Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File:                     KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier:          +sJkuMeCrPLtIcwnxqXvjq34dM2BfDINfQe+M6qb04c=
Subject key identifier:   33:C7:2F:E7:0E:1D:7F:A5:4B:51:03:14:29:05:46:00:F2:DB:A2:10
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer:       /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial:       01962F7483B3FBA0EDB3701AF9410AD90430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number:          0F34
Signing time:             Sun 13 Apr 2025 14:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:27 +0000
Files and hashes:         1: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: Fy8c0v1wkL0Y+prv8A8g96rgLCVPi3fHVuzIM5KvYKs=)
                          2: rYNJq30hG9TfQKEAUAnbb-JlarU.roa (hash: bobhiWtsSX2sPVTtreNAJF6ae9i50YxHtcGAHPsK84U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:83:b3:fb:a0:ed:b3:70:1a:f9:41:0a:d9:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
        Validity
            Not Before: Apr 13 14:01:27 2025 GMT
            Not After : Apr 14 14:01:27 2025 GMT
        Subject: CN=33c72fe70e1d7fa54b51031429054600f2dba210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:84:e4:81:06:3f:b3:bb:18:49:bf:e5:a9:
                    2e:25:fe:aa:1a:29:00:c8:cf:11:30:e9:80:92:69:
                    61:35:88:b2:20:54:ba:c5:d9:f4:4b:3b:32:dd:72:
                    99:ac:89:df:af:96:fb:48:bc:91:68:d4:08:f7:b0:
                    85:51:86:79:9b:2d:06:50:e3:fa:49:ad:78:62:b4:
                    b7:ab:81:49:4f:cc:13:04:c7:96:c9:5a:e9:45:24:
                    13:5e:5e:b2:91:fd:c3:07:cc:9d:a7:ca:ec:11:05:
                    e7:5f:6a:fe:af:33:65:75:8b:ae:14:c7:ab:77:06:
                    43:35:5d:21:9f:d2:fe:c5:a9:cb:f0:62:08:da:8d:
                    9a:a2:80:a3:0d:32:0f:2c:84:da:3f:85:ab:49:b1:
                    4d:8a:36:1e:c0:bf:d7:c8:7c:b1:b1:a1:e0:10:6c:
                    1e:96:4f:b5:47:9f:56:a4:4b:bb:9b:44:3c:50:27:
                    25:41:6e:cf:db:b7:cb:c3:55:3f:59:d2:09:a6:03:
                    4b:9c:6a:24:b7:06:af:51:54:78:8b:f6:69:e3:a1:
                    24:b1:a2:91:2d:62:cd:75:f1:17:d5:13:d6:06:30:
                    22:df:8a:7f:19:aa:90:83:ef:c9:13:2e:6b:32:26:
                    d8:8c:9c:e6:87:84:5d:41:68:57:f8:7f:c7:79:1f:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:2F:E7:0E:1D:7F:A5:4B:51:03:14:29:05:46:00:F2:DB:A2:10
            X509v3 Authority Key Identifier:
                keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:75:75:57:a6:9d:6e:50:f5:42:45:72:ab:82:f5:fa:14:38:
         42:d4:11:d9:5d:e2:b6:48:7b:e9:1f:46:c5:65:0b:d9:1e:32:
         93:9f:39:21:ca:c1:a8:e6:25:10:8c:c6:75:58:8b:0f:2a:79:
         90:f3:ce:09:35:e4:91:c4:4f:e7:99:22:92:f3:c7:a1:44:71:
         a2:82:9f:66:f8:e9:3d:3b:bf:e8:22:d8:36:16:9d:c1:47:7f:
         d0:66:91:e8:83:c5:1f:4a:f3:17:1d:bd:65:5d:c3:9a:89:e4:
         6d:48:41:d8:9d:08:a1:9d:4b:04:d9:be:7a:5b:0c:ce:f5:c6:
         19:d9:7f:e7:ec:54:60:db:c7:bc:44:18:25:7e:db:f6:bc:07:
         ae:4e:b7:fb:af:00:70:0b:6d:11:fa:57:b9:6d:0a:e4:60:70:
         7d:0d:d0:45:13:c7:96:d6:bf:ba:28:dc:83:cd:3c:c6:62:99:
         59:1e:7b:1a:5c:6c:11:27:9e:18:74:32:87:2f:dc:0e:9e:73:
         5c:bf:8c:5a:06:45:eb:e3:c6:fc:f4:75:d5:b2:29:9d:b9:d0:
         90:6f:23:07:96:62:48:9f:92:b8:65:b5:2d:76:d2:7d:30:33:
         bc:94:56:eb:82:34:7b:c0:05:80:78:08:41:1c:12:09:38:d2:
         aa:1c:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----