Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File:                     npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier:          1kPfpvHeKD9uU3qi5Jdb6YaJs193SIvITR/gezdFy6M=
Subject key identifier:   6A:54:6A:59:40:B1:19:DA:43:43:A3:B9:CC:4A:6C:E8:04:E7:1D:47
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer:       /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial:       01962F06434353119D2F734B1065849A0599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number:          10EB
Signing time:             Sun 13 Apr 2025 12:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:01 +0000
Files and hashes:         1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
                          2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: IkLo8rJIENMqaLB+yfVGJsCHI/2zRfuXV1vJjPBgd6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:43:43:53:11:9d:2f:73:4b:10:65:84:9a:05:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
        Validity
            Not Before: Apr 13 12:01:01 2025 GMT
            Not After : Apr 14 12:01:01 2025 GMT
        Subject: CN=6a546a5940b119da4343a3b9cc4a6ce804e71d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:20:b8:51:ee:b1:a4:3b:a3:24:fc:b8:d8:fe:
                    f3:41:37:be:54:db:ff:9f:c6:cd:77:47:20:0b:4e:
                    84:4d:61:ed:c5:15:ac:6c:0b:f0:f2:d9:20:a5:16:
                    4b:1b:50:87:9a:e7:e0:88:68:20:87:af:ee:c9:84:
                    3f:95:40:7e:e9:43:a6:67:1a:17:11:f1:73:6c:f1:
                    21:09:91:5f:db:47:55:2a:75:44:ff:cc:f3:03:64:
                    d9:11:b9:3e:a3:e0:12:15:0c:5d:b8:86:08:c4:6b:
                    6e:36:c9:f7:c2:89:3a:82:31:a2:be:7f:6e:43:34:
                    1a:f4:3f:fd:9b:66:f6:8c:47:56:66:c0:d1:cf:b2:
                    88:7b:8c:e3:a9:a3:a7:77:83:fd:65:a9:c1:9c:1e:
                    b8:62:49:ac:3c:06:3b:7d:09:ce:64:27:67:67:d6:
                    7e:7c:9e:a1:79:5b:8b:09:cf:ad:18:2a:6a:61:f1:
                    d5:0c:7e:6a:c7:7f:87:25:52:8e:74:f1:f7:ab:8e:
                    c0:59:43:c0:75:d5:ac:2f:84:9e:7c:cd:09:3e:c3:
                    ce:23:51:55:89:74:b1:c0:a4:fb:38:eb:94:db:61:
                    09:8c:15:3d:96:6f:61:1f:9e:5f:20:16:77:5b:5d:
                    16:92:8d:3a:c4:47:23:dd:05:36:65:97:a8:77:b5:
                    90:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:54:6A:59:40:B1:19:DA:43:43:A3:B9:CC:4A:6C:E8:04:E7:1D:47
            X509v3 Authority Key Identifier:
                keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:e7:57:45:63:66:5c:df:ee:53:4b:f5:02:b4:44:2e:f0:
         bc:1a:1f:a0:c5:fe:cd:9a:06:6c:9c:01:91:ad:aa:98:5d:61:
         59:5e:8d:a7:c5:72:60:d6:eb:41:6d:90:0e:ef:bb:ca:18:9f:
         7b:c0:86:03:52:a0:e5:20:4a:d2:dc:4e:db:48:44:82:15:ba:
         9d:9d:4d:cf:d8:5a:d3:c0:a2:f5:a0:64:0a:ab:bc:74:50:6c:
         24:c0:1a:85:5e:dd:d4:d7:7f:8d:72:2e:6d:76:2f:2a:11:f5:
         48:a7:32:57:5a:60:65:ed:e2:43:84:09:47:94:30:4a:5f:be:
         f4:40:10:4b:23:72:42:74:a9:7a:eb:a9:09:82:dc:3f:8f:9c:
         e9:f0:ac:18:ba:b8:51:76:8c:cb:75:8f:b3:59:8c:c6:5c:31:
         0c:26:1c:8d:4c:c3:84:74:8d:ca:58:9a:26:47:76:41:7d:34:
         a0:0f:9b:fc:14:57:c6:2f:1f:67:80:34:9b:5b:20:23:be:86:
         9d:65:f8:01:07:92:71:c3:61:f8:81:ad:5b:88:9f:8c:e7:a4:
         c6:66:29:9f:37:49:b4:90:83:47:0d:d0:32:ca:13:d1:34:09:
         7e:41:af:1a:27:ee:57:4f:eb:7a:8d:f2:87:ac:c8:69:e1:4e:
         bd:f3:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----