Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File:                     nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier:          Du9JASXxUScwiKqqZERn17uAqt37/fxFBhEWlW0dX/w=
Subject key identifier:   1C:D2:AA:4D:8A:BF:50:75:DF:6C:8A:F8:D4:AB:D2:85:42:53:54:59
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer:       /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial:       01962ECF9EA21310321683D9216C47B23425
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number:          0EE9
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
                          2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
                          3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: FO0lXVeZ0FRipaHm3VdIQkwZLMgtziN05MBpRh0XklE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:a2:13:10:32:16:83:d9:21:6c:47:b2:34:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=1cd2aa4d8abf5075df6c8af8d4abd28542535459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:0e:4d:46:bf:cb:0e:55:ef:f1:2c:82:02:
                    3f:85:d1:18:29:ba:5d:3e:54:d1:ff:1c:25:60:63:
                    83:df:37:dd:ec:08:15:54:7a:84:58:db:e3:51:af:
                    a8:12:b4:65:73:ea:f8:8f:26:a4:da:25:94:76:53:
                    2b:e4:5e:04:b5:3d:fa:8e:3a:0c:d9:6a:cd:6f:2e:
                    14:fe:40:fa:97:03:ab:81:b0:21:9a:b9:2a:89:8f:
                    c6:ee:fa:bc:51:65:af:17:ee:c9:eb:a0:50:b3:27:
                    41:6b:83:46:9e:bf:87:83:1c:ee:c1:6f:1b:14:95:
                    b6:00:b6:b9:db:24:dd:e0:85:3b:c7:a3:9a:fc:f0:
                    af:08:48:5b:53:23:a7:7a:49:24:7d:f8:bc:de:5c:
                    95:b6:a4:ff:91:0a:f5:c2:14:e6:20:94:be:f2:b1:
                    32:1c:18:e5:9c:9f:f7:f6:2a:b7:3a:5f:18:17:ed:
                    60:06:f1:b7:b2:d0:24:42:40:e6:20:66:32:60:4a:
                    c7:ed:c9:b7:77:65:a4:bb:44:55:c9:b2:95:c8:86:
                    30:76:38:d6:86:11:2b:5d:9c:4e:6c:7c:cb:28:03:
                    21:21:99:5e:56:76:70:a7:e2:c1:e3:00:0e:92:66:
                    89:82:57:d1:65:81:b4:e6:17:df:b7:98:76:2e:2b:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D2:AA:4D:8A:BF:50:75:DF:6C:8A:F8:D4:AB:D2:85:42:53:54:59
            X509v3 Authority Key Identifier:
                keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3a:27:2d:c8:0b:53:3b:0a:80:ff:90:e1:87:15:50:5e:bd:
         65:9f:f3:13:fc:90:86:8c:b4:eb:38:61:10:e9:e3:63:a9:bc:
         cd:9a:2f:2b:67:c7:10:82:30:b5:31:31:7e:52:5b:21:48:50:
         9f:44:e3:ac:88:d0:80:33:12:da:2c:9a:de:4c:a2:08:07:c5:
         83:e4:a4:27:58:0a:0a:bf:aa:a9:93:03:34:a8:98:4f:c2:9d:
         13:42:57:6c:5e:04:f9:2c:7d:fb:ef:23:26:9d:fc:95:8d:29:
         08:b8:5d:d5:0c:49:71:bd:d8:d5:64:5c:fc:3a:4d:65:1a:70:
         0d:a0:5b:27:e7:f9:ea:f4:4b:d2:37:e2:e5:c8:3d:97:70:56:
         fa:99:f1:97:57:e4:68:35:35:c0:01:a5:09:73:f4:76:2a:cb:
         ad:44:53:a8:69:a3:8a:1a:48:f9:7b:0d:87:22:c5:a3:c9:be:
         06:e7:85:cd:a5:a5:ca:91:65:43:dd:e6:aa:55:da:84:4a:03:
         ad:fd:fd:f0:4a:1c:e1:31:86:f5:92:b8:29:c6:80:7b:05:21:
         7b:90:b4:9d:92:8f:4c:a3:89:04:32:ba:53:12:d1:81:e0:82:
         77:fe:ab:fe:ab:38:8a:2f:f9:bb:7e:e5:1e:4c:de:b5:08:86:
         ea:f4:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----