Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File:                     KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier:          muKDjVd4T2u8X07hCcgLZB7+w92qn3zEXO5p47TH5u4=
Subject key identifier:   86:70:54:0B:9E:7C:E7:41:96:57:E8:46:AD:C9:7B:C8:2C:5E:A7:63
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer:       /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial:       01962F750D29940890FEB905DEA8CE0EE89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number:          13C9
Signing time:             Sun 13 Apr 2025 14:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:02:02 +0000
Files and hashes:         1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: rS03JrDhOPzX0RxN9vyKPyv7zWXbopVk7ImlUhTi/TU=)
                          2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:75:0d:29:94:08:90:fe:b9:05:de:a8:ce:0e:e8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
        Validity
            Not Before: Apr 13 14:02:02 2025 GMT
            Not After : Apr 14 14:02:02 2025 GMT
        Subject: CN=8670540b9e7ce7419657e846adc97bc82c5ea763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:80:95:19:36:7f:eb:50:3f:bb:7f:d1:31:
                    8b:7f:86:2f:c7:3b:79:1e:0c:ff:09:80:6c:8c:58:
                    fc:4e:8b:03:23:d1:ec:e5:f8:6b:6e:2f:d5:88:18:
                    07:d1:b4:0f:20:7f:0e:5f:ea:6b:01:e1:c3:d9:d0:
                    d0:07:6c:ab:cc:06:a6:cb:dc:b2:fb:c4:66:f4:08:
                    45:6d:ef:4b:90:ea:8f:11:18:93:f1:2a:97:e5:3f:
                    bb:54:f8:8f:44:a8:04:41:5d:7a:58:ae:cc:a6:4e:
                    90:99:3c:c2:95:14:a8:b6:8b:ed:73:57:f1:a8:65:
                    4c:78:57:12:73:a1:7a:ac:66:3e:c8:ea:31:9a:24:
                    1c:98:d0:f5:39:59:44:e3:51:22:20:fc:83:77:ed:
                    39:04:f1:48:f4:ad:3e:bd:71:76:78:da:ed:78:61:
                    c6:86:7d:1f:74:14:0b:9d:f7:42:82:78:10:04:88:
                    23:ec:9c:ca:98:85:2e:f1:6c:f0:17:b8:7a:52:32:
                    2b:1e:5f:28:21:68:25:5b:4e:76:ef:3e:85:e2:4f:
                    da:e2:57:45:f8:bb:ff:93:af:55:9d:c7:05:80:83:
                    89:8c:e0:7b:4c:49:66:8e:69:4a:ab:df:d4:35:03:
                    3e:74:f5:3d:65:4d:d1:11:57:39:71:fc:eb:dd:70:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:70:54:0B:9E:7C:E7:41:96:57:E8:46:AD:C9:7B:C8:2C:5E:A7:63
            X509v3 Authority Key Identifier:
                keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7d:5e:22:64:22:4e:bb:a6:db:5d:b3:ce:b8:c2:34:93:8f:
         fb:25:f4:44:be:06:ea:29:b9:88:75:d3:60:41:15:68:08:ef:
         e4:89:2c:41:70:21:4b:20:5e:15:96:dc:fa:83:05:76:bb:86:
         3c:2b:ab:95:fe:88:b5:84:03:28:d2:54:b1:51:ee:0d:ed:48:
         ca:72:94:99:3a:50:db:18:9d:7b:fd:dc:51:42:84:ac:bf:e5:
         67:b0:97:2d:d6:ea:4d:34:1f:27:2a:ab:31:71:13:8c:dc:d5:
         3c:eb:80:a6:be:62:5f:7a:58:8d:2c:29:e9:31:67:9c:78:8a:
         97:00:b5:27:10:e6:f4:b9:c0:cf:42:e3:b2:d2:07:18:cb:5b:
         4e:8e:ad:46:60:38:6e:e1:4b:04:dc:c2:46:fe:c7:d3:ad:f4:
         6f:5a:20:1e:44:cc:a0:42:9a:b3:02:75:4c:a5:35:49:6f:b6:
         00:e4:84:84:dc:f5:88:38:34:0e:c0:db:47:0d:aa:f8:92:9a:
         1f:dc:fd:2b:d7:94:9a:28:6c:43:b4:5a:bc:f1:c7:f7:34:ea:
         5a:37:53:95:6f:b5:38:52:9e:ff:15:ee:02:ed:6d:de:1e:bb:
         27:01:c6:bd:81:6a:c0:c6:d7:03:1e:e1:a3:f7:06:9a:d9:e9:
         94:ef:2a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdQ0plAiQ/rkF3qjODuicMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw
MzY3OWIwHhcNMjUwNDEzMTQwMjAyWhcNMjUwNDE0MTQwMjAyWjAzMTEwLwYDVQQD
Eyg4NjcwNTQwYjllN2NlNzQxOTY1N2U4NDZhZGM5N2JjODJjNWVhNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6CAlRk2f+tQP7t/0TGLf4Yvxzt5
Hgz/CYBsjFj8TosDI9Hs5fhrbi/ViBgH0bQPIH8OX+prAeHD2dDQB2yrzAamy9yy
+8Rm9AhFbe9LkOqPERiT8SqX5T+7VPiPRKgEQV16WK7Mpk6QmTzClRSotovtc1fx
qGVMeFcSc6F6rGY+yOoxmiQcmND1OVlE41EiIPyDd+05BPFI9K0+vXF2eNrteGHG
hn0fdBQLnfdCgngQBIgj7JzKmIUu8WzwF7h6UjIrHl8oIWglW0527z6F4k/a4ldF
+Lv/k69VnccFgIOJjOB7TElmjmlKq9/UNQM+dPU9ZU3REVc5cfzr3XCwQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZwVAuefOdBllfoRq3Je8gsXqdjMB8GA1UdIwQY
MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt
YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0
LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQn1eImQi
Trum212zzrjCNJOP+yX0RL4G6im5iHXTYEEVaAjv5IksQXAhSyBeFZbc+oMFdruG
PCurlf6ItYQDKNJUsVHuDe1IynKUmTpQ2xide/3cUUKErL/lZ7CXLdbqTTQfJyqr
MXETjNzVPOuApr5iX3pYjSwp6TFnnHiKlwC1JxDm9LnAz0LjstIHGMtbTo6tRmA4
buFLBNzCRv7H0630b1ogHkTMoEKaswJ1TKU1SW+2AOSEhNz1iDg0DsDbRw2q+JKa
H9z9K9eUmihsQ7RavPHH9zTqWjdTlW+1OFKe/xXuAu1t3h67JwHGvYFqwMbXAx7h
o/cGmtnplO8qlA==
-----END CERTIFICATE-----