Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File:                     n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier:          pZ3uO2xSQId/EhSDmNHBtA6enjs+FtIGEt2K63QzHDA=
Subject key identifier:   37:AF:9D:1A:3C:6B:58:C1:62:18:11:39:BA:7E:E1:5C:A8:3C:75:9B
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer:       /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial:       01962FAB33E500ECA4B74EC1D1509F27596F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=)
                          2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: yZCUqJ5gfZKsIdQdyihp7xhM0259VQH0gUxqc+W6zs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:e5:00:ec:a4:b7:4e:c1:d1:50:9f:27:59:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=37af9d1a3c6b58c162181139ba7ee15ca83c759b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:5b:27:8d:f9:d3:fb:0d:cb:9d:20:eb:9e:
                    4c:67:9f:ec:78:db:5a:30:1f:66:ef:f1:1b:da:f6:
                    89:ff:27:13:0d:44:01:0b:5f:da:b4:44:e9:15:a2:
                    54:c5:61:50:1c:27:d2:f8:db:67:90:07:47:e7:63:
                    26:99:77:6d:c0:a8:09:b6:b5:89:69:5c:6c:64:f2:
                    f3:53:42:64:92:d9:e3:9d:43:9a:75:c8:ac:60:37:
                    eb:77:55:8b:61:71:4c:f0:b5:d0:af:f1:41:0f:83:
                    c7:d1:9b:fc:e4:9e:d2:fe:cc:a8:06:62:09:82:59:
                    55:43:3d:e9:33:37:19:4f:ad:f3:d1:05:78:de:55:
                    b1:c1:cb:a0:4a:6a:e4:29:c1:66:0e:90:91:ab:cb:
                    0f:0d:66:38:ec:4a:57:ba:92:4b:d2:58:10:e6:74:
                    e2:66:ba:52:79:d8:bb:e3:22:54:0a:99:a2:82:98:
                    f1:bf:93:4d:e8:9e:b1:5e:8f:c5:d5:9f:4a:40:27:
                    a7:ba:1b:a9:aa:c6:ba:4b:69:01:82:08:23:30:ac:
                    fe:69:7a:69:b7:1a:ea:5a:a5:1b:67:d9:01:1e:5c:
                    90:7e:e5:d5:29:e6:5b:2f:dd:49:d7:05:af:a0:c8:
                    d0:53:41:d6:06:d8:74:aa:a9:09:77:d0:c7:db:48:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AF:9D:1A:3C:6B:58:C1:62:18:11:39:BA:7E:E1:5C:A8:3C:75:9B
            X509v3 Authority Key Identifier:
                keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:c7:75:a4:a8:de:1a:42:38:ac:05:bb:8c:7c:1e:8f:aa:
         96:b5:91:8a:5f:ee:cf:7e:7f:2a:b1:8a:c7:25:04:f9:51:1b:
         2f:43:20:9a:2d:55:22:d5:76:c4:68:72:bf:05:e6:41:b3:63:
         6d:72:57:bd:81:f0:dd:70:5c:e9:f7:76:25:56:44:7f:8a:88:
         f9:c4:92:f5:d3:19:fb:ec:8b:1b:c5:2d:99:bc:ad:8c:2f:d0:
         7f:d7:99:80:e8:09:33:45:bf:c5:22:09:84:2d:d7:bb:92:25:
         2f:bd:f1:3e:30:7c:8a:3a:fd:72:9e:12:5a:94:1f:ea:d6:06:
         c7:5f:08:11:8c:dc:51:77:42:3e:55:b0:1a:36:46:d7:bf:68:
         fe:32:24:f3:8b:59:1b:0e:f0:5d:f7:da:6e:b8:11:8b:35:7b:
         cf:38:a4:9b:1f:70:fd:2b:22:55:da:2f:8f:d8:cf:b5:25:62:
         30:3d:10:d9:01:4c:a0:fd:97:68:68:ce:eb:94:3d:c3:ff:9f:
         97:6f:4d:d3:db:9b:6d:4d:3a:a4:f3:0a:cf:5e:d2:bf:14:44:
         d5:f7:81:08:b6:13:03:04:c3:f8:fe:53:65:6a:d5:cd:a3:20:
         9c:ec:46:83:6f:52:c9:50:e8:23:8c:71:6a:7e:b4:ac:31:12:
         25:13:fe:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzPlAOykt07B0VCfJ1lvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy
NTY5OGMwHhcNMjUwNDEzMTUwMTExWhcNMjUwNDE0MTUwMTExWjAzMTEwLwYDVQQD
EygzN2FmOWQxYTNjNmI1OGMxNjIxODExMzliYTdlZTE1Y2E4M2M3NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWdbJ4350/sNy50g655MZ5/seNta
MB9m7/Eb2vaJ/ycTDUQBC1/atETpFaJUxWFQHCfS+NtnkAdH52MmmXdtwKgJtrWJ
aVxsZPLzU0JkktnjnUOadcisYDfrd1WLYXFM8LXQr/FBD4PH0Zv85J7S/syoBmIJ
gllVQz3pMzcZT63z0QV43lWxwcugSmrkKcFmDpCRq8sPDWY47EpXupJL0lgQ5nTi
ZrpSedi74yJUCpmigpjxv5NN6J6xXo/F1Z9KQCenuhupqsa6S2kBgggjMKz+aXpp
txrqWqUbZ9kBHlyQfuXVKeZbL91J1wWvoMjQU0HWBth0qqkJd9DH20h/iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDevnRo8a1jBYhgRObp+4VyoPHWbMB8GA1UdIwQY
MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt
MDgxMGQxNmJjYzg3LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3
LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW/HdaSo
3hpCOKwFu4x8Ho+qlrWRil/uz35/KrGKxyUE+VEbL0Mgmi1VItV2xGhyvwXmQbNj
bXJXvYHw3XBc6fd2JVZEf4qI+cSS9dMZ++yLG8UtmbytjC/Qf9eZgOgJM0W/xSIJ
hC3Xu5IlL73xPjB8ijr9cp4SWpQf6tYGx18IEYzcUXdCPlWwGjZG179o/jIk84tZ
Gw7wXffabrgRizV7zzikmx9w/SsiVdovj9jPtSViMD0Q2QFMoP2XaGjO65Q9w/+f
l29N09ubbU06pPMKz17SvxRE1feBCLYTAwTD+P5TZWrVzaMgnOxGg29SyVDoI4xx
an60rDESJRP+Gg==
-----END CERTIFICATE-----