Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
File:                     n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft (raw, json)
Hash identifier:          ExrMBQaHktpLDzG7CbgJ9wTNeUHnnHX/2xdr4nHRywk=
Subject key identifier:   28:BB:91:47:68:62:0A:9A:A2:06:B5:00:41:4F:69:87:39:6E:C5:4A
Authority key identifier: 9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC
Certificate issuer:       /CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
Certificate serial:       01962F07183C72931524A14015C7A2EB607A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft
Manifest number:          0471
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: i5QXiPkXceFCKpymhBdKs-kxqdg.roa (hash: JW9l6XsHQNvt/hO+lQdoU/xk33G+5qgeiTQZTkcdU8Y=)
                          2: n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl (hash: /cxp/dC3gZVUWPYcixBcUVOT4JUA9667datmUeSAK8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:3c:72:93:15:24:a1:40:15:c7:a2:eb:60:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f9467efa0994f8a31f3343dc300baa4936a82dc
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=28bb914768620a9aa206b500414f6987396ec54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:63:41:91:63:e3:e2:19:39:8f:66:7f:b9:f2:
                    d6:59:c6:cf:89:29:24:91:b7:dd:4a:30:b8:fe:d8:
                    43:7b:bf:bc:88:fa:4a:0a:ff:02:27:b3:d5:bc:56:
                    81:29:ed:a0:0f:c3:a6:f2:73:6a:c7:35:1d:bc:0f:
                    0a:f4:6c:98:94:0e:18:f2:b1:d5:0d:69:06:6b:da:
                    5f:ff:e4:ea:ef:89:7b:f1:2c:5f:5f:62:c6:b6:a3:
                    e4:4a:d5:4c:73:20:74:18:1d:55:4d:17:01:c1:01:
                    f7:71:be:48:5d:e0:16:47:f5:94:15:89:4c:16:68:
                    a9:f8:9a:01:24:58:d2:79:6d:34:d0:4c:49:71:bf:
                    55:df:e6:b5:ab:c3:f8:29:ac:75:25:c1:a5:b3:21:
                    9e:4b:4b:99:57:bc:d7:04:0e:6f:a3:61:d5:1c:31:
                    ec:b4:07:94:99:4d:8d:0d:b1:b6:fb:94:7d:06:c6:
                    8b:7c:a0:4b:64:fd:07:27:71:cb:a0:e9:b1:15:a9:
                    13:09:8d:64:fd:7d:fa:95:59:b2:25:10:5c:56:2c:
                    31:c3:6d:a1:3f:7f:12:64:e3:f8:ac:b2:fc:c2:a1:
                    0c:10:44:6a:f9:09:a1:ad:37:36:b3:e4:34:42:60:
                    44:1d:2b:ba:1a:82:32:b9:f0:ef:44:c0:df:a9:1f:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:91:47:68:62:0A:9A:A2:06:B5:00:41:4F:69:87:39:6E:C5:4A
            X509v3 Authority Key Identifier:
                keyid:9F:94:67:EF:A0:99:4F:8A:31:F3:34:3D:C3:00:BA:A4:93:6A:82:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b2d274-a951-4397-b99d-c30c7b55c2bc/1/n5Rn76CZT4ox8zQ9wwC6pJNqgtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:1d:73:f5:de:80:48:69:68:4e:28:16:36:b6:1c:0b:9e:
         55:13:3d:f5:f2:bf:58:2b:00:1f:3b:ee:dd:a0:ea:73:1c:65:
         53:b8:9c:1f:21:fe:25:0a:38:7d:37:ec:f3:dc:d0:73:01:be:
         da:49:14:ef:88:4a:0d:64:cd:99:dd:98:5f:e1:06:3e:8a:05:
         e0:62:85:e1:c8:e6:a7:48:35:b5:12:cf:4f:37:86:df:ca:7a:
         b5:50:ba:11:46:2a:75:38:b5:bf:e1:d2:7b:b2:38:d0:c5:fa:
         3b:db:43:3f:12:f9:2d:78:bf:1e:85:25:f8:3c:71:50:a9:96:
         47:79:48:48:c2:c1:aa:38:97:7d:4c:1f:d3:38:94:a8:d8:2a:
         5e:42:6c:10:a9:98:c9:06:9a:38:91:9b:e9:21:3d:52:4a:aa:
         4f:63:60:17:cc:8d:7c:5b:a1:be:bd:05:16:40:74:e3:5e:23:
         88:e8:56:b1:1d:66:1c:bc:4f:d9:32:be:27:df:df:a8:6b:1e:
         f0:fd:11:4c:3e:40:1f:e1:59:06:d9:66:ac:98:e5:3a:ae:98:
         87:f1:c7:3b:76:0e:7a:d9:4b:be:29:b8:7c:4b:98:6c:78:c7:
         16:25:1b:14:f1:49:a0:fa:82:1b:3a:ef:1c:17:bc:54:05:90:
         07:20:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----