Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File:                     cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier:          Br9V0euNSdfY6Jg4OKsJtztjUcvz8rVZ4xpZuOkd5Lg=
Subject key identifier:   EB:96:87:98:81:29:C8:16:55:AA:86:51:EB:17:A6:DB:C5:A7:98:7D
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer:       /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial:       01962DF3C997B0741A76CAAFF4E071793634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: BAJtDqJxaWUqQAfiueye7uuRaiw.roa (hash: xliJwPehY40wkTea7xdHZ3Ii3nZae+NEE66sFETvyTA=)
                          2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: LSws1aGNjLLAcn1PdFXW61+8xE/ka2eQ7yaaAzs+nFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c9:97:b0:74:1a:76:ca:af:f4:e0:71:79:36:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=eb9687988129c81655aa8651eb17a6dbc5a7987d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:b0:0a:32:7e:5d:ae:6c:cf:4b:f1:1c:c7:
                    5e:5c:7b:0f:fd:59:6a:a7:94:75:d7:87:28:25:ed:
                    d6:5e:8c:08:2d:8c:f5:a7:03:40:f2:56:95:8f:83:
                    e1:32:7e:1c:3e:96:83:d3:83:2b:5a:f6:9e:43:01:
                    58:1f:15:14:b9:2c:a7:a8:32:d0:5d:8b:6b:5d:f9:
                    29:94:97:52:2b:18:65:98:00:44:08:fd:c6:38:aa:
                    ca:c1:37:43:1d:40:dd:76:7a:b0:92:8a:99:3b:af:
                    9b:71:3f:df:1b:17:a8:f0:b4:e0:a2:91:fa:89:a1:
                    b1:f2:e4:cc:11:bc:3a:5e:15:e4:f0:b2:bb:d8:c3:
                    a0:18:ce:54:4d:12:9b:1e:45:bb:c5:c4:d1:5a:bc:
                    b1:99:1f:8f:c9:8a:31:a9:f4:0e:43:f0:d2:94:39:
                    78:4c:24:ef:90:bd:ec:dc:66:44:81:ca:74:a5:cd:
                    98:72:7e:cf:38:10:e8:0b:27:87:77:d9:76:c4:fe:
                    af:25:ee:d4:48:7a:a1:63:4c:d0:3e:ef:19:43:36:
                    71:f9:e6:78:7d:65:a0:81:56:81:9c:d7:15:86:59:
                    ef:1d:25:fb:5d:5f:33:e1:d9:0d:93:0f:70:77:eb:
                    3e:62:8f:2a:35:09:c1:28:6e:d9:62:87:84:74:04:
                    a0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:87:98:81:29:C8:16:55:AA:86:51:EB:17:A6:DB:C5:A7:98:7D
            X509v3 Authority Key Identifier:
                keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:e8:e1:14:45:8e:3e:ee:fd:6c:78:b0:3d:02:da:32:64:
         e8:c1:ac:08:e3:19:99:02:44:24:f5:54:08:94:c4:c4:18:4c:
         21:df:96:4f:2b:6b:98:10:05:e3:4a:68:10:d2:6e:ed:63:a1:
         8d:f7:a2:c0:34:cf:94:3a:e6:a2:52:d0:af:36:3a:bc:ae:bc:
         3c:51:90:8d:d0:86:73:7e:22:55:f1:6e:7c:35:f4:eb:fe:66:
         83:5b:b3:56:9c:88:95:a1:b8:a3:11:e9:34:a3:56:77:0e:be:
         c5:42:ef:70:68:25:5b:b9:30:ff:4b:14:6a:0d:45:65:35:99:
         74:f4:96:95:3c:34:3a:5a:1b:26:14:ed:2a:18:3a:43:a6:d9:
         67:4d:c7:71:1e:59:b4:4f:f6:60:c4:cf:4c:b1:c6:72:dd:2f:
         dd:bc:a5:09:c3:64:d1:c6:46:b9:19:36:70:fd:e7:3a:b6:7c:
         37:e0:47:9a:67:9a:ca:c0:65:4d:c1:51:8d:90:d6:c1:54:66:
         3b:c1:75:c6:8d:30:73:dd:a3:ee:dd:bd:56:6b:cc:e0:97:17:
         65:43:46:3e:99:14:67:f0:75:a4:5f:f2:39:3a:5a:26:b4:ce:
         24:b6:67:ef:de:5c:da:48:c4:d7:fb:72:fd:c3:ed:89:50:5c:
         82:6f:44:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----