Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File:                     nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier:          BatK64qRhFFlqnvZRXIzdjmfeEMnsTPu4DfmnMOCpeI=
Subject key identifier:   86:A5:7A:EA:EB:06:36:FF:B5:FB:19:F4:78:53:99:3D:C9:7B:1E:35
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer:       /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial:       01962DF434BA1736FF10AE565453FE076ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number:          0CB4
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: 1-Vqync9hKf6VKIrN5RpK5cxJuZ4.roa (hash: MtCth/AQ0N933cYX7VqkRS/iFY3KEw9X6YIsPg3Pp/U=)
                          2: OXX9g3YRUJUzVcg_bBkk4JValdo.roa (hash: ZCgBMUHW1tIAOZ4DRx/DGMhGuGDo8XA3rdIaP/zAdak=)
                          3: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: upNDLxBcoPQH9XUctlBDiuDfl75EvN+rtkiZRMchOzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:ba:17:36:ff:10:ae:56:54:53:fe:07:6a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=86a57aeaeb0636ffb5fb19f47853993dc97b1e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:76:48:e9:d4:a0:0c:bb:8f:5f:f2:4e:b0:ca:
                    2a:02:e8:18:1d:a6:77:90:c3:2a:8f:14:7c:34:00:
                    39:f9:6b:d2:33:69:f9:39:53:07:cd:bf:6e:ff:14:
                    71:c2:91:8d:30:4d:fd:65:28:e6:6f:94:fb:8c:e3:
                    a9:cd:45:1d:6d:dc:3c:98:46:f0:f0:40:b0:5e:58:
                    a5:7a:f2:00:9f:28:4a:04:e1:94:3a:dc:f0:e4:be:
                    d0:c9:c9:84:b4:c6:f3:fa:c6:47:bc:ab:19:bf:2b:
                    7d:27:7c:f3:c3:8a:d6:8b:a3:19:cb:6c:0e:00:0b:
                    8f:71:36:3e:1c:0c:1a:98:bc:f2:d0:6f:d7:82:d7:
                    08:bf:14:e9:2e:e3:31:4a:f6:55:cd:a9:ca:61:c7:
                    ae:da:95:0a:08:13:a9:98:ba:39:c2:7b:e5:0d:c5:
                    22:00:83:41:7d:b8:17:87:58:74:84:a5:e9:31:66:
                    9e:0b:ce:6e:57:9e:de:b3:a0:2a:f1:2e:ec:a9:ed:
                    86:01:88:68:89:f4:5e:92:0d:77:b3:79:b0:85:80:
                    00:98:01:9c:18:ac:34:3a:10:88:32:35:55:d2:67:
                    a6:17:34:f0:25:68:14:4d:bc:05:2e:c7:1f:50:77:
                    5a:9d:45:3b:8b:ca:b2:b3:41:15:9a:9b:8b:1a:03:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A5:7A:EA:EB:06:36:FF:B5:FB:19:F4:78:53:99:3D:C9:7B:1E:35
            X509v3 Authority Key Identifier:
                keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:90:4b:12:63:97:c1:37:c3:fb:cf:1a:8a:c5:60:69:35:
         2a:80:bf:d2:41:ac:b8:b6:9c:ed:57:2a:9d:6b:bd:3c:06:8c:
         d2:85:88:b7:19:b7:96:58:23:55:41:4b:86:01:49:c7:52:15:
         89:7e:18:85:e5:b2:ea:c9:b1:31:69:b3:be:fa:0b:e4:12:b6:
         c1:69:ed:1e:10:ae:88:1c:17:68:e3:c0:ca:70:f8:c8:74:f5:
         49:9e:56:5b:43:3f:75:4b:06:87:0d:6c:29:4f:a6:4f:e4:24:
         f7:9e:d5:dd:8e:32:08:48:ff:34:c2:68:69:f7:ca:75:f4:a6:
         fd:83:18:27:0e:ca:33:ed:3b:16:4f:60:33:2d:13:6b:27:0f:
         62:b4:90:28:55:cc:71:bd:27:99:b5:43:85:83:ba:65:49:a5:
         c8:b3:c0:46:bf:22:4b:56:49:33:33:04:ae:38:1a:29:6a:fe:
         b4:4b:4b:ce:82:27:79:f5:3d:47:43:80:e8:6b:27:e1:2f:bb:
         8f:21:93:3b:e9:71:b2:b6:da:e1:81:70:ec:d3:6a:ad:8c:cc:
         10:7a:3d:1d:1e:0d:8c:96:89:6a:a2:bc:78:26:22:c0:2b:0f:
         21:28:9e:ef:a3:fd:7a:5a:ee:a5:48:58:e7:23:d6:02:41:3f:
         26:6e:d8:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DS6Fzb/EK5WVFP+B2rOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzZlOTFiNjJkM2RjN2MxMzdhMjhhYWEwMDZlZGU5Yjll
YTFmZTQwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg4NmE1N2FlYWViMDYzNmZmYjVmYjE5ZjQ3ODUzOTkzZGM5N2IxZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHZI6dSgDLuPX/JOsMoqAugYHaZ3
kMMqjxR8NAA5+WvSM2n5OVMHzb9u/xRxwpGNME39ZSjmb5T7jOOpzUUdbdw8mEbw
8ECwXlilevIAnyhKBOGUOtzw5L7QycmEtMbz+sZHvKsZvyt9J3zzw4rWi6MZy2wO
AAuPcTY+HAwamLzy0G/XgtcIvxTpLuMxSvZVzanKYceu2pUKCBOpmLo5wnvlDcUi
AINBfbgXh1h0hKXpMWaeC85uV57es6Aq8S7sqe2GAYhoifRekg13s3mwhYAAmAGc
GKw0OhCIMjVV0memFzTwJWgUTbwFLscfUHdanUU7i8qys0EVmpuLGgPPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaleurrBjb/tfsZ9HhTmT3Jex41MB8GA1UdIwQY
MBaAFJ026Rti09x8E3ooqqAG7em56h/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGIt
YjJjZWE3NjkwODM3LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jMjg0Y2QtYjJiNy00OTExLWIyMGItYjJjZWE3NjkwODM3
LzEvblRicEcyTFQzSHdUZWlpcW9BYnQ2Ym5xSC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6aQSxJj
l8E3w/vPGorFYGk1KoC/0kGsuLac7VcqnWu9PAaM0oWItxm3llgjVUFLhgFJx1IV
iX4YheWy6smxMWmzvvoL5BK2wWntHhCuiBwXaOPAynD4yHT1SZ5WW0M/dUsGhw1s
KU+mT+Qk957V3Y4yCEj/NMJoaffKdfSm/YMYJw7KM+07Fk9gMy0TaycPYrSQKFXM
cb0nmbVDhYO6ZUmlyLPARr8iS1ZJMzMErjgaKWr+tEtLzoInefU9R0OA6Gsn4S+7
jyGTO+lxsrba4YFw7NNqrYzMEHo9HR4NjJaJaqK8eCYiwCsPISie76P9elrupUhY
5yPWAkE/Jm7Yiw==
-----END CERTIFICATE-----