Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File:                     nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier:          LVAEK+8IIoEu+OoAAUKpGeWHItf32hvjU/Gm1kjHUcs=
Subject key identifier:   58:B4:16:4D:F1:74:26:4A:BF:6B:6F:21:E5:45:CA:DF:FB:76:DD:60
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer:       /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial:       01962E2B0BDF6A382E7A6D7ADE5BC6CA4D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number:          12C4
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
                          2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: vt3Tj8RyreokZU8YurjHZ9LSlfum+g/0JcKwo4nq7wI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0b:df:6a:38:2e:7a:6d:7a:de:5b:c6:ca:4d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=58b4164df174264abf6b6f21e545cadffb76dd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:3e:e6:25:ab:19:8d:5b:28:41:04:51:d8:
                    9c:8f:30:69:2f:16:0a:e6:db:ba:15:84:b0:ab:bf:
                    38:0e:c1:a1:0d:5e:09:23:5b:f2:bb:90:23:f3:70:
                    36:57:b6:28:57:dd:2c:81:2d:d5:b6:d8:ad:31:92:
                    3e:43:98:20:85:03:5b:1b:a6:3f:d1:26:f3:72:e2:
                    07:d8:9b:a6:2d:39:a5:86:43:57:d2:51:74:8f:ed:
                    7e:41:d3:df:fb:d8:c2:d9:97:a4:f9:9c:20:f1:96:
                    04:02:4d:83:6a:4f:8f:b8:8e:b5:ed:2c:4b:dc:27:
                    54:70:eb:76:3a:d2:0e:98:82:96:aa:e8:5c:af:9b:
                    6e:53:9c:8c:91:48:6e:95:f2:c2:93:68:8c:a9:c2:
                    8d:a6:08:01:dd:83:f5:ff:29:20:7d:7c:3e:ce:f9:
                    f1:ad:b0:e1:0a:82:83:b0:c9:71:b9:ce:62:0c:be:
                    73:25:f6:8f:29:bb:b7:da:1d:bc:1f:f6:a6:71:29:
                    52:94:95:f9:2d:71:2b:40:60:d1:64:08:24:50:3a:
                    d0:b8:f5:72:0e:2a:bb:fc:bf:cf:5c:47:82:3a:fd:
                    2e:f3:ed:64:8e:12:23:95:ee:b0:e6:d3:c3:63:cc:
                    c4:ab:e7:1f:4e:b6:62:00:5e:b3:d9:fe:5a:69:cf:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B4:16:4D:F1:74:26:4A:BF:6B:6F:21:E5:45:CA:DF:FB:76:DD:60
            X509v3 Authority Key Identifier:
                keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:8f:89:90:23:c3:21:fc:fa:0c:9c:c3:0f:45:2e:52:cf:
         eb:be:2c:9b:31:47:04:d9:74:cf:6f:61:7c:3f:0d:ea:04:ef:
         be:8a:68:eb:e0:76:31:e2:c3:3f:d3:9b:11:c6:73:34:8c:36:
         bf:96:f9:e3:6b:45:03:32:52:f9:8a:c3:2a:c2:8b:12:d6:e2:
         14:4f:86:0b:81:0c:05:56:de:96:07:2e:b3:0e:70:26:f3:86:
         28:bd:4b:60:66:49:8a:3b:ea:98:5b:a1:1f:78:55:4b:80:47:
         9f:0c:0f:64:e3:2a:17:0f:67:3f:8c:03:20:87:09:a3:06:db:
         0f:dd:90:00:66:8f:fa:c1:47:17:45:25:97:d0:65:f7:78:75:
         a7:48:e8:a9:50:ca:55:24:8a:91:bf:63:a9:18:e6:96:34:33:
         c9:d5:b9:25:cb:5f:15:5e:02:36:2d:0e:cf:fc:25:d7:ef:b4:
         5c:f3:2c:ca:0e:95:9c:88:05:7d:49:7c:05:36:b0:35:2f:75:
         36:ad:d6:f4:f1:7b:2e:a2:91:8a:70:09:ee:0c:37:5f:e5:ce:
         fd:c3:46:93:cb:28:8e:a1:8d:51:68:14:ce:77:7a:12:c9:19:
         01:cb:1b:3d:4f:e8:cc:b5:41:96:45:2b:e1:10:e6:82:28:a1:
         d8:84:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----