Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File:                     kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier:          S0rpw0zZWCf602uVrT7doLwVMLxqFNJu/wJO5UJFJ0g=
Subject key identifier:   62:48:8F:FA:B1:AF:C5:32:B0:CB:F4:98:45:94:58:33:92:A1:CF:B2
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer:       /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial:       01962DF43747001AB7B78389681807DCDE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number:          08E9
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: K697tZMNQjBnIyMRoRja7qv23Udpt4k3tqxpewysIsY=)
                          2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:37:47:00:1a:b7:b7:83:89:68:18:07:dc:de:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=62488ffab1afc532b0cbf4984594583392a1cfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4e:0b:bb:53:0a:41:b8:58:70:5d:53:35:38:
                    a0:75:8c:0b:2f:62:e1:47:78:1e:34:fd:0a:6c:d6:
                    7b:d6:4a:f8:d8:10:3f:68:eb:82:91:77:02:e5:55:
                    e6:cd:36:50:e9:1c:6f:ca:37:3b:e2:6d:ad:b8:07:
                    81:64:c4:2f:e9:e2:8e:ed:5f:d8:e9:9f:66:5c:b7:
                    49:c5:98:b7:0b:ef:79:5a:83:4c:82:b6:ca:86:8a:
                    3c:ec:f4:0a:e8:6e:a2:b4:01:df:ef:65:71:d8:01:
                    3b:77:5f:c3:c3:4c:b1:be:eb:ff:d9:f2:45:58:ac:
                    4c:0b:cd:23:6f:bc:dc:8b:62:f5:db:75:f1:7c:f2:
                    22:aa:9a:db:8e:7c:5c:f3:ca:56:60:20:7a:4f:8b:
                    e9:69:89:c6:aa:0a:7d:d1:15:ce:ba:18:d7:79:5c:
                    1b:1d:f3:75:d8:a5:f9:7f:61:8a:fa:a3:7c:ed:cf:
                    6e:8c:33:6a:33:2d:eb:59:4e:ff:f8:95:bb:1e:f7:
                    90:64:d0:29:ee:64:16:81:75:9a:34:5f:65:83:84:
                    99:b2:75:f7:63:84:fa:4e:55:32:d7:e3:fe:bc:71:
                    30:d8:85:4f:fd:87:f0:71:9b:15:9d:1a:12:3b:83:
                    c7:60:7f:da:f1:cb:4f:aa:1c:b9:f4:f1:f3:32:cb:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:8F:FA:B1:AF:C5:32:B0:CB:F4:98:45:94:58:33:92:A1:CF:B2
            X509v3 Authority Key Identifier:
                keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:e4:80:71:27:23:ef:c3:33:50:14:2c:fa:fa:49:fc:8c:
         fa:00:c2:24:65:99:56:41:b5:d6:4c:a1:19:b7:84:39:1c:40:
         e6:6e:a2:d0:f9:19:8e:fa:a4:5e:05:1d:bc:bc:89:f1:fb:56:
         0c:7a:7a:1f:22:82:40:78:2d:2a:2c:3e:b5:19:28:66:79:9b:
         54:36:9c:d4:79:c0:ca:9b:f0:99:b3:7e:b7:1d:fd:eb:4b:75:
         3b:c6:15:06:ea:d9:bc:f9:af:a0:9f:da:ba:30:3a:8c:44:83:
         76:46:e2:79:51:ab:ce:d7:fe:ae:91:cd:2b:3f:4c:e6:ba:66:
         44:d4:6d:50:d0:7d:fa:61:a1:1b:fc:07:44:ca:20:07:27:0c:
         8c:91:b5:7a:c9:8d:f0:69:03:ef:32:7f:17:53:1a:c2:af:70:
         cc:ea:44:b8:be:f3:d5:34:e3:67:38:8c:38:32:1e:3d:b4:7e:
         f4:0a:22:c1:1f:e4:e4:ea:ed:58:ff:c8:13:f2:80:fe:bd:a1:
         08:cb:ff:69:76:59:2c:30:1e:de:27:2c:85:68:3a:4f:29:f5:
         99:00:af:45:86:3c:e9:b9:79:59:f8:51:aa:1c:cc:04:3f:72:
         e2:ea:15:84:e4:28:d9:17:cb:53:2a:ad:e8:05:22:e8:5b:f1:
         7b:af:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----