Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File:                     nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier:          KQnVI+wbtwTScgVUhS1rd2vsmvx/SH0ESu+ZvgQBR+k=
Subject key identifier:   B4:49:98:F9:F3:96:70:2C:4C:4F:FE:1D:55:D4:87:9B:B3:7C:AC:E8
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer:       /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial:       01962E6181A1BE0FBE93A278BDCC81D92DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
                          2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: FAWTWd2r+bvA7aX9/GAvh2G3k8s82mCSE7R8vGoEpQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:81:a1:be:0f:be:93:a2:78:bd:cc:81:d9:2d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=b44998f9f396702c4c4ffe1d55d4879bb37cace8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:0a:be:5f:9e:15:4c:ba:55:2c:38:cd:cf:
                    97:54:f3:3b:f7:de:ee:d7:78:34:6e:35:fe:7f:ce:
                    d7:ae:ff:68:f6:ba:72:7d:90:eb:8f:55:a7:ba:7d:
                    7b:b5:06:2b:53:f2:a6:af:ce:91:87:28:de:bf:66:
                    2b:6f:bc:2c:a7:85:2d:3b:35:d4:cf:79:54:4d:94:
                    3c:76:f3:4c:50:5e:71:7c:8c:0f:29:b6:4f:2d:43:
                    dc:5d:7c:d7:b4:24:ba:56:eb:b3:a7:d2:56:23:28:
                    1e:d7:a1:d0:c0:a2:64:20:65:be:5f:9f:48:3c:cd:
                    fb:c3:bb:33:82:b7:8a:d8:da:f3:32:de:10:7f:15:
                    01:b8:07:dd:ea:72:55:b6:06:b2:c0:3d:c1:47:2d:
                    52:d5:2a:44:68:8b:68:9c:6c:1b:b9:13:72:fa:4e:
                    e2:ab:f1:66:82:20:a1:1e:11:11:16:2e:48:5a:f7:
                    f8:c6:19:02:29:c9:54:b8:ac:c2:49:c3:47:00:d2:
                    27:33:f8:ba:33:8c:8a:44:7d:4c:f6:7f:c6:df:b8:
                    ec:93:8d:12:c8:f3:1b:97:2b:c6:eb:6d:51:57:d6:
                    4d:7e:9e:f0:24:32:92:ef:b4:f4:dd:18:c2:91:d6:
                    fb:9a:a2:c4:ff:36:1c:f7:69:be:44:f0:2e:0b:c3:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:98:F9:F3:96:70:2C:4C:4F:FE:1D:55:D4:87:9B:B3:7C:AC:E8
            X509v3 Authority Key Identifier:
                keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b6:2e:af:37:03:95:e1:ca:c8:3c:e6:09:4d:d0:fe:1e:c2:
         05:da:74:0a:08:85:31:69:6d:a2:ff:d2:f0:42:58:30:8d:29:
         1c:33:fe:01:a5:d1:49:78:05:4b:4b:5c:1a:ff:40:80:0c:84:
         d3:dd:19:06:af:f5:a7:ab:50:2a:73:c5:1d:a9:ae:1b:02:b8:
         ee:8c:a6:0e:23:47:39:73:e4:69:34:75:72:a3:f9:43:0c:d0:
         08:15:e1:5d:69:e6:14:62:d1:c3:36:80:0a:08:bd:2f:48:5c:
         b2:78:98:9b:3a:f3:1e:e0:52:c7:e9:ac:65:9f:e8:ec:86:43:
         cd:0d:f9:51:4f:99:f7:1c:f4:c8:3a:e4:14:c2:d9:05:0f:0f:
         d7:4a:84:b9:50:ab:04:d9:81:4c:ff:da:f5:97:d0:28:47:de:
         e1:b4:f0:8a:3b:87:f3:b0:b5:02:66:b4:32:e4:11:74:4b:df:
         13:26:0a:8e:a1:eb:2c:6c:e8:72:bd:49:95:cf:61:3f:ea:27:
         19:a8:f9:54:cf:2f:97:43:5d:47:72:12:49:5a:d1:ac:a9:37:
         bc:c2:e2:37:19:0a:a5:db:e0:2b:c3:9b:c2:61:d3:b0:83:b2:
         a7:38:04:c7:59:de:78:14:bc:27:96:45:ba:09:39:00:28:34:
         90:94:e9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----