Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
File:                     naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json)
Hash identifier:          zmqPuyWnsUxq82Dz54qkmayh/Kc1+Tdk/ModeT4mSyc=
Subject key identifier:   ED:7A:1D:E7:64:1E:E3:E4:3C:96:A1:DB:06:0E:8A:A2:40:D9:72:45
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Certificate issuer:       /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial:       01962E6188FC94F8E07C909B21A0963EF728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: TdH4VD6T_W7SNxHyfXSkewIXlcU.roa (hash: HVZZjaWlI31wWUg78IHwXGlTps+LYdv9vaJeYnF13Bo=)
                          2: aKMxqjNnCn7Xk6bsyJdfQXDUuaI.roa (hash: ibTBARSM6n1OhsZ0NugMaCqBmygWZP/5DEHE0iWcPlc=)
                          3: f3NzFDrUEZy8grE75c3DxK-zdcM.roa (hash: BFzDDOgRzsLLo8GwsAfM05cwyRWar9TrfbdTw5Ud6HE=)
                          4: gZdvO4oXA6_QfENON99n9AVm8Ko.roa (hash: /66rJ9F6iwSHP7TkwYayv9wvXVzakhzhjAbGkZBj5JU=)
                          5: jVRFEQPFSnh8hW9xoGAvA45JpKE.roa (hash: isg9eIZMry4QVHjeWJBCz6CjcSaIZpa3hhyTfzJgJho=)
                          6: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: VrjcgCEtWHpheGn9lDEUsva/DsJIyJ6dyhrS7ypy3JQ=)
                          7: pOQcSwzHhsavgvdyPP-Yyd3QzSo.roa (hash: kyJLn6NibIN1SsKTyhob0Qol7Hb2cQEJbeMyZVAvoLM=)
                          8: uEnvA7clDaiWPypO28uwhilipYg.roa (hash: fnHSw20yaOcWZkaIpHoCivAn7QTYS9tDPwmLFVJ1cCM=)
                          9: yceqo7ZW_IVgJFxTbpGSOiD2rtg.roa (hash: c6fF2Wza+ca66E+ktAAw4ZjO4pnJZ4dyUQlFeMiMJwQ=)
                          10: yrzeBwHo_JY3uAiU3A6eIPTuRXg.roa (hash: dv8LiYPBUfzT2p96Wuw5GO6tksFCH10p7DE/YsklOiY=)
                          11: zV60OWNiEhDqebBXx7tqvmRMGPw.roa (hash: Fqqr39ZxOW5MPqhiLxUvWi/zSsjJuyDvxnxVQtqBuWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:fc:94:f8:e0:7c:90:9b:21:a0:96:3e:f7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=ed7a1de7641ee3e43c96a1db060e8aa240d97245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:23:2c:5f:ba:7b:d4:dd:99:f9:07:bd:47:
                    c8:4c:d5:47:cb:d5:e9:26:45:57:0f:f1:53:e8:e7:
                    d6:04:bf:83:fd:63:41:b6:06:f6:7a:6c:85:74:af:
                    b4:fb:15:6b:70:3e:b7:05:4a:bd:ad:9c:e5:22:4e:
                    4a:1e:83:47:b9:f7:95:e5:c6:33:4f:91:5a:5b:c1:
                    27:e1:6f:c9:e9:1e:30:8f:4b:97:53:93:ea:a2:07:
                    9d:16:92:db:54:40:c1:fd:2b:38:9a:5a:fd:7b:7f:
                    cd:07:eb:52:48:8d:8d:43:27:23:3f:10:a0:25:30:
                    95:e9:21:c6:1c:a6:f2:56:8b:88:51:5b:de:b3:42:
                    57:2c:3e:a7:39:a4:62:65:58:36:bb:ca:3c:59:a2:
                    22:69:4b:e7:df:2f:91:22:7f:96:66:a7:2e:1b:05:
                    e6:ae:66:55:89:c5:09:bd:77:f0:32:80:2c:25:8a:
                    cc:b8:ab:e8:9b:40:9b:be:68:8b:61:41:93:e8:73:
                    15:ba:41:a4:f8:62:60:ff:79:1b:a7:3e:7e:ff:87:
                    a4:14:34:54:69:fc:45:28:9d:de:cb:45:23:22:c3:
                    bd:0b:4b:94:f5:b9:40:36:ab:27:6d:6f:2a:52:75:
                    0b:58:a7:5f:1d:6a:a6:32:84:7f:2c:fc:08:a3:33:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7A:1D:E7:64:1E:E3:E4:3C:96:A1:DB:06:0E:8A:A2:40:D9:72:45
            X509v3 Authority Key Identifier:
                keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:81:7e:a1:8c:ab:07:cc:11:9b:d9:39:40:86:01:49:a1:
         9b:86:57:e6:9c:62:66:18:8d:76:d1:a3:f0:82:eb:c8:cc:e6:
         24:d8:7e:9b:19:2f:3f:03:47:17:3d:c5:7b:29:ea:cc:09:ce:
         ab:48:24:89:67:ef:df:7d:dc:fb:04:79:fc:2a:6c:1e:ab:99:
         c2:c2:ae:d9:e7:9c:58:f1:a3:48:2c:08:84:ec:28:9f:84:29:
         24:e1:60:b6:f6:3b:59:0a:7a:e1:09:d9:7d:7d:31:8a:c3:c6:
         a4:a2:6a:98:5c:aa:7a:8c:ba:30:ef:79:c6:d4:b6:44:0e:db:
         8a:58:60:c6:9f:b3:b2:7c:50:c0:a5:d5:70:44:02:e9:30:c8:
         22:a1:39:59:dd:68:37:0e:ed:97:4d:28:88:46:38:19:f7:c9:
         8a:6e:ea:33:a9:e2:52:21:f5:c0:7b:62:fd:d3:37:9f:3b:95:
         74:34:ac:9c:e7:79:23:64:2a:f6:6c:03:84:45:9b:31:d3:9f:
         aa:f4:a2:6f:31:48:c2:89:85:e4:a6:36:bb:bf:c2:99:42:d5:
         d9:84:cc:63:95:a1:80:f6:4b:e3:5a:45:7b:50:d1:c8:5f:68:
         0d:6c:18:32:f3:04:81:17:be:7d:1e:74:48:f3:0b:c4:49:d9:
         d7:11:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----