Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
File:                     KJDadlqZn3GYdcUe7PTH1hSKG9k.mft (raw, json)
Hash identifier:          GXIIIGvU1sLlB4jZvJhfeFlOMorTql0HYz1+twJRSy4=
Subject key identifier:   53:AD:D1:AF:C4:75:D9:17:11:CE:B4:32:E6:80:C7:B3:73:8E:4B:3E
Authority key identifier: 28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9
Certificate issuer:       /CN=2890da765a999f719875c51eecf4c7d6148a1bd9
Certificate serial:       01962E2AF6C633CA2650B728A33F3FC047D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft
Manifest number:          0C12
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: HMBy97dklkxPQBrLpsbW-ZNRc7U.roa (hash: lqft+CvpsJy14zKD+aRqKJHCgA+Rv0wI4PijqNi8qGo=)
                          2: IYTFbsH2zrYimow5PfBhyISAXgE.roa (hash: 3Ol+0d4dyS1miwyxB+aBgXHbVV5ki9Vv7rh4KQYX/5Y=)
                          3: KJDadlqZn3GYdcUe7PTH1hSKG9k.crl (hash: PbG3mY3IEoL5iP9NYhdTqGl5693lSPfRawIt5rI1Xug=)
                          4: ruoDX0K9VhdXmRyoyMx7Kq-ps0U.roa (hash: zYFHs9Pc2fRsxf2yR98ieoabL4bJzJtKnSudDrvjoY4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f6:c6:33:ca:26:50:b7:28:a3:3f:3f:c0:47:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890da765a999f719875c51eecf4c7d6148a1bd9
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=53add1afc475d91711ceb432e680c7b3738e4b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:a2:23:7b:16:4d:1e:3a:c2:80:4e:36:86:
                    3c:3c:02:8d:08:7b:02:d9:c5:df:6e:69:53:ac:f9:
                    6f:94:df:b5:36:64:c5:70:6a:1f:5c:ab:64:b2:e6:
                    88:b7:f5:ce:6d:e4:07:39:ca:5b:1e:d8:97:20:fb:
                    d6:26:d1:59:5c:9f:f3:be:73:c0:32:dc:7f:d8:8b:
                    12:21:81:89:3b:21:a2:d6:9d:33:41:af:5a:4e:55:
                    cb:ea:3e:5e:64:4f:4b:bc:05:07:4b:c2:2d:9e:9f:
                    c9:89:30:0f:ca:a6:9c:3f:57:44:de:8b:d5:42:b0:
                    9d:e5:74:dc:85:d8:9f:4f:03:03:42:04:4d:e2:b1:
                    5c:12:2d:d5:04:93:1f:e5:e1:f0:05:d7:b4:62:b0:
                    0a:a0:9b:f1:00:4f:3c:f5:ed:c9:aa:d9:5d:17:05:
                    c4:89:85:e1:2a:24:b6:18:20:b3:d1:40:a3:96:47:
                    88:85:9f:0b:94:26:60:4e:93:31:00:ff:df:4f:82:
                    c0:13:60:34:e9:f3:9a:81:5a:58:1f:44:be:e1:e8:
                    27:da:38:b5:36:21:ae:d5:65:b9:e4:c9:65:f2:c1:
                    b3:5d:43:87:c4:c7:4e:2a:35:39:d2:dc:e8:58:f0:
                    74:f6:3f:89:59:1a:b8:bd:cf:34:d7:ae:5b:e6:91:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AD:D1:AF:C4:75:D9:17:11:CE:B4:32:E6:80:C7:B3:73:8E:4B:3E
            X509v3 Authority Key Identifier:
                keyid:28:90:DA:76:5A:99:9F:71:98:75:C5:1E:EC:F4:C7:D6:14:8A:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJDadlqZn3GYdcUe7PTH1hSKG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2bbcd4-edab-48ee-a411-28fc7063d952/1/KJDadlqZn3GYdcUe7PTH1hSKG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:58:34:78:26:96:e6:42:ca:31:91:b9:90:23:9e:92:9d:
         6a:86:30:1e:c7:4d:a9:f1:3f:6e:4c:f3:52:61:f4:92:2b:7f:
         c4:5b:95:d7:ea:7c:43:9f:01:56:1f:63:4d:30:9e:73:e9:50:
         d0:fd:ae:51:25:d3:83:6e:78:88:f6:23:26:05:d1:94:ca:92:
         d7:26:23:0c:bd:c3:6e:f8:39:8b:3c:b6:9c:48:69:41:23:20:
         fb:d8:d9:6c:01:ac:ce:a8:7d:bd:6b:eb:34:3d:cd:24:77:ea:
         06:b9:f2:43:dc:73:f0:49:0b:1d:05:24:20:64:fc:7e:87:a6:
         fd:a0:40:1a:d2:55:bd:d8:50:57:67:e9:22:39:32:3b:de:62:
         1e:c2:97:89:dd:39:39:a0:28:b9:c3:48:51:a1:3e:1c:86:d9:
         b7:7a:0d:fd:54:2a:10:92:bb:5f:b1:95:f7:ed:4d:cb:03:73:
         3e:b6:64:c4:fc:08:e8:b4:0c:ea:9e:28:78:5b:49:77:56:85:
         b3:08:da:cc:83:bd:52:0f:4d:9c:5c:fd:cc:40:69:32:2c:12:
         ec:23:52:fb:ba:49:d8:62:ca:36:c0:5c:14:a8:db:88:81:27:
         7e:91:a8:75:e5:cf:6c:dc:f2:42:2e:8f:14:52:bb:8b:6c:04:
         73:77:a3:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKvbGM8omULcooz8/wEfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTBkYTc2NWE5OTlmNzE5ODc1YzUxZWVjZjRjN2Q2MTQ4
YTFiZDkwHhcNMjUwNDEzMDgwMTI5WhcNMjUwNDE0MDgwMTI5WjAzMTEwLwYDVQQD
Eyg1M2FkZDFhZmM0NzVkOTE3MTFjZWI0MzJlNjgwYzdiMzczOGU0YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ2iI3sWTR46woBONoY8PAKNCHsC
2cXfbmlTrPlvlN+1NmTFcGofXKtksuaIt/XObeQHOcpbHtiXIPvWJtFZXJ/zvnPA
Mtx/2IsSIYGJOyGi1p0zQa9aTlXL6j5eZE9LvAUHS8Itnp/JiTAPyqacP1dE3ovV
QrCd5XTchdifTwMDQgRN4rFcEi3VBJMf5eHwBde0YrAKoJvxAE889e3JqtldFwXE
iYXhKiS2GCCz0UCjlkeIhZ8LlCZgTpMxAP/fT4LAE2A06fOagVpYH0S+4egn2ji1
NiGu1WW55Mll8sGzXUOHxMdOKjU50tzoWPB09j+JWRq4vc80165b5pFPzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOt0a/EddkXEc60MuaAx7Nzjks+MB8GA1UdIwQY
MBaAFCiQ2nZamZ9xmHXFHuz0x9YUihvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEt
MjhmYzcwNjNkOTUyLzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yYmJjZDQtZWRhYi00OGVlLWE0MTEtMjhmYzcwNjNkOTUy
LzEvS0pEYWRscVpuM0dZZGNVZTdQVEgxaFNLRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNZYNHgm
luZCyjGRuZAjnpKdaoYwHsdNqfE/bkzzUmH0kit/xFuV1+p8Q58BVh9jTTCec+lQ
0P2uUSXTg254iPYjJgXRlMqS1yYjDL3Dbvg5izy2nEhpQSMg+9jZbAGszqh9vWvr
ND3NJHfqBrnyQ9xz8EkLHQUkIGT8foem/aBAGtJVvdhQV2fpIjkyO95iHsKXid05
OaAoucNIUaE+HIbZt3oN/VQqEJK7X7GV9+1NywNzPrZkxPwI6LQM6p4oeFtJd1aF
swjazIO9Ug9NnFz9zEBpMiwS7CNS+7pJ2GLKNsBcFKjbiIEnfpGodeXPbNzyQi6P
FFK7i2wEc3ejJA==
-----END CERTIFICATE-----