Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
File:                     1NhufQc6nk1p7HFcNiMXaAWJTVo.mft (raw, json)
Hash identifier:          cjC/7qF2Lyfy2H31fZmC42+DPnvxFXjuRzYj2RCVBB0=
Subject key identifier:   64:53:15:59:E7:52:C0:24:28:B5:26:10:6D:A3:C7:A4:9E:CB:5C:61
Authority key identifier: D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A
Certificate issuer:       /CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
Certificate serial:       01962DF3E4ED915A3885FCAE025D95563A83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft
Manifest number:          0BDC
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: 1NhufQc6nk1p7HFcNiMXaAWJTVo.crl (hash: 7W88REv0gkXgUPlcZRZvw0ZoPTk1168KHIxzFpDyOrI=)
                          2: yVOuH9GnWiOJ4T0Bjcul16G_CUI.roa (hash: cYY3QuLeMs+0RKKYLhzyVIgFcgFYuNr0hEZcjUsKwaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e4:ed:91:5a:38:85:fc:ae:02:5d:95:56:3a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d86e7d073a9e4d69ec715c3623176805894d5a
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=64531559e752c02428b526106da3c7a49ecb5c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:f7:18:f3:ae:cf:9c:b0:cb:c2:f1:d4:98:
                    e7:cb:a4:92:92:65:0f:92:8e:c4:cb:0c:05:49:23:
                    ad:34:5c:40:d6:36:ef:3d:79:53:a6:91:3c:e5:64:
                    98:16:ce:14:cf:10:a5:a4:57:4c:0c:5e:f3:38:58:
                    71:bc:8d:fe:c6:51:c3:8f:c7:81:2c:61:d4:f9:5e:
                    8b:c2:16:b1:7d:3d:13:22:c2:32:a4:91:bc:bc:7c:
                    f7:d1:42:4d:36:4e:b6:38:d0:e6:d9:ab:54:21:b7:
                    2d:fe:a6:fd:63:d9:a3:7c:e4:7b:8f:6c:f7:4a:77:
                    6b:56:5e:95:ca:75:1d:fc:a3:e0:5f:ec:51:04:80:
                    77:b3:4e:81:9a:cd:08:e1:be:70:1e:ba:d1:44:32:
                    3d:e9:c8:77:c9:ea:39:d7:d9:a7:8d:3d:ed:70:95:
                    3b:91:87:4e:8c:a9:38:9e:bd:6f:bb:44:d2:42:8f:
                    fc:b2:70:1a:9d:48:24:98:c7:7c:b0:2f:12:98:d7:
                    1a:40:13:14:5b:b6:2c:fc:bd:2d:6c:5b:df:1e:ea:
                    9e:84:46:aa:78:fb:07:17:89:50:0c:19:fe:fe:76:
                    16:41:cb:24:43:b4:1b:e3:28:c0:98:d1:cf:ef:e7:
                    5e:57:e9:90:35:95:ae:ac:2c:0a:7b:91:22:d9:cb:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:15:59:E7:52:C0:24:28:B5:26:10:6D:A3:C7:A4:9E:CB:5C:61
            X509v3 Authority Key Identifier:
                keyid:D4:D8:6E:7D:07:3A:9E:4D:69:EC:71:5C:36:23:17:68:05:89:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NhufQc6nk1p7HFcNiMXaAWJTVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/1NhufQc6nk1p7HFcNiMXaAWJTVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:8c:bc:39:f9:45:5d:a7:3b:7c:46:6d:c5:6c:07:2f:85:
         27:f6:82:cb:c1:80:b6:93:2d:62:c9:2b:e8:a6:d8:15:1b:34:
         e8:5f:7e:68:e9:60:71:b1:da:6d:d5:36:b5:49:80:01:67:13:
         56:c7:32:e9:08:6c:e5:c3:88:2d:ac:3d:16:5b:d1:06:77:fd:
         1a:24:a3:37:93:ff:77:9e:4a:c1:56:5f:cd:0f:a8:0c:ee:c8:
         ee:db:01:5a:fd:1f:88:be:fc:3d:cd:17:de:4c:95:1c:f8:4a:
         c8:f1:43:1b:43:c8:f4:a8:66:1e:0b:73:03:37:0a:45:d4:97:
         d4:f8:81:60:5e:a2:b1:47:b5:27:25:46:51:b4:97:f6:9a:e3:
         85:45:06:22:17:82:5f:f2:fc:65:1f:ea:69:f9:07:a3:b8:45:
         21:6a:47:4d:17:2d:c3:d8:eb:2a:5c:22:3b:ee:5e:e5:8b:76:
         a9:9f:c8:85:b1:75:4b:0d:cf:e1:d0:85:7a:2a:74:7d:9f:fd:
         12:c2:88:f9:29:2b:2e:f2:c3:f4:04:e9:62:d5:f3:10:ce:48:
         15:80:92:f5:0c:0f:86:21:06:33:ba:9b:a1:4f:f1:eb:2c:0f:
         af:b9:fd:0e:b2:de:7f:c0:44:1e:e3:15:c6:e8:69:b1:6b:d4:
         42:32:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----