Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
File:                     nTs_-TuDNzXKzWUs40n6MjQCQys.mft (raw, json)
Hash identifier:          mgM0bk02t8+ob5ruBtj8xQt6+6Wyts2D7DA5hqXqgKE=
Subject key identifier:   58:35:93:96:57:52:18:5D:4C:F2:4A:78:5F:15:80:EE:44:88:E4:E3
Authority key identifier: 9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B
Certificate issuer:       /CN=9d3b3ff93b833735cacd652ce349fa323402432b
Certificate serial:       01962DF3CEE81680BB8F17C6D0902C657902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft
Manifest number:          141B
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: F8WpKfkO6WPBdgcnLvLi6tQEwfY.roa (hash: aC9X5Qw0ukYXbx0znES1kvpxFjIQA5ZR++ffurv/QKw=)
                          2: nTs_-TuDNzXKzWUs40n6MjQCQys.crl (hash: QaTCxDi3x3zBY3sLrGAUs0nwimj/9AfbdGP93XvM128=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ce:e8:16:80:bb:8f:17:c6:d0:90:2c:65:79:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d3b3ff93b833735cacd652ce349fa323402432b
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=583593965752185d4cf24a785f1580ee4488e4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:8a:87:59:fd:93:da:9c:9c:a2:a3:25:44:
                    b7:8c:c5:bd:68:f5:9a:a2:19:28:ad:e1:5e:26:4d:
                    47:27:0a:e7:63:4d:2d:eb:2c:b0:f4:c1:c3:2b:dd:
                    be:b5:f7:61:82:ea:03:ee:8b:37:ad:d2:5b:15:76:
                    25:c4:ed:e5:71:a5:1c:82:0b:1d:33:4e:e5:c1:5b:
                    8c:5d:6f:12:ba:c6:e5:8e:6b:25:7b:a1:1f:4d:af:
                    29:f8:13:6e:7f:21:c8:d1:52:93:3a:b9:5a:c4:ff:
                    5e:07:df:37:d5:36:5f:2c:60:7a:d7:58:53:47:2b:
                    b9:0a:04:1b:96:2d:61:a1:26:03:99:a3:e1:0e:b6:
                    d7:5a:39:c4:ae:ad:7a:81:cc:54:f7:c7:2e:9d:10:
                    1a:04:08:e1:0f:94:ec:f2:8f:6e:67:aa:7b:af:5d:
                    d6:98:31:b7:ad:8b:0b:8f:2b:39:f1:43:8b:76:89:
                    4e:d5:68:06:74:1c:11:cf:25:96:e9:81:f6:42:2c:
                    16:c5:a0:0b:3e:52:08:b8:70:18:30:72:9a:cd:af:
                    85:e1:99:7c:07:8b:ac:ae:14:ba:71:68:14:90:93:
                    a1:83:a7:b9:c2:65:63:b6:3e:65:ef:ca:aa:33:80:
                    27:41:55:b2:fc:8a:cd:bd:79:33:3c:29:03:90:c9:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:93:96:57:52:18:5D:4C:F2:4A:78:5F:15:80:EE:44:88:E4:E3
            X509v3 Authority Key Identifier:
                keyid:9D:3B:3F:F9:3B:83:37:35:CA:CD:65:2C:E3:49:FA:32:34:02:43:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTs_-TuDNzXKzWUs40n6MjQCQys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c5d4b2-b57f-4562-aabe-c8ceab8bc050/1/nTs_-TuDNzXKzWUs40n6MjQCQys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:9f:fb:dd:c0:47:5a:f7:d2:7b:3a:84:74:ce:45:e5:4d:10:
         34:c5:4a:95:be:1f:f4:78:bd:64:8f:b2:55:8f:67:70:a6:34:
         db:57:15:e1:84:20:23:87:4a:d4:7d:36:2d:ea:4f:5c:ac:a9:
         71:7e:38:7b:a5:d3:d3:fa:98:8d:be:20:31:28:a1:94:11:b6:
         3b:84:17:c0:5e:ce:4a:2f:5c:e9:df:68:81:d7:88:b3:f2:aa:
         05:65:d4:b3:5b:c6:38:c9:bf:28:aa:e8:4c:26:1d:08:e2:34:
         7b:11:e6:a6:49:f2:fa:83:ae:d1:d6:e7:e5:9e:f1:05:57:ca:
         e0:4e:fc:12:ee:07:6b:51:98:2e:29:dc:20:0c:a6:74:03:09:
         5b:59:ac:01:f4:4b:8b:21:fe:a8:e0:82:cf:46:01:dd:f5:55:
         18:ff:b6:e7:fe:4d:ba:62:30:11:5b:76:04:fc:1e:97:8a:0b:
         38:7e:a9:89:4b:7a:43:99:49:0e:20:1a:51:e7:86:e5:ff:4d:
         35:0e:50:8a:5e:f8:c4:2c:e9:ed:e6:9c:60:35:8f:1d:dc:73:
         fb:32:30:0a:f0:57:dd:5b:fc:ad:8c:e9:84:a7:8a:af:69:cd:
         50:d5:a6:84:1c:ea:2f:0a:96:bd:be:74:b9:73:0c:0a:74:32:
         b1:89:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----