Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft
File:                     KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft (raw, json)
Hash identifier:          ybW53kXiKdcNPF8BMq2dWKW731mfsQy2CLlUZte5Vmk=
Subject key identifier:   BF:01:42:47:97:CC:CE:5A:97:AC:56:EC:2D:AC:F2:28:BC:CB:2A:64
Authority key identifier: 28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF
Certificate issuer:       /CN=283624007f44dcaf568c370e7f71f950cb1940ef
Certificate serial:       01962F064BA5E37A283B4F8C5460C893F5AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft
Manifest number:          0665
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: 8nNgOGtBQWNTilGRrMmNlFZZwGM.roa (hash: mOJcQQ3vA0VCC5mkB6hJglG7LUq/Vu6wljMQaBgi+dM=)
                          2: KDYkAH9E3K9WjDcOf3H5UMsZQO8.crl (hash: IIu9jFFdeNXc1Xh83QAY6aeyCkBV+scLpSeswqBJ/8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:a5:e3:7a:28:3b:4f:8c:54:60:c8:93:f5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283624007f44dcaf568c370e7f71f950cb1940ef
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=bf01424797ccce5a97ac56ec2dacf228bccb2a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:56:85:43:43:8f:6e:da:88:9a:fd:53:a7:
                    20:cb:70:4d:be:34:56:fb:33:56:1c:12:01:16:b7:
                    93:4b:11:ed:8d:a3:62:e3:1e:f0:b3:04:68:92:d5:
                    ef:0f:62:46:a5:62:6b:53:d9:05:5c:e2:2d:94:95:
                    18:3e:ad:f2:56:ed:59:3c:8d:e6:b7:ad:93:59:1f:
                    ab:b9:28:96:b6:f4:06:26:1d:52:c1:87:c7:8b:18:
                    7f:f0:ba:35:d1:e8:8f:52:b6:86:c7:35:53:cf:f0:
                    19:7e:43:cb:d2:11:b9:da:1f:7e:4d:0b:7f:65:5d:
                    67:68:2e:00:5f:48:e6:41:57:2a:ed:1e:d7:44:72:
                    27:8e:0e:4b:70:86:ce:cd:c9:d3:64:6a:fe:a1:2a:
                    85:61:8b:aa:f0:e0:f0:3e:76:07:f3:64:c5:5a:db:
                    5c:cc:f1:17:b6:91:29:33:9a:f4:72:bc:11:5e:ed:
                    17:e0:d4:70:22:d5:3d:a7:1b:48:c1:c4:8a:c6:7d:
                    51:17:f4:ce:5a:c4:68:d6:57:d4:8e:a3:83:d8:86:
                    de:00:84:3f:22:b2:c4:1c:d2:5e:6b:32:1c:02:04:
                    2d:85:99:a2:49:22:e6:68:e5:1d:db:5d:e0:de:6d:
                    7f:20:c9:d6:f3:6b:03:dc:67:4e:16:ed:bb:ab:fc:
                    08:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:01:42:47:97:CC:CE:5A:97:AC:56:EC:2D:AC:F2:28:BC:CB:2A:64
            X509v3 Authority Key Identifier:
                keyid:28:36:24:00:7F:44:DC:AF:56:8C:37:0E:7F:71:F9:50:CB:19:40:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDYkAH9E3K9WjDcOf3H5UMsZQO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60c724-a005-46d7-8452-16ce339016a0/1/KDYkAH9E3K9WjDcOf3H5UMsZQO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:76:50:91:82:81:04:9c:38:b7:9b:d2:f6:61:ef:f3:10:e7:
         4a:9e:18:e1:de:b4:b2:33:96:14:4c:13:64:34:50:fd:42:2e:
         bc:20:33:97:81:92:f8:cd:35:1f:b5:93:4b:39:a8:68:7b:69:
         a0:79:f3:a1:d7:31:87:e2:4f:ed:47:fa:42:e2:82:72:c4:57:
         d8:3a:1b:6a:19:bf:4d:74:06:91:bf:c7:c1:11:f1:6a:2e:9e:
         c7:a8:cd:00:8c:f0:2e:db:73:96:d8:3c:df:a5:7a:44:9f:f4:
         ff:00:b0:fe:91:7e:8f:3d:f6:cb:12:6d:69:0e:ac:1a:d7:8e:
         68:8e:73:b3:5c:f5:ef:a9:3a:ce:f1:2b:d0:ad:32:26:f8:dc:
         52:62:03:ac:18:aa:26:7c:cd:63:c1:04:53:b1:e8:05:09:5d:
         c6:1e:34:9e:bb:2d:d6:d1:ea:50:41:97:d1:c3:0d:c8:42:5c:
         8d:2d:f7:49:33:f5:94:b3:a9:f5:92:f3:a0:af:92:09:fc:4a:
         04:b2:27:29:56:08:2c:f8:16:39:b2:59:67:18:f4:0c:00:ae:
         55:f4:24:62:87:93:6a:9e:26:99:e8:47:36:bc:ad:88:15:91:
         f9:ed:d1:4d:83:d3:8d:e8:86:82:fa:44:68:64:32:cd:ce:8a:
         bd:e9:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----