Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File:                     nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier:          ntpImWOxX5NZLb1Zl7zo1m9E1gpgmAfVXNZxxqFAqe0=
Subject key identifier:   54:4B:CA:67:16:BB:53:C3:3C:47:95:04:7B:9B:46:2A:D9:CF:1F:48
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer:       /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial:       01962E61D81769DE6DAF5F2882B3F5903799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number:          ED
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
                          2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: giJyneCYXukZ3UrPnZijWFjS6G+xvnk9sC1RZy47xpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d8:17:69:de:6d:af:5f:28:82:b3:f5:90:37:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=544bca6716bb53c33c4795047b9b462ad9cf1f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:d6:45:6e:99:38:64:75:fe:a9:fa:37:22:
                    76:ce:1f:55:09:c3:71:96:d3:20:75:b0:7e:d6:6f:
                    1b:68:86:1d:3b:34:3e:68:2e:4a:68:e5:1d:34:f8:
                    20:50:2a:c3:8f:0d:29:77:4a:09:df:0f:89:0c:5a:
                    d7:e4:87:96:b5:fb:5e:94:d8:81:53:e7:e6:ab:2a:
                    29:f5:1d:60:f0:f5:c6:db:4c:df:1d:35:08:24:5a:
                    f0:28:79:af:19:f5:33:df:5f:1f:e4:20:2b:6e:a1:
                    27:b9:ee:ae:0d:f2:37:51:3f:74:a2:2a:e9:79:86:
                    19:39:f8:cc:c7:22:5d:5d:09:8e:6c:aa:86:ab:06:
                    d1:4e:d4:b9:02:b1:3d:15:77:65:97:aa:6a:1c:55:
                    f0:68:ac:7f:ab:ce:08:a9:0e:48:df:df:71:1a:38:
                    4a:48:dd:d6:df:68:1c:0c:c3:3d:80:e1:f1:fa:64:
                    9f:e0:f9:0c:dc:79:9d:81:d8:bc:90:b0:8c:af:2d:
                    72:a7:85:71:d7:ed:f6:ff:55:76:f6:c5:a9:8b:3c:
                    cf:46:ff:54:8c:72:6a:a8:40:a2:a9:21:18:e3:3d:
                    62:54:bd:ea:5d:1e:62:b7:a3:d2:cd:96:e4:fa:10:
                    bf:55:eb:67:a1:b4:86:37:8e:4f:b9:59:49:5f:91:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:CA:67:16:BB:53:C3:3C:47:95:04:7B:9B:46:2A:D9:CF:1F:48
            X509v3 Authority Key Identifier:
                keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:00:ab:1d:d3:b5:dd:b4:a9:0b:68:d4:1c:6b:89:ec:a0:
         b6:9f:99:1c:5b:a2:ad:2b:7a:f6:7c:3d:5e:95:40:99:e4:7e:
         73:07:8d:dc:b9:a9:42:9b:de:15:92:68:a1:7d:bf:16:0a:0f:
         7d:a6:26:21:87:25:33:94:49:33:f7:64:0a:7f:c5:58:2b:3e:
         e0:8b:47:43:1b:f2:b3:3a:58:4a:35:48:bf:09:9f:cb:b9:ff:
         98:f9:80:51:aa:0d:42:07:f1:31:99:2f:fc:0b:18:e8:ac:d4:
         ad:94:62:9b:cc:aa:15:e7:29:34:a3:b1:1a:be:4f:92:f5:f6:
         16:10:35:0d:77:88:43:c1:52:e3:2a:d0:51:2c:d3:12:28:56:
         76:54:97:9e:1f:95:41:98:1f:77:6a:d1:a5:59:5e:78:36:4d:
         6d:4c:c3:68:c7:a8:26:40:0f:05:a6:e1:0e:29:d9:04:39:58:
         76:f0:2f:22:d9:a5:59:06:d4:e9:ed:cd:4f:35:c3:66:d7:5c:
         d6:d0:d0:bd:9a:3e:0b:9d:d8:33:54:a4:18:3c:ea:07:f0:ac:
         16:81:3f:53:62:ca:b0:9c:29:71:fe:35:35:7d:5d:9a:05:ba:
         34:6c:35:a7:36:7c:f3:08:5c:4f:0b:38:dd:f1:f4:c4:79:9a:
         ad:2d:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----