Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File:                     nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier:          /0iLPmOwnesVpyGri8XsEO5D3S1receHU+VpuGTEPHs=
Subject key identifier:   B4:2E:5E:02:87:27:35:4F:C9:0C:DB:E8:2B:69:EC:6D:8A:00:70:F4
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer:       /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial:       01962E619BC6D28EF1F68A28AFFCC6E72E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number:          0C7D
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: jjPkPnEOvwVnAAg20Sm72ha1828.roa (hash: qBKDLKoYMFIUxr740I0l1MbmN1H/LYeCtP9acHybLHY=)
                          2: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: KE7+LXv5J6/DdRe7fbGtuZkUsnRvzlb7alpZkabaiR8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9b:c6:d2:8e:f1:f6:8a:28:af:fc:c6:e7:2e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=b42e5e028727354fc90cdbe82b69ec6d8a0070f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:60:5c:47:4f:cf:24:6a:00:3b:07:9f:85:
                    c0:53:67:7e:99:ed:79:eb:8f:bb:f0:55:bd:61:f1:
                    5a:2b:5f:34:db:32:9a:45:c3:24:ae:ef:e4:2b:ac:
                    c5:91:32:90:00:8d:48:92:ff:89:aa:07:23:8a:6c:
                    bd:f6:0f:b9:cb:6b:a5:1a:82:58:22:a7:f3:be:b2:
                    92:a0:60:fc:e6:68:6b:fa:d9:df:da:96:60:56:44:
                    1d:3d:f3:04:47:b6:7f:a0:ff:49:86:0b:9e:0c:e4:
                    d6:01:d8:f0:30:d6:3e:5b:fc:48:ef:70:a5:f0:93:
                    14:3b:76:f7:27:40:73:01:13:a0:5b:9d:df:82:0f:
                    56:94:ed:9a:78:83:f0:c1:9d:5a:09:2e:a3:c8:0c:
                    d3:45:58:fc:80:47:a9:4a:bd:ff:2b:8c:b3:c4:5d:
                    ef:1f:ca:d7:ba:22:ac:20:cb:63:26:b2:10:af:56:
                    ae:70:78:98:4c:1a:45:38:3d:0f:7f:f0:90:ff:8d:
                    c1:cf:66:a9:02:e9:c3:ae:91:d1:ed:59:f2:e0:00:
                    e8:e6:c1:74:28:cb:b2:04:1e:3c:c7:76:5a:f0:0b:
                    bd:be:35:4d:c7:57:ba:d5:07:2e:56:95:32:03:ac:
                    4d:20:18:75:7e:65:8f:30:57:ab:16:79:9f:9f:fe:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2E:5E:02:87:27:35:4F:C9:0C:DB:E8:2B:69:EC:6D:8A:00:70:F4
            X509v3 Authority Key Identifier:
                keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:97:a0:48:63:e5:e5:9d:3e:b2:90:ba:79:5e:d4:ac:5c:a3:
         5b:6b:f9:77:2d:e4:e1:a0:1a:9b:22:de:d9:11:1a:1e:59:f7:
         5a:c0:1b:07:bc:3f:ce:4b:4f:4e:fc:68:f7:0b:7c:be:21:a7:
         b8:a8:e0:3d:45:52:e3:46:b0:31:cc:06:b2:fb:2a:65:6a:3c:
         8c:90:0b:36:9e:3e:63:04:69:4d:d5:e1:43:08:9a:b1:8e:54:
         f8:40:a5:86:1c:5a:e6:e9:45:43:7a:b9:56:ee:79:ce:f5:59:
         82:9f:04:64:57:7d:47:84:ea:b9:1a:a9:2f:54:a6:fd:3b:99:
         86:ce:c7:d8:d5:e2:30:5d:ce:5e:2b:11:f7:27:73:42:8b:78:
         87:76:ae:5c:55:92:e8:7a:d0:a4:30:e8:77:0f:02:56:12:dd:
         6f:41:af:da:a2:cc:fd:6c:e2:9c:22:07:64:5b:4a:74:ed:ad:
         14:b5:53:a5:aa:c1:51:61:63:da:59:e2:5f:8d:d3:ac:7a:8d:
         d8:f7:08:4d:34:c8:b3:10:43:13:a2:a6:d4:ff:b8:d2:d9:58:
         65:9b:99:cf:52:e0:31:af:20:ac:43:53:88:d8:92:80:51:64:
         7d:0d:6a:e7:2b:17:f2:b3:53:c9:4d:79:27:04:01:33:99:05:
         28:7d:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----