Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          S9F1pPYdrIg5i5Ey85Uw8Q+zyyqa0c9ku5DjxtjVkQE=
Subject key identifier:   A6:FD:72:CE:24:32:FE:63:B4:DD:15:8E:DF:48:B9:C3:D3:B8:2B:AE
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       01962F747AB9E6429A5780401284D264E700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: Q-k4eP71XDc11_L4_l_xUnKRF5E.roa (hash: LRoS7+b3eCmFJlD9TdL/ZA7RouROtd2Rd2SIPOdtZjI=)
                          2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: SaBVm4ZCgeQdfGKE7kFCUqNRPCKM6HgK/ftccyZKIVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7a:b9:e6:42:9a:57:80:40:12:84:d2:64:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=a6fd72ce2432fe63b4dd158edf48b9c3d3b82bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:f4:3c:0a:6e:55:8e:ae:09:15:f1:b7:8a:
                    1c:18:eb:15:d2:61:09:b4:c8:22:7e:a8:ed:b4:3d:
                    42:cf:b5:ec:4e:3a:1f:2a:03:69:e7:b4:1f:2a:36:
                    85:f2:b8:3a:07:3d:8e:ae:c7:68:31:eb:0a:36:a9:
                    36:99:71:c1:28:44:d7:7a:bd:82:14:4d:2a:8e:16:
                    32:56:68:8b:3e:65:5b:e4:0f:43:09:92:d7:b1:2f:
                    4a:06:a7:ac:b9:6e:f3:4d:4d:72:64:ec:50:5a:62:
                    27:8f:1b:91:9d:a2:f1:97:97:bd:4e:21:70:37:47:
                    9d:75:7e:6e:03:cb:9f:49:98:d5:82:db:76:00:2f:
                    e0:24:09:b6:87:98:0a:be:87:16:ff:38:22:ff:c0:
                    56:67:38:7c:0d:01:61:6b:85:e5:55:1f:8a:99:26:
                    2d:e1:3a:f8:ba:af:be:56:85:a1:15:84:1a:df:24:
                    fd:db:55:d2:52:95:f3:69:85:71:47:c6:f2:b7:3a:
                    03:ab:98:76:6d:5f:ae:4b:6e:4b:b4:23:90:46:da:
                    5a:6d:fa:cb:94:d3:ca:b9:7f:c2:4d:01:5f:41:6f:
                    f6:0e:2f:44:22:c4:e1:36:41:42:fc:bf:aa:d9:71:
                    a9:13:2b:52:af:af:3a:bb:ab:39:d6:b7:86:14:7a:
                    6e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FD:72:CE:24:32:FE:63:B4:DD:15:8E:DF:48:B9:C3:D3:B8:2B:AE
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ca:94:c7:1f:a0:f9:c9:3d:fb:82:ac:82:9e:d7:05:e4:41:
         24:b4:50:55:5f:6a:ed:51:3e:2c:fa:e3:66:15:41:4d:d3:c0:
         b9:71:2a:55:72:28:7a:06:4a:24:d2:79:11:a6:cf:1f:58:77:
         69:07:4f:e8:fb:4c:30:54:4c:a2:ef:35:03:ae:48:4f:57:c5:
         e8:df:ed:f0:32:46:fe:44:06:8a:67:ce:3f:7e:e2:61:ab:25:
         f2:3d:18:ef:41:61:0d:55:16:01:6d:b5:53:34:07:e0:0f:dc:
         7d:3a:d4:35:80:6b:f5:0e:49:db:ed:4b:6f:2f:0c:fa:38:a1:
         c6:78:dc:86:b4:0f:8d:4e:9e:db:d1:b4:62:7c:09:dd:32:7f:
         ef:71:a3:82:34:1f:29:35:68:78:e0:27:78:ba:dc:9f:31:61:
         76:f0:fa:40:9c:39:fb:2f:b9:32:11:19:4f:a2:a9:b0:a3:55:
         d7:4d:4a:02:19:d0:60:46:7b:a8:a6:ad:80:59:2e:ad:a0:36:
         ac:ec:13:15:0e:a9:f9:ca:7b:bb:aa:a7:82:c1:d6:02:b0:8d:
         7e:03:69:33:64:20:9a:47:b6:92:e9:fd:1f:b4:b8:f0:56:ff:
         52:1a:a3:0a:10:7b:f3:5a:5b:3d:d1:e2:38:1d:25:a3:95:c7:
         af:5d:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----