Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File:                     np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier:          /zDNJvpZqBf5i0oqZURvKTgDXoz1ef7GwLZ8SOT/fog=
Subject key identifier:   D4:C6:60:3B:94:EE:C6:91:E7:F8:2D:EF:BA:FB:90:1C:1D:95:64:1B
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       01962F06A6185FA2A1A63644D85DF9D08498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number:          10A0
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
                          2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: x1Xn6uB3FqpQMsmGwCcTgvTImY4VIx4/TwI64ulflaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:18:5f:a2:a1:a6:36:44:d8:5d:f9:d0:84:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=d4c6603b94eec691e7f82defbafb901c1d95641b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:88:00:dc:46:f2:0a:93:57:ed:ed:5a:29:
                    08:7f:02:d9:3f:32:f6:b9:91:07:cc:df:83:64:a7:
                    4e:ed:fc:8d:3e:cc:9d:46:2f:8f:f0:44:cf:c2:d6:
                    8e:68:3a:6c:2a:e3:fc:99:cb:d6:f0:a3:10:48:ec:
                    3f:95:98:a2:47:0f:53:e6:6d:f0:f3:0a:cf:ea:55:
                    be:71:6b:1a:0a:3d:35:ee:e9:38:fc:d7:fa:11:90:
                    47:07:cc:4f:3f:1a:de:ad:72:53:4e:31:14:92:2e:
                    65:78:81:e1:09:0b:09:91:ec:ea:fc:72:80:66:bb:
                    2c:86:26:cf:32:38:48:16:18:74:25:57:c5:39:46:
                    8c:31:20:be:6c:08:f0:c6:98:a5:3c:fc:e7:38:65:
                    e8:15:c2:23:22:b4:89:56:b9:04:3f:99:40:b6:85:
                    de:a4:3c:50:b7:e3:1a:5d:8e:8c:bb:7e:7e:f3:44:
                    1f:4b:4d:6a:b6:de:65:eb:1b:08:c8:a5:dc:23:31:
                    c7:a3:1e:b6:ec:6d:67:ed:63:a6:ed:e1:1c:27:24:
                    82:e9:ef:57:d5:41:21:8c:b6:6c:db:c6:73:a7:19:
                    9c:ab:f9:e9:ad:22:5f:bc:92:0f:00:55:ed:00:f2:
                    80:c8:a8:c7:ab:a9:9e:76:58:d5:cd:97:86:7f:1b:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C6:60:3B:94:EE:C6:91:E7:F8:2D:EF:BA:FB:90:1C:1D:95:64:1B
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:19:9c:b1:31:71:0c:8f:73:7a:c5:85:38:eb:16:e0:8b:27:
         15:a5:ba:d4:08:20:f4:2b:3a:be:d7:1c:bd:7e:e6:49:12:12:
         34:87:f2:a8:3a:e5:77:8b:13:b9:65:0f:69:48:0b:8a:2f:a1:
         61:e0:d6:44:a9:50:1e:8a:b8:5b:15:e4:49:06:7e:48:fa:f5:
         14:99:b6:8d:6a:fc:cb:50:5e:f7:a0:e6:c3:76:a0:25:b6:ac:
         4d:3e:16:9e:9a:e3:6f:dd:81:a6:0c:49:ad:cb:fd:2f:e1:ec:
         71:1e:8a:4f:07:3e:6b:9a:79:c2:b5:c4:aa:7d:bd:75:33:41:
         c3:b6:0a:37:bf:21:e5:bf:49:96:d2:31:85:fa:a3:0c:88:a6:
         2c:5f:e7:f4:c0:7f:28:b5:8f:94:ea:a5:6e:03:f6:f5:a3:2b:
         5b:ac:db:33:f5:59:73:18:a2:bb:58:36:9c:06:99:61:3b:f7:
         25:35:01:f1:ac:51:fe:19:6c:ec:5f:8f:75:63:0f:89:85:97:
         cf:de:5c:23:22:9a:52:d7:1c:99:0b:e7:16:e5:8e:0f:1e:72:
         36:9e:d6:b0:94:52:3a:81:71:2c:c9:0a:05:8b:48:0f:73:e1:
         1d:f2:32:cd:7e:77:e0:ba:84:95:53:b3:35:a7:63:5e:66:70:
         49:50:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----