Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File:                     KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier:          Ts1CrbWMuw88QPMKoCQyG1PkbkzzxfE/a1rl0fTKUbQ=
Subject key identifier:   2D:34:6B:FC:B9:25:D6:F5:84:A4:FB:79:58:D6:57:73:E3:1A:0A:6A
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer:       /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial:       01962E619E6A027736F0AF89B2A261914423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number:          1355
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
                          2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
                          3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
                          4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
                          5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: e62N1tpen3nCGo2K66eymtL4LyKFAmQAIVpLScclPwE=)
                          6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
                          7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
                          8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9e:6a:02:77:36:f0:af:89:b2:a2:61:91:44:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=2d346bfcb925d6f584a4fb7958d65773e31a0a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:43:37:c3:81:77:65:a2:ce:60:c4:c4:0d:
                    f5:53:5c:00:dc:8d:d2:98:a1:35:09:38:29:a5:d3:
                    50:50:fc:42:5b:fd:6d:25:a0:51:41:52:43:1d:bd:
                    b6:11:7b:30:ab:33:69:44:05:dd:2d:c9:72:e0:93:
                    2d:ee:c7:99:d5:ea:32:51:fe:47:2f:58:dd:74:7e:
                    1a:f4:d7:4b:68:2a:cd:0f:99:14:6c:cd:7e:13:bb:
                    48:fa:d4:67:7d:9a:9f:62:ea:96:0c:f5:ed:a9:5e:
                    c5:0c:4a:ee:e7:fd:a1:c1:22:35:a9:ed:2e:39:da:
                    08:8e:70:e7:82:d7:04:fc:34:bb:53:8d:8e:e0:7d:
                    b9:f1:3c:13:7c:47:9d:95:d1:a2:2c:12:02:8b:ef:
                    45:79:76:3f:c1:cd:0a:09:dd:29:77:5a:dc:e4:ed:
                    79:19:2a:80:73:69:0c:f2:cf:5c:de:35:9d:78:cb:
                    e1:24:6a:7c:07:c6:92:32:6f:f9:d2:25:d9:5e:a5:
                    67:b4:35:cc:83:30:df:84:74:a2:1c:9c:67:f8:69:
                    5b:94:7f:4f:87:e7:9a:5a:0a:d4:73:57:52:7e:93:
                    e7:35:0a:58:a1:50:23:75:04:f4:fb:94:3c:89:93:
                    d0:9f:51:f3:cd:06:d5:d9:00:32:44:63:61:a4:60:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:6B:FC:B9:25:D6:F5:84:A4:FB:79:58:D6:57:73:E3:1A:0A:6A
            X509v3 Authority Key Identifier:
                keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ac:30:07:78:39:a0:e5:26:d6:94:fc:78:44:0d:c1:3c:4f:
         47:9e:1a:c8:97:ed:66:00:40:4a:02:b8:97:3b:07:06:2e:cb:
         40:b2:9a:23:cc:63:a7:a6:e9:d0:92:83:07:6d:f9:93:2f:44:
         47:93:8a:d6:bf:7c:cf:3a:a8:c7:f5:3c:9d:f3:40:1a:11:af:
         b6:ad:4d:cf:50:f7:ca:89:26:31:46:d7:ce:1c:35:a6:c8:18:
         7c:50:6a:1d:d6:85:0f:c3:53:c8:03:d8:2c:f8:7a:36:70:d0:
         8b:21:c5:a4:b5:b3:48:13:4c:c9:8d:4d:8c:15:17:22:ba:7f:
         b7:63:2f:54:ec:37:e4:87:85:7d:74:9d:60:b2:fd:94:13:af:
         5c:59:27:3a:30:ea:cf:db:1c:d0:ae:c0:7e:ea:4c:d8:77:c1:
         8d:f0:93:af:f1:fd:b9:56:91:55:ad:98:d9:84:e4:f0:6d:ee:
         ae:d2:04:43:3d:c4:fb:96:df:46:1c:25:7a:83:3e:76:d0:03:
         a0:39:b8:80:40:90:36:ff:71:79:b2:ad:63:78:45:b2:2d:18:
         90:a5:23:79:13:3b:5b:35:8e:67:5c:46:c5:cd:d8:aa:2c:7d:
         6f:22:a2:b3:f4:45:b8:db:c6:57:95:bd:d3:a4:c2:04:0e:bd:
         25:2e:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----