Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File:                     nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier:          6ro6Zq1JS41lx7y1HXYNlBWIuCxoO69/SVLPhsN6uK4=
Subject key identifier:   26:60:14:F0:15:07:9C:34:48:B2:EE:5F:34:80:DB:B4:C4:66:4D:39
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer:       /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial:       01962FAB6889483B2391DEDB740474E03116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number:          0186
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: cThp0KEND3BT4KvCeUid-rjEug4.roa (hash: ImpSaegWwcNvwqQ9pHSgJ6wWRXJrvYa1vES4AMD51Qc=)
                          2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: r8vZYKd3s4HtNhYgqQoVePBOHXJc9bCeJzGUQQZm5ts=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:89:48:3b:23:91:de:db:74:04:74:e0:31:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=266014f015079c3448b2ee5f3480dbb4c4664d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:7f:16:79:8f:11:53:8b:3b:13:db:41:eb:
                    21:17:6b:e2:5e:f3:e0:f6:93:6d:2b:65:4b:8b:59:
                    05:ab:d4:33:ac:07:50:62:88:0e:6e:a1:cf:55:78:
                    c0:0e:ad:82:d3:d4:15:ea:94:f2:bc:b5:fb:9d:0e:
                    a4:9a:22:ec:d7:c9:93:13:42:01:fa:d2:d4:cc:be:
                    8a:ee:00:1b:5c:71:97:10:a9:87:11:c9:e4:69:91:
                    a8:f6:f4:46:f0:93:58:5d:83:0c:c2:64:6a:95:31:
                    ab:7e:4e:c4:3f:55:ef:70:27:69:48:60:8d:d4:d6:
                    38:2b:d8:62:e6:e1:a2:a8:7d:42:52:53:cb:50:52:
                    34:20:5b:65:6f:06:fb:f4:cf:cf:c1:85:65:c0:e0:
                    27:44:5d:7b:e1:37:1c:f8:5f:aa:8d:30:5b:bc:e3:
                    08:53:f7:51:70:fa:c4:a6:54:69:cb:3d:92:ec:a1:
                    75:e0:4c:e5:f6:20:06:18:9c:7d:63:9d:8f:ba:d0:
                    e0:a3:9e:af:09:87:f0:b8:37:e8:a6:32:b8:6d:3a:
                    71:e5:c6:a8:0d:33:a4:c3:7c:e6:39:59:12:70:0f:
                    a0:59:60:9e:a7:4f:db:9c:cd:36:bf:9b:9e:6d:c9:
                    45:fb:14:ab:a9:4a:bd:7f:57:23:b1:73:bc:43:1b:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:60:14:F0:15:07:9C:34:48:B2:EE:5F:34:80:DB:B4:C4:66:4D:39
            X509v3 Authority Key Identifier:
                keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:3d:a2:9b:70:e0:39:b6:09:b6:fa:84:7a:75:b7:0e:17:
         2f:fc:d9:9f:63:c3:a4:30:ab:a5:47:28:6a:a4:a7:f1:16:ed:
         d7:54:38:0e:ee:c1:36:6d:27:91:a0:88:a1:f7:4c:25:d7:35:
         70:09:c1:18:1a:b1:f7:5b:56:e3:42:d0:a8:69:bc:6e:c1:67:
         4c:2a:58:e1:f7:6e:6c:ba:04:a1:0c:06:68:f7:99:f5:02:69:
         a8:bc:43:00:77:df:3c:40:ff:8d:c1:71:18:75:ed:0b:a9:b9:
         85:e0:ce:99:c4:07:0e:4a:82:a7:11:6c:70:ff:6b:24:e1:00:
         fd:20:3d:4c:33:3d:f6:bf:cd:cd:bb:c9:be:19:0e:94:2f:8b:
         6c:af:ee:c6:1f:e1:48:d0:09:ba:a5:ac:26:49:62:2b:e7:29:
         23:04:98:a2:47:94:82:44:3a:ea:46:4f:76:88:3a:d7:d6:c5:
         ef:4e:7c:dc:4b:8f:c7:d9:37:f3:8f:5d:e4:a9:23:1f:f2:55:
         c3:eb:70:6d:5a:a9:4b:b9:46:c7:ac:c2:ca:ea:60:16:67:8f:
         db:c2:d2:2a:6c:76:7a:06:3d:56:ed:fd:a6:ed:45:ab:2d:05:
         95:00:8d:79:40:b0:2a:1b:f7:6c:e7:66:6b:2d:c0:2f:3f:e8:
         37:f8:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----