Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File:                     _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier:          155XPHfD4yOzuaEaob9s7R1HbVoYhQCC0O8YsrP6Wu4=
Subject key identifier:   09:F4:CA:A9:62:70:4E:8C:CA:41:FD:23:9C:93:2D:D2:11:8D:CE:59
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer:       /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial:       01962DF40A1099F6F775E939EDE35481CF4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number:          04C4
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: d4+3EMfym2E5yyRacDTdVjeYOQi3rzi97tL2M9mpefw=)
                          2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0a:10:99:f6:f7:75:e9:39:ed:e3:54:81:cf:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=09f4caa962704e8cca41fd239c932dd2118dce59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:0b:8a:75:bc:00:d7:ef:00:8d:c1:62:94:
                    64:c1:ae:39:4f:cc:88:dd:4f:07:3b:8d:1a:0d:0b:
                    16:1f:a1:23:08:76:64:97:a8:45:67:fc:3c:b5:91:
                    99:c5:de:91:d5:f0:1b:d1:03:48:4e:a4:15:4b:0f:
                    f0:3d:1c:b7:72:da:e7:02:68:fa:9a:b1:6c:54:80:
                    19:f2:b3:33:27:4d:f6:48:d8:c3:7b:fc:f7:b2:6c:
                    a8:f4:d3:43:84:71:18:14:04:af:40:e8:68:d0:74:
                    7d:70:75:f5:b7:e5:f1:ad:dc:0d:4d:63:88:f8:59:
                    58:bf:82:5a:92:19:5b:26:0a:a6:0e:48:ce:7a:9b:
                    ee:f6:ac:75:7d:81:8a:80:92:02:6f:76:04:3f:81:
                    30:57:eb:f3:de:9f:b0:e2:1f:54:d2:94:bf:a1:bd:
                    91:d4:5c:34:00:14:20:45:05:16:d6:62:ca:83:ef:
                    b4:9b:90:5b:e6:ef:19:68:2e:ac:9d:65:a1:ef:26:
                    7a:54:c7:a3:29:95:8e:09:3c:0d:c4:24:ac:73:93:
                    5e:5b:79:82:ea:ba:7d:a1:31:84:40:cd:e7:ec:56:
                    6d:bd:ef:5a:db:50:a7:e1:fc:72:31:3a:72:7c:fb:
                    45:81:54:bb:ff:40:ea:a7:a5:54:94:58:bc:23:a1:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:CA:A9:62:70:4E:8C:CA:41:FD:23:9C:93:2D:D2:11:8D:CE:59
            X509v3 Authority Key Identifier:
                keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:92:e6:ac:86:53:50:a8:c0:5f:17:f3:c6:a8:c3:8a:5d:0a:
         db:34:28:b4:94:ed:49:b2:f3:3e:1f:a2:10:97:f6:30:3e:2a:
         5a:11:21:40:51:dd:d5:d1:23:b9:d1:75:35:c9:dd:8f:3e:ce:
         a1:2f:74:97:a1:52:24:cf:c6:ec:77:93:8c:ce:65:80:42:ca:
         91:f8:3e:37:f7:5d:2d:d2:85:f9:e2:52:3f:46:ad:fa:45:b8:
         8c:8a:1f:63:93:b7:a8:0c:c5:3c:c2:9e:a2:6e:b7:49:25:fe:
         35:39:e1:dc:b9:52:95:45:92:8b:82:ff:c2:ef:16:7d:3b:c3:
         f0:f8:96:15:ed:25:3c:6f:dd:5e:b2:e5:98:eb:58:f5:ea:89:
         ef:17:c6:c0:2a:9f:42:30:e5:1c:48:08:03:5d:ba:3d:4d:80:
         3b:a0:d0:13:f5:e5:59:06:2d:d4:81:8b:b6:0a:9d:d3:5a:c7:
         d2:cc:af:08:6f:19:e1:89:f7:b3:69:a1:c2:7e:5c:db:c4:14:
         6a:36:3b:7e:29:13:6c:b0:19:74:e2:7d:ea:bc:b2:32:93:dd:
         54:29:50:dc:e7:c0:7a:d2:cf:9c:0a:2b:8a:6c:13:86:5d:89:
         db:e4:53:10:0d:67:b0:bc:8f:01:4d:fa:43:48:65:8c:e9:73:
         7b:7f:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----