Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File:                     nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier:          wPiR1nLa5z6XFampH1wqlrmMilZXIv6LMRF75r4N8q4=
Subject key identifier:   94:F6:F5:1B:5D:A1:A8:CD:7A:80:EA:E0:FF:1F:5C:19:20:3F:E8:DA
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer:       /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial:       01962FAB42CCB035CE93758196C256FB300D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number:          0509
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: Q2dMjskQBcbSPifxIXt83oL6Ix4esmdkjTvwg9ODhsQ=)
                          2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:42:cc:b0:35:ce:93:75:81:96:c2:56:fb:30:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=94f6f51b5da1a8cd7a80eae0ff1f5c19203fe8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:db:28:d5:fd:e0:d4:97:1f:9a:fa:92:37:
                    b3:36:67:93:f2:ad:62:4d:5f:a4:02:56:ff:43:b7:
                    34:31:bf:c2:51:2f:63:81:a0:ab:22:f6:12:d4:a2:
                    33:f0:0a:00:e3:f3:d5:d3:7e:cb:fe:4d:18:08:95:
                    c2:2b:c6:c6:68:7a:05:5e:e0:3f:ff:16:9d:ef:b5:
                    9b:f4:a9:c5:20:0f:b3:48:6a:49:21:19:09:80:d1:
                    08:1d:ea:d2:17:9b:27:8f:14:7e:b8:7b:dc:5e:42:
                    e5:22:9b:8f:06:88:3e:0d:05:cd:9e:11:06:54:2f:
                    fd:75:bc:0a:35:c5:d8:ec:57:11:1b:ba:0f:31:4d:
                    8c:5d:9c:b3:71:c4:56:05:fe:a1:e3:35:e4:52:38:
                    b2:f9:6b:8b:8c:08:f4:43:47:f2:14:ce:d3:e9:72:
                    22:ec:05:ea:78:23:98:38:e0:a2:92:03:20:28:36:
                    54:f0:13:39:6d:77:74:5f:57:87:c9:cb:54:66:ff:
                    68:53:2a:3c:8a:52:79:c5:31:cc:57:53:f7:58:94:
                    5e:f5:05:c8:3a:4e:d5:de:cd:45:8d:13:e1:86:0f:
                    cd:fe:5e:d2:dc:98:18:cc:a7:3a:b4:38:9b:35:bb:
                    27:bb:50:62:bb:ba:a2:83:51:53:4f:df:c3:cf:35:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:F5:1B:5D:A1:A8:CD:7A:80:EA:E0:FF:1F:5C:19:20:3F:E8:DA
            X509v3 Authority Key Identifier:
                keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:26:d1:bf:17:bb:44:db:57:23:6f:62:13:21:58:86:d8:b8:
         ac:98:d6:a5:7c:b3:cf:a0:86:80:50:70:e5:30:70:4d:33:ef:
         69:1b:69:01:5a:d0:fa:c5:9d:33:0c:74:43:76:2d:9b:92:99:
         37:53:74:04:47:1e:e9:9f:d9:96:6b:e9:03:cd:b3:13:b5:2f:
         38:e5:3e:35:3f:2e:90:64:9d:7a:c1:d4:98:52:4c:b4:2d:47:
         d0:b1:88:ff:f3:01:35:9e:42:25:30:d4:f6:9b:4a:d7:62:a6:
         bd:a9:f4:93:af:c4:ec:40:7f:fb:fe:19:d7:8b:5f:5f:04:80:
         94:8a:df:2c:ce:fa:ab:29:7d:02:0f:f6:db:4b:6e:1b:4d:49:
         29:21:b3:72:74:f7:85:2f:39:0c:eb:b7:18:06:95:43:50:b2:
         c5:48:84:62:bb:91:43:05:c5:22:a3:68:9a:34:c4:be:14:90:
         b8:5d:7e:22:c4:da:63:ce:67:8c:11:a7:b8:ea:98:34:ae:63:
         ab:4a:0f:0f:bc:19:cd:a1:30:c0:b4:39:b0:c3:25:4e:30:f9:
         dc:89:72:1f:4f:d8:92:95:74:3f:92:96:be:7a:d9:40:2a:fa:
         52:17:ab:2f:2f:2f:9e:ca:6d:5c:98:39:cd:1a:d4:e4:5f:6b:
         b6:c4:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----