Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File:                     nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier:          SvbRuttDON66n7FQf+AYbsWKRc6Sh40wQE03Rxp/Cu8=
Subject key identifier:   F4:53:F8:5F:32:18:16:41:96:05:52:69:0D:0C:07:3A:A3:62:D0:73
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer:       /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial:       01962F067B2F0EEF426138F3D103ECC6AE24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: mtkhlYdRRxy7HTt4lejr_BK0O0E.roa (hash: XUZOJXssCKIIh5ucQaDh2vYICFb1VOST7rkiATGvktw=)
                          2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: i/xLz8NYyECLXvCbuUCuP2cSLrJw5dawlEdft1fTeAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7b:2f:0e:ef:42:61:38:f3:d1:03:ec:c6:ae:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=f453f85f32181641960552690d0c073aa362d073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:6f:02:4a:68:7d:98:ec:ee:41:85:0a:3e:
                    a2:f3:99:05:5f:0f:f7:e1:1f:cd:65:d1:b1:bc:b2:
                    1c:0f:2d:80:33:e3:4b:0a:96:9c:a2:4b:50:24:8b:
                    ca:a4:4f:0e:26:01:ef:d1:2c:d9:f0:de:b7:37:a0:
                    23:5d:11:0d:21:1f:03:61:64:0b:d0:56:55:00:c3:
                    9f:5e:b9:55:6b:a2:04:27:aa:4c:e6:c9:60:ec:68:
                    f6:69:f2:43:47:1b:e0:a3:00:14:c7:a2:7c:36:9b:
                    b8:f9:2a:90:ae:37:bd:cc:50:42:9e:fc:c0:6a:31:
                    39:41:94:b9:13:06:fa:3e:62:cf:97:54:90:08:fd:
                    d1:8a:0c:27:ac:6c:61:51:b7:cf:f9:93:c7:53:30:
                    a7:c3:14:c1:23:a4:8d:5e:5e:2f:7d:a4:0c:3d:50:
                    86:77:13:3d:4a:a5:a8:63:e7:25:c9:08:d2:b1:7c:
                    9b:9b:fe:3a:f9:3d:f4:a3:8a:e1:9a:e7:68:eb:08:
                    59:fd:f2:8a:bb:5c:19:28:c0:62:0c:05:69:b4:fb:
                    76:f9:1d:a2:c2:28:f4:2a:8c:64:7c:d8:fb:1d:37:
                    0b:fa:99:e5:fb:de:dd:fe:20:1b:b4:ed:13:52:93:
                    da:ad:6e:e6:98:8e:15:1b:22:65:0c:61:15:bf:6b:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:F8:5F:32:18:16:41:96:05:52:69:0D:0C:07:3A:A3:62:D0:73
            X509v3 Authority Key Identifier:
                keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:33:2d:23:37:3b:98:0c:7a:0b:e1:b4:4d:2e:c4:3c:c2:
         91:a4:19:9d:e1:d9:11:db:dc:e4:f2:33:95:2e:6d:08:6e:ee:
         72:59:23:1e:25:f7:01:26:ce:71:ee:a1:0b:5a:2b:1e:26:78:
         04:2e:f4:22:10:1b:92:53:68:8f:1d:99:47:a6:95:e4:c3:6b:
         bc:58:77:fb:30:b7:03:21:f5:7b:14:f5:2f:d4:5d:d4:7d:1b:
         76:37:f6:d3:51:06:4c:3e:66:4d:49:6c:cb:b5:c8:7f:39:59:
         1b:f2:2b:73:c5:f6:68:42:71:1d:5a:fa:98:97:4d:bf:4a:f0:
         a7:19:79:61:de:83:41:a2:77:d8:41:ae:19:db:b4:45:f0:0f:
         3c:91:d6:5f:84:48:ba:84:ae:cd:76:51:07:8c:ff:19:7d:73:
         d2:f2:2f:60:dc:fb:31:0c:e9:2e:65:b1:01:24:79:ae:a9:f1:
         e0:53:cd:04:b7:72:4a:aa:8c:d1:12:f1:1e:49:11:27:c6:3b:
         eb:01:20:71:67:08:83:b9:7a:bd:27:58:5e:14:0a:2b:2f:59:
         8a:4a:22:b5:53:20:ea:ec:30:19:5c:87:16:e4:77:78:a8:d7:
         ee:e0:93:e2:4d:65:fd:ce:60:a0:99:77:6f:45:98:8d:ae:2d:
         e5:c2:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----