Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
File:                     ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft (raw, json)
Hash identifier:          sDfpvsHF+tTt9EPyvchHqjX6XW4v4CppXgD73Nyf7EM=
Subject key identifier:   3F:83:A6:0A:1E:B5:90:15:2D:6A:F2:10:AA:27:74:8F:0C:4E:AA:67
Authority key identifier: 9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9
Certificate issuer:       /CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
Certificate serial:       01962F06D148522388743C0D373B46BA0EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft
Manifest number:          118A
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: b9QaepP0oxMTo3a9H8MxgSOF6ZM.roa (hash: 1vtB6IOZEJek+700nGKVkQQxvbkoR7RDVA9c6BbAbEM=)
                          2: ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl (hash: zP0IH/fDUn4+UWz2E0yf56fpPqLzLBoUWsa6nfWmwzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d1:48:52:23:88:74:3c:0d:37:3b:46:ba:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e02e064c98b3231c3f2148a1c3d9c387d489ee9
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=3f83a60a1eb590152d6af210aa27748f0c4eaa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:7e:70:0e:3a:5b:65:1f:69:e2:29:08:f3:
                    7d:01:25:1b:8a:6e:ca:17:2f:2c:46:23:56:dc:1c:
                    63:b7:d4:ac:3a:c1:16:81:60:19:67:e7:64:5a:e6:
                    0f:1a:c4:fa:9d:0c:87:e2:bc:f4:19:d5:be:24:4f:
                    fe:af:e2:70:2e:cd:2e:78:38:c8:60:77:d9:e7:7e:
                    c3:f4:87:cd:a3:eb:dc:78:3a:a4:87:58:6e:43:cc:
                    1a:5b:9f:12:cb:1e:08:1b:64:ee:3e:97:83:3b:96:
                    13:be:fc:8f:d6:d2:56:fc:a7:da:3f:eb:fa:04:26:
                    24:04:60:e2:9c:8b:0e:d5:b6:5c:36:b7:8f:8f:50:
                    61:37:aa:03:3b:e0:66:0f:9f:98:2b:02:51:53:a9:
                    49:88:5a:d0:0f:37:45:d9:57:aa:6b:a2:d9:87:6c:
                    01:f8:eb:5c:e6:d5:e4:bd:ea:74:ac:13:12:84:a0:
                    2f:c6:b1:f8:33:40:23:c0:7a:ad:90:44:df:58:c9:
                    12:3a:1b:ea:e3:2e:ac:f7:27:88:f3:32:ab:5d:7f:
                    cc:76:16:ff:1d:1d:c2:92:4c:0b:86:40:fb:ad:9e:
                    84:fe:01:1f:13:b3:11:b1:6c:40:ab:39:40:00:b3:
                    d9:24:e5:1e:89:17:25:ec:90:19:88:4e:db:26:ff:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:83:A6:0A:1E:B5:90:15:2D:6A:F2:10:AA:27:74:8F:0C:4E:AA:67
            X509v3 Authority Key Identifier:
                keyid:9E:02:E0:64:C9:8B:32:31:C3:F2:14:8A:1C:3D:9C:38:7D:48:9E:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngLgZMmLMjHD8hSKHD2cOH1Inuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5d7bc4-e0c5-4a48-90e6-752516890d3d/1/ngLgZMmLMjHD8hSKHD2cOH1Inuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:62:9c:9f:e2:7f:a8:a4:b3:b7:d1:17:6b:03:42:fa:cc:
         b2:b5:06:8b:c8:92:df:0f:34:28:df:fe:d9:e2:bb:c8:b9:79:
         85:5c:b5:7a:5d:0c:82:ae:ce:1c:df:e2:c5:c7:8a:74:f8:ba:
         52:3c:3d:47:01:79:69:d2:86:56:e1:cf:53:36:2b:5f:2c:81:
         26:3d:a6:4c:6d:82:68:33:70:8b:18:41:7c:42:91:3a:8b:fc:
         b8:fb:f3:2c:77:d9:b3:1f:2c:99:1e:17:d4:0d:6e:8c:32:22:
         d1:b6:a7:09:0f:e4:32:09:82:4b:7e:98:4b:3e:2a:e1:83:15:
         6f:b8:0d:3c:ac:f5:07:33:0b:1a:7f:1c:c8:9d:5c:4a:90:18:
         82:4e:6a:4d:ee:09:15:8e:7b:3a:f3:5c:73:c0:81:f4:ac:8c:
         14:2a:61:e3:1b:19:f9:ed:4f:4e:3d:bc:6d:11:12:ba:fa:1d:
         67:ef:fb:4b:86:7f:2c:c4:c1:b5:17:74:24:5f:a1:f1:1c:0a:
         0f:a2:2d:c4:5f:8d:5d:14:1e:d6:c0:f9:fa:6c:81:6d:33:3f:
         cb:49:ff:88:01:7e:72:69:88:e7:8a:65:c7:0f:60:23:3e:1a:
         55:8b:e9:94:e6:e1:2e:61:d3:2a:2b:53:52:04:77:79:78:d2:
         1a:5a:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----