Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File:                     nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier:          r58qomU5scqJBSamXMP7oz1dvGHsfSvGs+U1vtudSD8=
Subject key identifier:   85:D6:42:3E:0E:D1:62:77:4A:31:47:77:68:94:B2:62:EA:B5:52:0C
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer:       /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial:       01962FAB8EDF497CA705EEFD255571B7EF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number:          0884
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: _O2K9lYrU1ufrJyVF92JtVYbIao.roa (hash: opCkasUjE09S1Hv7hZM9HKqW92oCRoLsRmm8L97k62Q=)
                          2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: +3VC3B0cRvJkeDfetDrnVz7Ku08AbEavnXCiRAa0uNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8e:df:49:7c:a7:05:ee:fd:25:55:71:b7:ef:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=85d6423e0ed162774a3147776894b262eab5520c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:b3:e5:ef:c4:08:67:23:96:12:5e:dd:9c:
                    01:d4:9e:a4:63:f2:c2:91:f7:7a:02:51:28:e2:53:
                    e4:da:36:31:51:da:cd:79:80:88:ee:b3:b3:0c:f9:
                    07:ca:42:e4:78:1d:57:a6:c5:d5:1f:d0:3c:18:01:
                    b5:d9:81:ac:3d:6d:14:eb:ee:5e:6a:17:a6:c4:cd:
                    bb:29:72:18:a8:52:49:5f:54:04:a5:90:36:07:81:
                    76:28:03:0d:57:da:58:8c:90:3e:94:46:f1:5f:5c:
                    79:8f:c2:23:39:b9:d5:07:11:d9:01:4e:93:8a:3d:
                    4b:b8:5b:43:d9:88:33:10:c2:b6:07:17:96:29:f6:
                    2f:68:98:95:a5:6c:97:0d:a0:ab:5e:9b:3c:a9:93:
                    19:50:f9:6f:ec:b4:53:e9:af:62:61:41:82:33:40:
                    6a:97:72:46:48:38:1b:53:d6:38:b3:ee:f6:28:04:
                    74:52:6b:ba:19:ff:78:e5:3d:5e:2a:8b:4a:c3:1c:
                    6f:6a:02:77:ef:99:ae:40:94:d2:e1:16:9e:b2:2e:
                    a3:f5:08:6c:18:84:13:22:7c:f1:1d:ec:61:ca:2c:
                    94:b2:84:8c:77:57:d6:b9:29:f5:c3:72:c9:19:49:
                    fa:65:df:3f:ff:99:26:24:2c:7a:14:13:36:d1:98:
                    55:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:42:3E:0E:D1:62:77:4A:31:47:77:68:94:B2:62:EA:B5:52:0C
            X509v3 Authority Key Identifier:
                keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:a1:63:7c:b0:1c:4e:0a:81:7e:fc:4d:7a:cf:8c:d2:02:
         59:9b:09:65:4d:d4:56:a8:3e:a3:d9:fb:f7:0a:ad:a5:d1:24:
         3c:92:96:d7:7d:ed:df:ec:fe:12:08:3d:af:0a:79:13:6d:07:
         04:3d:9c:5a:24:3e:72:75:fb:6d:82:a2:42:55:0a:c7:6a:fb:
         ad:a2:12:87:f2:62:90:5a:09:89:b9:4b:78:e0:1c:b6:15:10:
         fa:60:35:f3:fa:7f:c7:ed:ff:c8:fd:81:3c:a5:55:50:ae:cb:
         2c:df:b0:50:dc:49:e3:a4:6a:c6:99:fb:24:f4:b7:e6:ea:ea:
         b0:54:12:6c:10:b7:75:dd:c9:53:b5:5b:1a:c1:9a:d2:46:77:
         f6:6e:49:b2:74:03:bc:ab:b9:6c:1e:f0:ac:97:ef:7d:77:d5:
         e4:95:0d:6c:42:c8:aa:2c:4c:e2:98:4b:60:3b:36:f2:72:23:
         59:76:0a:7f:c9:5f:28:d5:ae:ca:ac:4d:7e:b1:ea:65:1e:c9:
         d5:08:e7:64:f0:cf:e6:41:03:51:5f:ef:f9:28:b1:4c:64:86:
         8d:e2:7b:a8:48:69:1a:33:e2:93:76:1d:2f:b9:84:5b:d2:e6:
         0a:c9:aa:5f:d5:34:40:0c:b6:dc:a0:22:02:3d:ab:32:e1:c8:
         6d:c1:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----