:b4:31:e0:06:50:a2:
         96:c1:2a:da:22:98:44:45:7c:10:ae:5e:09:3d:a5:f6:18:23:
         58:99:ad:c3:77:e9:55:d8:49:b7:f4:ee:c3:a1:3f:45:de:c3:
         cd:26:a2:00:4d:aa:ca:b5:3e:24:d4:7e:ad:b7:57:f5:61:91:
         57:4d:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----