Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft
File:                     KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft (raw, json)
Hash identifier:          nXWxvF4gXcCxQ0lZ1TVeLLRcIiZPDZ5TWfVKkDfRGGo=
Subject key identifier:   0D:CD:68:62:E6:7F:BA:E1:57:DD:10:DB:79:D8:C4:6D:36:C8:E3:D7
Authority key identifier: 2A:21:B1:AB:E7:87:E2:54:64:39:1F:AD:61:D0:0E:3F:37:6B:98:CF
Certificate issuer:       /CN=2a21b1abe787e25464391fad61d00e3f376b98cf
Certificate serial:       01962E991581F94B1BEE478F3E5C3D1D768F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft
Manifest number:          0A05
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: HDOhzz0jBa_Gp9AJUMy27D9Cjlg.roa (hash: lm71x5ibbc8ZUL32IG9cJWwnD/vjqa8xr80jq2AaleE=)
                          2: KiGxq-eH4lRkOR-tYdAOPzdrmM8.crl (hash: 58Ue/ktnc1rF6c7Ydz+6ixOpiCOVJLPC8Cjhwc4EEOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:15:81:f9:4b:1b:ee:47:8f:3e:5c:3d:1d:76:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a21b1abe787e25464391fad61d00e3f376b98cf
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=0dcd6862e67fbae157dd10db79d8c46d36c8e3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:02:28:13:ab:36:3d:b9:74:e9:93:ac:77:
                    4b:38:a8:5a:0f:6f:8e:e9:2a:53:7f:0c:81:4f:2f:
                    d9:e7:86:24:fa:69:17:54:21:8d:44:4b:c8:17:fb:
                    cd:9d:85:ab:18:83:64:93:77:2b:c6:81:87:51:fd:
                    07:78:95:b1:84:91:e5:73:87:ae:b5:c9:72:55:43:
                    3d:e6:fb:a6:4a:29:7b:3e:6f:50:f0:e1:33:4f:b5:
                    10:a2:6c:8c:05:c3:b9:2c:b5:c2:e6:19:11:4a:24:
                    35:b5:9b:98:b2:b4:04:b2:90:78:f3:65:3c:c5:d3:
                    97:ba:83:fe:38:e7:e0:b9:eb:44:fa:9d:e4:d5:b6:
                    fd:e3:ac:47:4f:6e:d5:b9:71:4b:5e:2f:fc:a8:2f:
                    2f:a2:fb:4d:aa:7e:a3:59:ef:bf:f6:36:af:8e:d9:
                    73:d8:09:7e:f5:6b:db:1c:15:0f:29:e9:ed:c0:ba:
                    d0:9d:f3:d6:6c:74:92:6e:1e:b6:82:1e:fe:51:8a:
                    9d:61:21:7a:3f:74:c5:b6:e5:8a:99:1c:64:e6:d0:
                    83:87:eb:7e:6a:97:3b:36:2d:6c:c0:dc:43:be:50:
                    c4:57:16:89:de:6e:b1:91:0f:64:82:73:9a:a5:c1:
                    69:f7:cc:30:b2:64:61:99:01:d7:bd:0d:48:ca:c1:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:68:62:E6:7F:BA:E1:57:DD:10:DB:79:D8:C4:6D:36:C8:E3:D7
            X509v3 Authority Key Identifier:
                keyid:2A:21:B1:AB:E7:87:E2:54:64:39:1F:AD:61:D0:0E:3F:37:6B:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiGxq-eH4lRkOR-tYdAOPzdrmM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ed0654-724c-4e90-81ff-99f5cb7a3ca5/1/KiGxq-eH4lRkOR-tYdAOPzdrmM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:09:b1:61:6d:28:80:d4:1f:81:73:ad:56:f3:51:07:a0:
         11:26:23:ca:3e:dd:74:d1:51:7a:e8:cb:8a:44:7b:80:3f:76:
         04:af:be:a4:d1:9e:0f:23:c0:39:77:46:c1:a9:36:b3:e6:d5:
         5c:9f:16:da:48:00:c7:b8:55:72:b6:cc:5b:42:39:56:14:ef:
         50:d8:4d:80:d8:9d:44:ea:91:84:27:1c:79:41:8b:c3:c9:06:
         5d:89:d2:3e:21:95:67:87:e0:17:80:5b:47:c6:d0:3a:e3:50:
         1c:91:d9:a1:0c:07:fe:2c:e4:91:c2:20:a6:c6:2e:98:24:05:
         99:f7:8e:f1:a4:32:44:e9:ec:d9:70:50:f4:98:82:c0:14:89:
         42:11:08:c2:52:b6:af:30:21:df:b5:30:51:fb:05:36:24:a8:
         d7:68:6a:c9:ed:f7:46:f5:93:ae:46:ee:d2:a7:11:5e:66:26:
         1d:fb:74:01:c2:3a:c4:2b:c5:27:b6:60:91:fd:23:b8:5e:de:
         4d:64:e3:26:fb:c1:e8:db:bc:ef:f7:74:0d:b3:0d:9b:06:7a:
         56:bb:86:38:29:d8:8a:8a:34:d8:80:e7:75:fc:d8:20:00:d1:
         38:6b:07:a4:f7:84:69:6a:cd:0e:7d:81:ed:ee:63:16:17:f3:
         7e:55:4b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----