Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File:                     mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier:          tOGzkm6Gn82uQ0Ao/StAH927QgMsg7MCMp+ErET4iBw=
Subject key identifier:   3F:16:3F:38:50:A0:81:15:B5:25:82:01:AD:70:8F:34:DB:13:EB:E0
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer:       /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial:       01962E996AAE6AE44505C90CBB23F57C0319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: NEqj8BvBPOtkH45qzmLazZkmCpA.roa (hash: 1CSuBVjeUix6GCeWhV3QFu5H8gx07d5za8DUe8nOaxY=)
                          2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: 3PRYTd4MhMz8ragP6EKKZuUu2xdJz9LzDmTqSRx/EeA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6a:ae:6a:e4:45:05:c9:0c:bb:23:f5:7c:03:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=3f163f3850a08115b5258201ad708f34db13ebe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:04:4c:95:05:b9:f6:5d:20:9e:00:e6:98:
                    3e:84:c0:92:9d:51:b9:97:f3:fd:1e:27:c6:95:e2:
                    2c:0c:9b:c2:a5:14:03:c5:c3:6c:2f:1e:f3:da:43:
                    08:72:f0:43:eb:4a:05:79:af:73:b4:1f:40:97:d6:
                    a7:f5:58:bf:bd:29:ad:7e:19:4b:96:20:0c:09:79:
                    64:98:d3:62:53:5d:6a:b2:b9:1b:ff:2d:38:c7:70:
                    e5:b9:f8:37:42:af:e7:d3:65:c7:79:57:41:ce:1e:
                    aa:02:e7:78:35:e2:b5:da:ac:b9:bb:5b:a2:8b:38:
                    95:e0:5a:86:5a:4b:4c:d6:09:de:c3:ed:77:9c:95:
                    f9:a7:63:0d:d5:ab:42:b7:de:0c:df:80:7b:27:c2:
                    3f:37:a2:71:98:7e:aa:98:8b:6b:c7:56:09:e5:a3:
                    d8:46:70:df:37:70:c4:c5:f0:d5:27:8c:51:3c:88:
                    2e:86:ba:a4:d7:ab:14:2d:e0:30:bf:90:d8:9a:00:
                    18:fe:41:f1:1a:75:47:83:cc:a9:16:ad:57:32:8c:
                    f9:58:29:6d:47:03:08:a5:7b:9c:89:7c:4c:e6:e8:
                    8c:a8:3d:52:7d:f6:42:a6:66:50:15:4d:7e:ff:12:
                    b4:87:b3:9b:c1:72:47:5f:f7:ad:27:ef:eb:11:ff:
                    de:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:3F:38:50:A0:81:15:B5:25:82:01:AD:70:8F:34:DB:13:EB:E0
            X509v3 Authority Key Identifier:
                keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:93:7c:bc:c7:60:09:a4:aa:bc:f7:eb:8b:3c:ad:75:69:6c:
         29:e3:a0:d2:f3:85:60:97:c2:ef:6d:7d:c4:a6:4b:c0:da:86:
         a0:4a:aa:1a:e2:0f:19:86:ab:f0:ce:bb:be:d8:af:1d:8e:2a:
         1d:d1:68:21:33:0a:2d:c9:1c:07:57:65:85:25:a3:a3:c9:06:
         f8:b5:e4:d1:6f:d1:99:f6:c9:7a:35:16:43:5c:64:0c:6a:21:
         63:5f:9f:60:c6:6e:b5:11:56:6e:f5:b1:19:ad:62:ac:46:3a:
         98:6d:6f:ef:87:61:e1:75:27:62:79:a9:d7:c4:10:83:f7:72:
         1b:45:16:70:09:32:ca:7d:1b:e0:5c:4f:62:11:23:31:40:5e:
         d8:dd:62:4b:48:cb:e8:8c:cf:04:d6:2e:a6:4a:84:c7:40:47:
         1b:73:f6:33:dc:d2:d4:db:9e:a7:56:b0:5e:bc:4f:14:bd:0c:
         b0:0c:7a:e4:7b:ed:78:c4:d1:7f:a6:f0:52:ef:55:b8:0d:1e:
         d0:7c:bb:41:1c:0a:d1:12:0c:28:f9:ab:13:c1:9c:dc:a2:2f:
         96:ad:9d:0a:50:f6:c4:68:34:76:e6:ba:07:ae:8c:b1:35:91:
         80:6b:31:ca:d9:e9:c2:5c:38:6f:ae:3a:49:e8:71:9a:66:a1:
         03:de:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----