Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File:                     n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier:          QKewvIpbOZK3YqHfUg96r/HCjVkuNEZUGIsN9RUUk7o=
Subject key identifier:   69:2D:A9:7C:60:5D:78:BD:89:80:11:A8:08:DD:A4:2F:EB:82:CF:E9
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer:       /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial:       01962FAB865B4E910B4670D518BC29610814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number:          07E1
Signing time:             Sun 13 Apr 2025 15:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:32 +0000
Files and hashes:         1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
                          2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: K20fFpkSmHK2Qen4R1fWQ/foDajnH5fHrI00rMBw7rE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:86:5b:4e:91:0b:46:70:d5:18:bc:29:61:08:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
        Validity
            Not Before: Apr 13 15:01:32 2025 GMT
            Not After : Apr 14 15:01:32 2025 GMT
        Subject: CN=692da97c605d78bd898011a808dda42feb82cfe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:e7:71:e5:4e:62:4d:d1:39:4d:6e:10:8c:
                    c9:c4:cf:cc:a5:57:76:db:57:67:12:2f:7e:ea:69:
                    f5:d4:35:02:cc:5e:1f:ba:b9:dd:e0:cb:17:a5:3f:
                    0d:f4:cc:6c:7e:e5:98:4a:96:9c:e9:df:b6:76:37:
                    36:22:4f:58:81:86:e6:4b:2c:eb:ee:76:5f:7f:d5:
                    27:fc:df:97:d7:05:10:f5:af:16:d9:26:67:fe:d6:
                    0f:a8:78:ac:39:3b:dc:c0:03:99:64:f5:7d:4f:b8:
                    f3:12:aa:6d:92:68:b0:b2:f9:96:cc:56:f7:14:d5:
                    d5:4f:34:75:fe:c7:93:eb:5e:e0:52:d8:7f:5e:48:
                    e0:c6:32:a8:a0:73:98:e1:92:31:c3:3d:2d:5e:4c:
                    6b:fc:f0:d4:23:e9:25:2c:b0:54:7d:be:5a:7f:77:
                    81:f3:4d:93:99:a8:d5:4f:96:d5:73:43:a7:3f:aa:
                    f3:fd:44:89:b6:3d:b9:dc:8d:cf:1f:16:6d:55:99:
                    93:94:b4:48:67:82:07:03:24:a7:15:a4:dc:12:d1:
                    df:10:77:ee:c1:fb:49:b3:f9:2e:1a:19:4f:c2:9d:
                    7a:62:76:19:27:b7:b7:60:7a:26:78:17:8b:d2:ba:
                    ac:a1:c6:8d:64:3f:f0:1f:2d:7c:f9:7e:2b:13:f9:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2D:A9:7C:60:5D:78:BD:89:80:11:A8:08:DD:A4:2F:EB:82:CF:E9
            X509v3 Authority Key Identifier:
                keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:14:29:4c:dd:85:c1:4a:e7:51:da:bf:f7:f3:df:50:26:
         63:c0:d0:ad:5b:bd:46:5b:86:1f:18:9d:01:95:6b:13:3d:e6:
         85:4e:af:44:64:70:4f:d9:85:8f:8c:fb:c5:20:66:e2:95:27:
         4e:94:25:21:62:e2:c3:1a:11:35:90:68:73:0f:6f:02:49:f9:
         c0:4e:23:8d:e4:84:55:60:35:ce:76:a1:2a:71:7d:ec:63:88:
         90:15:ef:7e:3c:ab:68:87:aa:84:f9:4f:ff:83:c6:e0:a6:4d:
         bd:80:e3:0a:02:1a:fc:2b:3f:9c:0c:50:79:2d:db:ee:dd:62:
         ca:9b:fb:b7:4f:58:b2:1d:c0:a5:06:5c:b2:96:ce:6a:3b:1c:
         8f:d3:b7:f4:6e:92:fa:30:95:d7:e1:fe:84:9f:31:be:4d:03:
         2c:3a:d5:16:9e:c8:da:d7:91:0e:92:66:92:de:a4:8d:85:92:
         70:60:fe:9b:fb:6a:69:99:d0:c4:de:8b:a3:43:fb:9a:63:ec:
         6b:ae:94:b3:67:1e:8c:6c:21:74:02:a3:ea:7c:1a:49:2f:ea:
         92:69:42:ee:89:db:11:9b:37:2e:b2:12:6d:d4:a6:c6:b7:9b:
         1b:c7:86:a2:96:45:ce:3e:2a:b2:82:30:b7:0e:98:19:bd:db:
         ef:b5:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----