Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
File:                     nCy3-coO_XK-JYpKCTWIBjdLRmI.mft (raw, json)
Hash identifier:          oJfmvThnzdPAMuGpSM8qzYE0mtOqFyLmc/ZoWYWkXTE=
Subject key identifier:   BC:4D:6D:D3:8C:B6:55:6D:5F:E1:91:E1:48:F7:3B:9A:B0:07:70:C2
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Certificate issuer:       /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial:       01962E2B29AB7C796D5008A8F32FD0851D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft
Manifest number:          0B3D
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: Dotq45i-CIL8miP4blqY3J6J13s.roa (hash: AeEyJtBFVLSGPDiSeedlZidCthzwYAlppOftvZd9mwo=)
                          2: nCy3-coO_XK-JYpKCTWIBjdLRmI.crl (hash: D09hV3bhC6X9XdXwFDoMKXvT+P10Uye4cyCk+mfbh5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:ab:7c:79:6d:50:08:a8:f3:2f:d0:85:1d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=bc4d6dd38cb6556d5fe191e148f73b9ab00770c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:a9:c6:91:6b:3a:8e:8b:9c:87:e4:99:1c:
                    3a:1d:e2:fb:02:de:49:e3:3c:e8:a3:42:f3:ea:60:
                    28:8f:1d:af:ae:3e:2c:0e:82:28:aa:1e:ae:66:70:
                    ff:8e:64:61:3c:5a:33:36:76:42:e4:cf:51:11:21:
                    e7:8a:f2:3e:e4:30:cd:c8:97:54:0e:30:76:4b:7a:
                    c2:f1:84:a6:90:b2:7c:9b:1c:53:69:78:4c:7b:b5:
                    8f:56:d9:67:63:40:9d:1b:4a:a3:58:c4:37:da:ed:
                    28:d0:cb:6f:70:b2:c2:8f:89:1f:67:e1:85:4e:5c:
                    2c:21:77:98:6d:db:dc:ba:ba:e2:6e:75:57:4c:c6:
                    5b:0a:b8:49:58:60:c3:0f:a3:2a:6f:30:7f:b8:4c:
                    15:64:d5:47:34:62:ee:93:94:52:95:fe:f8:93:85:
                    f4:3c:c7:4b:6e:f6:6c:72:55:fe:3e:e3:06:ca:07:
                    6b:4a:78:7a:30:76:07:a8:14:20:df:33:f3:f0:4e:
                    f5:69:64:05:89:53:5d:2a:50:5b:77:15:a7:94:f2:
                    af:27:b5:36:02:93:89:89:33:03:09:5c:f6:f2:71:
                    4e:a4:5b:fd:80:79:18:43:91:7a:4d:78:53:ed:85:
                    ae:bf:9e:e6:31:ff:94:1e:82:66:73:03:c4:f0:21:
                    92:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4D:6D:D3:8C:B6:55:6D:5F:E1:91:E1:48:F7:3B:9A:B0:07:70:C2
            X509v3 Authority Key Identifier:
                keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:56:d5:a0:fb:05:35:fc:94:db:64:a6:41:bc:9b:4a:c8:fc:
         54:0e:62:47:3a:3b:5c:5b:5b:1a:19:61:2c:39:04:ec:8a:e9:
         34:d5:31:f2:f7:c5:5d:f5:a5:2e:07:67:af:cc:ed:e1:85:5f:
         21:e4:9f:61:00:b4:03:bb:31:de:ca:c1:e2:8c:42:ae:39:69:
         03:2f:0b:63:75:43:e6:c4:ec:97:e6:5d:4a:9a:ea:31:8f:ed:
         75:99:b1:bf:6a:f1:92:92:5f:c7:d3:cc:f0:b4:51:28:88:ec:
         47:a0:0e:a8:9d:03:33:cb:cb:43:f4:a3:c1:0b:89:08:82:b0:
         8f:5b:fa:b9:d9:fb:3b:76:74:f4:2b:12:0f:f8:82:bf:a9:c5:
         2d:fa:64:22:01:c4:29:dc:1e:66:2e:e2:7f:af:d4:7b:66:0c:
         57:df:b0:2f:07:7f:a1:8f:23:4e:f7:e3:99:ef:43:e3:44:6b:
         94:64:cc:f5:19:d2:29:49:6f:33:1f:09:12:50:fc:4b:c1:a0:
         2b:1f:b4:4e:7e:47:a8:35:89:e0:76:50:10:94:0e:c7:ed:6a:
         3b:8f:6a:c8:53:e7:27:fd:89:a2:43:01:0e:48:cb:aa:5e:18:
         b0:8c:e2:58:75:9e:db:f5:6a:05:59:cb:21:8b:a0:7e:7b:1b:
         6f:86:62:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----