Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
File:                     n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft (raw, json)
Hash identifier:          UQbXzVFzC+874ToZasJmgxmipCNinzClhG3F9UVb9Rg=
Subject key identifier:   CA:99:2E:51:77:6F:0F:6F:89:94:1B:C1:1C:25:43:2E:13:C1:C2:8D
Authority key identifier: 9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC
Certificate issuer:       /CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
Certificate serial:       01962FAB8A301EB5668D8AA97E1F75A11CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: 1J8y1mQKbllZPdpNvAX7bscmWlI.roa (hash: jhx/+OmQQVqiCuyQX4gR49r4SoPl20ExxxakSlp8D6M=)
                          2: WBEZkdOtzqubY4jYGPTdt89fcs0.roa (hash: YzzD8M9BLKgLshmZ4kyXFcT1vvqCniPNKBqVVUae9sY=)
                          3: n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl (hash: Sa8F4BV0rdAv7OsSjCQCjswygNycmlg9afdDJyXbiEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8a:30:1e:b5:66:8d:8a:a9:7e:1f:75:a1:1c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5d5b7f792644ff7072a43acc9c865194be4adc
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=ca992e51776f0f6f89941bc11c25432e13c1c28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:0e:a7:6a:42:d5:f0:56:84:f7:99:df:47:
                    5e:0e:89:27:dd:7a:05:0f:e1:76:60:ad:b7:45:86:
                    fe:ca:ab:4e:29:5e:57:d9:fc:9b:d3:c5:69:e0:09:
                    e9:bd:9f:89:33:03:a8:6b:d0:d3:3f:00:19:dd:71:
                    9e:e8:74:31:cd:f6:8f:46:2e:b9:ad:ba:bc:79:e1:
                    6e:97:06:5a:dc:9d:05:c4:d3:8b:e5:c6:62:93:06:
                    71:f1:14:46:98:03:54:a5:f6:75:a0:be:19:3c:0e:
                    70:fd:db:59:1a:c4:ff:0b:e2:e2:91:ec:46:75:5d:
                    4b:e7:af:d9:89:4a:a7:fe:3a:40:c7:f4:90:88:b4:
                    cd:5f:35:88:ca:22:e6:38:93:13:a7:77:8e:b5:59:
                    af:22:70:35:82:68:d8:62:93:78:23:93:1a:f5:7f:
                    a5:47:69:4d:36:e0:d2:45:37:b7:14:6e:12:6b:90:
                    8a:31:49:9d:a8:6a:32:bb:38:c8:40:58:a6:78:b0:
                    a5:b0:a5:9b:09:17:72:82:61:ad:0e:f3:83:b8:a0:
                    3e:92:8c:75:94:4e:94:5d:b2:25:5a:2c:7f:9e:89:
                    03:bf:dd:be:73:fd:65:6e:c0:de:a7:93:c0:d7:f7:
                    3f:d0:be:4d:73:db:dd:e2:12:0d:b0:2d:97:73:1e:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:99:2E:51:77:6F:0F:6F:89:94:1B:C1:1C:25:43:2E:13:C1:C2:8D
            X509v3 Authority Key Identifier:
                keyid:9F:5D:5B:7F:79:26:44:FF:70:72:A4:3A:CC:9C:86:51:94:BE:4A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n11bf3kmRP9wcqQ6zJyGUZS-Stw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4a7901-85d8-43ea-adb2-799910c1545f/1/n11bf3kmRP9wcqQ6zJyGUZS-Stw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:45:31:bc:ce:73:c8:f8:b3:a6:e8:30:56:01:3b:fe:36:
         be:0c:57:42:d0:51:ce:90:d2:c5:44:27:2a:c2:7d:3e:51:fb:
         7d:4c:01:32:3d:89:24:c7:6a:0b:a8:e3:ee:44:eb:1a:7f:d6:
         50:6a:40:c8:c5:41:87:a7:d1:5b:83:e6:94:be:c6:fd:d2:b0:
         26:43:83:92:42:88:a0:65:1e:32:e1:27:87:4a:5f:23:5c:91:
         0f:f7:2f:33:63:f6:62:6d:a5:3f:3c:42:66:87:41:c8:82:e7:
         64:c9:c7:f8:36:3a:ae:48:c7:22:73:ce:24:04:40:e4:7c:5a:
         92:49:18:36:01:2e:5a:d2:74:65:36:fc:25:f7:6c:d5:a5:03:
         a9:77:b1:ae:67:01:10:1e:d4:56:6d:2b:f5:9c:37:ea:24:7b:
         26:0c:8c:d8:78:60:e8:b1:00:1c:f2:e6:c7:df:15:fc:88:82:
         08:1f:5b:d9:7f:15:6c:33:15:f9:51:44:f4:4c:47:80:d8:c0:
         5f:1d:7f:53:c6:36:4e:6b:86:34:2a:24:49:85:b3:32:50:38:
         12:da:7f:01:27:65:3d:d4:d1:71:1e:9c:3a:77:cc:f9:f7:42:
         35:2d:54:9a:e9:fc:4f:e1:1c:7d:76:28:a6:bf:f4:f2:fc:fc:
         a7:94:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----