Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File:                     nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier:          uEODnyuxphjk8NIbfPSFpojuEBpKIRmc/tO73yp49yY=
Subject key identifier:   B6:C2:ED:B2:5A:DD:48:1D:B4:B1:1F:DA:03:D2:78:8A:66:D1:92:4E
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer:       /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial:       01962E2AFAF226A83C6F6476D9F9B40F698A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number:          053B
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (hash: J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=)
                          2: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: rJ75R/BciMfGDjbEUOCNiEvNt9+cbNt5M9qhqwUIzJ8=)
                          3: wu74ellxTR1URudwGeXbUef_Mc4.roa (hash: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fa:f2:26:a8:3c:6f:64:76:d9:f9:b4:0f:69:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=b6c2edb25add481db4b11fda03d2788a66d1924e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:25:93:6a:b7:09:d3:ad:e9:5a:08:58:63:68:
                    bf:64:b0:4d:e0:d7:c5:06:c5:59:1e:57:cd:16:58:
                    51:b5:46:2e:8d:d1:d1:4b:31:8c:8c:ff:93:79:4a:
                    f0:0e:47:9d:92:5f:25:1b:5b:f4:65:5a:fb:45:57:
                    80:88:de:f5:29:b5:c3:33:a7:9e:c6:b3:1a:19:c2:
                    66:85:61:19:6b:0b:b7:74:ee:e3:fc:0b:70:ac:72:
                    ca:22:20:c8:8b:4f:98:fc:29:12:a5:de:1e:c3:6c:
                    68:89:45:a2:29:b9:15:2e:44:4c:de:23:aa:44:8f:
                    75:08:d9:96:24:e9:a3:c6:ea:55:a4:3c:2e:2b:94:
                    f9:e2:ee:18:a2:f8:9e:6f:c7:35:df:30:3d:9c:db:
                    55:de:b9:e4:1f:18:50:79:1b:01:b3:f1:e1:6f:a8:
                    ff:69:36:34:2a:50:a5:a7:c7:38:7c:1f:00:54:08:
                    68:cf:57:c9:b4:a3:e8:78:13:9f:03:e7:4d:b3:4b:
                    dd:92:a3:db:4a:f1:12:02:f5:90:fe:b8:d6:6f:87:
                    65:a0:c0:a2:35:59:85:17:ed:56:e3:b7:4c:55:dc:
                    45:dc:ec:1c:a3:47:0a:19:30:c0:38:45:94:dc:96:
                    46:08:e7:a6:68:cf:57:08:9c:b7:59:9b:6b:11:73:
                    81:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:ED:B2:5A:DD:48:1D:B4:B1:1F:DA:03:D2:78:8A:66:D1:92:4E
            X509v3 Authority Key Identifier:
                keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:35:44:12:46:00:37:2b:9f:b6:d7:26:05:00:54:07:c6:
         c2:b5:9b:c6:d8:99:e4:ef:e5:4e:52:fe:9e:06:32:55:fb:e0:
         68:4f:d0:11:9e:ad:c3:13:4e:e1:53:9b:71:fb:8a:74:74:24:
         00:1c:1b:0e:6e:41:ed:4e:24:f3:7f:4f:8d:fa:24:8a:c4:56:
         66:46:3d:c0:33:a2:03:b0:49:3b:1b:0b:bd:0c:79:a5:c1:a0:
         f1:4c:5f:88:ae:da:9f:c7:c5:35:cf:6d:5f:c8:b9:e1:ba:0a:
         3d:47:6d:88:97:16:f4:46:d8:4d:87:5f:1a:6b:d2:98:2a:76:
         fa:d3:d6:3e:c8:93:b0:ee:b8:4b:ab:1a:7c:ae:8a:3d:8e:ac:
         1e:13:92:90:f4:df:1a:92:49:24:99:fd:12:66:f0:d1:5f:9d:
         78:10:d9:a1:69:ee:c4:6a:f4:09:9b:e6:81:48:85:58:4d:dc:
         e6:45:f8:0e:63:b0:c4:1e:64:0e:9b:14:52:3e:b8:f0:a7:30:
         bf:36:0a:2f:43:f3:33:fd:e2:12:46:25:25:88:5b:b3:4b:40:
         fb:8b:a8:9b:ff:4b:aa:ce:5a:65:1f:6a:11:05:b2:60:05:d1:
         4f:b4:6f:b1:96:8e:4f:47:ed:3d:38:0a:d3:e3:1a:75:87:b7:
         6f:b2:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----