Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File:                     nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier:          ZJcGameaoWO5YMf8kHGJvBKQgSVqnwHVN98MRefm4aQ=
Subject key identifier:   00:5D:81:DB:65:06:BE:35:67:74:4D:F1:9C:4A:E0:6A:6B:06:0D:E4
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer:       /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial:       01962E999529C7824AF47C99C103706EBBE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number:          0C61
Signing time:             Sun 13 Apr 2025 10:02:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:19 +0000
Files and hashes:         1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
                          2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: YGz4YV88vEPitxZYcxazGhqiYymiKOmE1qvNBJS/a/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:95:29:c7:82:4a:f4:7c:99:c1:03:70:6e:bb:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
        Validity
            Not Before: Apr 13 10:02:19 2025 GMT
            Not After : Apr 14 10:02:19 2025 GMT
        Subject: CN=005d81db6506be3567744df19c4ae06a6b060de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:ca:9f:7e:d1:63:c0:c4:f2:a3:24:f2:3d:
                    9f:64:e8:cd:f6:f9:85:f0:d9:d0:18:9b:e3:be:85:
                    a5:2a:6d:cf:d4:e2:d7:31:0b:c9:57:cc:95:3a:00:
                    80:c5:66:08:a4:cf:55:9c:26:62:a6:14:4a:95:21:
                    c8:32:05:17:9c:cc:25:24:41:f7:7c:94:90:0a:d5:
                    b1:a3:5c:4f:e4:cf:97:f1:88:de:47:f2:92:82:19:
                    e3:68:ee:4b:fe:b9:75:2b:6a:c2:18:34:38:ab:df:
                    7d:b9:ac:50:76:33:cf:62:c1:f6:c1:35:52:bb:de:
                    02:65:12:0d:b4:15:b3:a9:12:14:df:d9:c6:21:f8:
                    d1:a5:77:30:c1:0d:70:02:2d:de:74:ed:61:8e:9b:
                    a1:3d:0f:46:4f:1f:1f:26:54:ca:38:27:39:0d:b9:
                    dc:5f:0e:61:63:9c:9c:28:41:cb:14:3d:ce:2d:52:
                    08:9c:ec:e5:ec:cd:5b:dd:98:93:b2:bf:51:ee:eb:
                    aa:fd:23:15:00:e0:17:46:1d:37:ea:58:4a:d2:b1:
                    4f:a9:db:22:ac:4e:b5:6e:eb:57:a2:8a:30:85:18:
                    60:a2:47:6c:8d:34:b7:8a:a2:16:21:da:a0:5a:c8:
                    a0:73:4b:84:2b:c1:32:69:9b:6a:a4:19:56:bf:84:
                    9e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5D:81:DB:65:06:BE:35:67:74:4D:F1:9C:4A:E0:6A:6B:06:0D:E4
            X509v3 Authority Key Identifier:
                keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6b:01:d5:9c:b3:26:c2:b4:da:f1:90:06:ab:0b:58:60:17:
         7d:42:7a:d2:fd:d9:90:bd:1f:d5:c2:db:e9:e9:72:2c:9e:d6:
         d7:d1:21:58:c8:00:28:c5:61:93:54:8f:5e:84:82:a9:df:56:
         50:cc:26:32:11:0e:66:8f:bf:7d:fa:79:3e:1c:89:38:49:d0:
         5f:4c:40:ee:7d:28:89:eb:26:ab:50:c6:b7:9a:7b:96:c5:0a:
         75:06:24:d6:2f:56:69:ce:ac:76:a6:ae:2a:78:7c:c4:0e:26:
         d7:5c:cc:c3:c6:9f:ad:30:a6:be:9d:5c:b4:4e:27:16:30:83:
         24:4b:f0:46:c8:13:f6:b6:96:0f:2f:df:25:8a:8c:0e:f8:3a:
         ea:be:06:6a:c9:17:d7:49:e0:44:4d:dd:6c:01:b2:eb:13:57:
         66:03:07:1b:ce:a1:eb:07:ed:e5:c7:bd:3d:67:8b:24:bd:e9:
         da:00:aa:d3:05:d6:35:06:24:85:c1:59:eb:0e:e1:91:5e:f4:
         7f:22:0e:2a:f1:64:7f:ec:d3:94:c4:93:50:d6:2b:11:39:43:
         c1:f7:81:42:52:43:24:36:c0:f1:1c:87:d7:ae:c6:fc:c4:6c:
         2a:14:c5:de:d9:d3:a1:50:9d:4f:8a:8e:aa:cf:53:bb:57:f5:
         55:40:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----