Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
File:                     1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft (raw, json)
Hash identifier:          s2NbBXKwozwRMVnph9Nt8/dGrLZyiIjVKnZQ7qRS/aU=
Subject key identifier:   06:6B:EF:73:F9:B8:FA:35:67:8D:16:26:B4:74:74:E2:8B:0D:DB:A4
Authority key identifier: F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18
Certificate issuer:       /CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
Certificate serial:       01962F74967C57A96010F584B54D38AA1D51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft
Manifest number:          0CA2
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 0MrgjigrDPt6rPegZME8cXiUORo.roa (hash: 7glCaQ9Yvpvmun3d90ogrApzDsZCqJLUsDw/+14dTgE=)
                          2: 1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl (hash: D5nSCteXzBvJrKtIgy8PJmcdDpWUKbCGxcCoTAqnmn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:96:7c:57:a9:60:10:f5:84:b5:4d:38:aa:1d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8d7213f3585b7112dff0cb43c192b1caf307d18
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=066bef73f9b8fa35678d1626b47474e28b0ddba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:fd:39:00:55:d6:74:e5:e3:d7:3e:89:bc:
                    38:51:f3:38:96:80:3e:08:f6:3c:d6:e9:22:18:fe:
                    61:08:74:d5:a1:b4:da:0d:f6:c6:36:34:26:a2:d1:
                    4a:17:96:3a:44:cb:95:6b:c3:c8:55:ac:39:c7:bf:
                    62:c8:da:02:21:5f:19:cf:5f:db:ea:0c:1b:cd:06:
                    70:39:de:03:4d:dc:a0:c3:de:38:0a:73:fc:64:e7:
                    a3:5c:a3:fe:3f:3c:74:e8:f4:0b:05:86:f0:db:ad:
                    e4:c7:90:dd:4c:21:00:c0:f6:2d:83:28:4b:c8:87:
                    0a:9a:ca:ee:94:63:18:0b:cd:2e:ab:c3:8d:67:c2:
                    9e:6a:6a:7a:14:ea:91:4d:85:a4:63:36:70:0c:08:
                    7b:f2:d9:36:5b:b0:17:44:97:d0:b0:ba:99:f6:b6:
                    8f:1b:75:2c:d8:3f:da:02:16:d1:69:8c:59:41:89:
                    a8:74:a9:5a:a6:25:d5:d1:86:65:6e:6f:f1:c8:0d:
                    98:9a:3a:d6:6f:4c:a1:5b:86:e2:56:08:73:ff:e3:
                    56:70:4b:6f:37:f9:89:1f:b2:82:02:a8:04:2f:0c:
                    d4:4f:c7:8b:1a:eb:70:71:f8:a7:79:ed:2a:f0:26:
                    b8:d4:48:c1:9b:06:7b:a1:9a:1e:ce:97:49:42:ec:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:EF:73:F9:B8:FA:35:67:8D:16:26:B4:74:74:E2:8B:0D:DB:A4
            X509v3 Authority Key Identifier:
                keyid:F8:D7:21:3F:35:85:B7:11:2D:FF:0C:B4:3C:19:2B:1C:AF:30:7D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NchPzWFtxEt_wy0PBkrHK8wfRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4953ee-910f-4b8e-b464-2650edd3013f/1/1-NchPzWFtxEt_wy0PBkrHK8wfRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:22:1b:ce:41:cd:9c:05:4b:a2:99:cb:39:18:c3:a9:14:e8:
         5f:a3:6d:9d:f9:4a:66:ac:f9:c6:50:bf:f5:2e:be:14:7f:1e:
         cc:80:53:61:f9:2e:67:81:e4:f3:43:f1:8a:c3:c0:a7:44:8a:
         cb:9a:b4:3b:8b:b1:b5:59:e7:f2:9c:2d:1b:14:f0:8e:5d:c6:
         29:47:19:d3:ba:5d:d5:db:4a:60:98:cd:e1:ad:33:ce:e7:df:
         15:8e:81:2f:de:20:2d:57:d5:8b:7d:bf:ef:44:bc:56:f1:fe:
         55:8f:06:a3:16:d5:98:da:b0:b1:ed:b2:b2:4e:f0:17:68:e4:
         16:3f:31:79:64:30:55:32:a1:00:a5:a1:5c:0b:7a:e2:ff:b7:
         9d:61:5b:6e:f2:9c:f1:cc:1b:9e:ce:65:10:74:e5:b0:8a:c2:
         38:c5:ef:6a:1d:9d:1c:b3:32:b0:3e:e7:3f:03:75:5f:b4:45:
         bb:ae:2a:32:0a:96:2e:a5:f4:74:7a:8f:3b:b9:1d:68:22:98:
         c0:b3:cd:95:f0:4c:e9:ba:16:ed:b8:b4:61:7a:2f:cd:cf:2c:
         01:11:17:43:ee:b1:3d:62:bc:ed:29:2e:29:2e:01:37:f1:8b:
         74:e3:27:b1:3d:c3:8f:e3:ee:59:e6:74:91:5b:a8:70:14:7a:
         de:68:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----