Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File:                     nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier:          nwS36AQ9dTZrBjhbvEh1vNttLEbqnVepxgSTELmCYl4=
Subject key identifier:   38:87:97:1E:AA:67:26:4C:EA:BE:88:55:7C:56:E0:6C:3F:B3:14:21
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer:       /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial:       01962E987BB93C625D8B3386592D608211A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number:          04DD
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
                          2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: FJRZmfbDm9C7B/nQB95ycFKJGgHNAtXlrsybmIZdjX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7b:b9:3c:62:5d:8b:33:86:59:2d:60:82:11:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=3887971eaa67264ceabe88557c56e06c3fb31421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:65:04:51:c6:d1:e3:c8:bd:a0:9c:fa:e3:
                    f5:b3:b5:11:1c:e4:bb:24:2e:9c:93:c4:83:44:9d:
                    5e:09:96:d2:1c:e1:1f:e6:3d:9a:b7:f8:32:e9:53:
                    a7:b3:39:d2:07:34:bc:0e:b4:3b:d1:29:09:eb:55:
                    be:7a:26:7c:b3:9b:38:34:24:f5:30:d6:05:4f:9e:
                    92:5e:23:2e:56:94:44:1b:7f:c5:d3:f3:08:86:ee:
                    63:f9:56:ae:a5:38:bd:d9:0f:00:d8:44:8a:0e:5a:
                    3f:f4:61:d8:18:34:60:a2:a3:f6:0f:a8:cb:01:92:
                    7b:57:1c:1f:f7:44:65:bd:4a:cb:0d:a5:61:a8:31:
                    a0:a7:55:23:00:06:75:c7:d9:9e:1f:a2:f7:a6:26:
                    e4:ac:23:89:6b:53:94:25:e4:f5:38:fa:fa:52:a1:
                    29:c1:de:eb:1e:bb:7f:b6:2e:09:0a:ff:6e:99:a4:
                    30:9e:98:1e:ed:15:33:25:0f:6e:2f:09:ef:57:d1:
                    1b:30:4d:11:2f:2a:35:2d:d7:2e:7b:49:07:84:bb:
                    53:ab:c6:00:78:d0:a2:a3:f6:d7:15:aa:85:97:01:
                    24:19:55:d9:ad:02:f9:da:84:3c:ea:c4:0c:70:65:
                    c3:77:95:8c:02:fd:c5:50:e1:26:fd:40:10:af:0f:
                    20:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:87:97:1E:AA:67:26:4C:EA:BE:88:55:7C:56:E0:6C:3F:B3:14:21
            X509v3 Authority Key Identifier:
                keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:71:83:5a:d2:d0:ca:88:f7:c4:39:61:59:d6:0e:d7:0a:62:
         41:8a:40:36:cd:92:7a:88:13:13:fe:c0:7c:15:63:68:03:33:
         56:4d:98:a0:63:c6:b2:4a:38:38:e0:cc:ae:a1:c7:e2:61:05:
         cf:76:8a:1c:f9:16:bc:c9:51:39:65:96:ea:21:a3:39:a4:12:
         b6:a9:3d:30:b5:77:cb:ea:da:43:ad:8c:4b:7a:2f:7b:e6:85:
         74:68:ef:bc:fc:83:6e:9c:ec:1e:83:f3:2c:e0:3e:95:73:ca:
         78:43:b9:62:47:7b:b7:61:cd:b5:22:1a:f1:19:af:54:b7:b5:
         5f:64:51:91:26:2d:c3:d0:b5:79:a2:0e:cf:36:9e:1a:d9:68:
         af:d7:96:fb:37:49:f0:d2:fc:cf:f8:03:a7:51:f0:26:31:67:
         df:13:0c:83:7b:c2:87:8b:4e:c9:8c:93:6d:50:22:e2:c6:57:
         fe:fe:19:94:f5:90:97:77:5e:e5:66:52:6f:95:03:12:5b:4e:
         d9:22:76:79:93:05:79:fc:ce:d6:bc:16:c0:da:0f:bf:b1:61:
         cd:18:dc:46:9b:59:b0:aa:db:04:cb:61:40:63:75:a5:09:25:
         6f:90:cb:12:68:2e:1f:52:57:b9:83:be:2f:2f:3b:79:50:e1:
         b1:82:79:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----