Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
File:                     KqPjBJdiCGjhestHhoLOegvRNTQ.mft (raw, json)
Hash identifier:          8hJ+TRtacsAqklzUVLUK7KcfcK9UtoSgMxz3fkcC1cg=
Subject key identifier:   18:9A:98:95:18:3E:D7:B0:46:34:D1:C0:5B:82:2F:68:B8:85:2D:4A
Authority key identifier: 2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34
Certificate issuer:       /CN=2aa3e30497620868e17acb478682ce7a0bd13534
Certificate serial:       01962F06C8AABEF382D093CC143B695854AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: KqPjBJdiCGjhestHhoLOegvRNTQ.crl (hash: hsgxK6u5eoYOvovoL+AnT3er0ouXQ1sMzL9444pdBzo=)
                          2: _F5YjzIp4N7IiS5lXnJMJsPMLEU.roa (hash: HX+68oJeKBQGUaK3TL3s9cs53fsCINCeh8CnxLw+JsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:aa:be:f3:82:d0:93:cc:14:3b:69:58:54:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa3e30497620868e17acb478682ce7a0bd13534
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=189a9895183ed7b04634d1c05b822f68b8852d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:33:f6:83:28:64:42:25:d5:c0:b4:00:7d:
                    e4:61:ff:4e:d3:d8:39:d9:ef:c9:9c:2e:fc:1b:14:
                    33:53:bc:9c:d2:a1:ad:65:38:f5:7b:81:fa:08:1e:
                    78:67:99:6f:0a:1d:6e:8a:50:d7:18:05:0a:0a:74:
                    0a:6c:6a:03:d6:30:cb:cd:b4:f7:d6:a0:46:1c:9a:
                    65:66:45:a2:04:24:1c:77:ad:91:37:92:7a:87:69:
                    90:6d:7c:17:fe:07:c8:1b:4b:a4:ef:b6:f2:e6:2b:
                    fa:62:6d:c3:6c:7c:a7:13:00:84:0f:1d:14:44:b5:
                    73:c8:01:e3:ab:6b:86:b9:8b:1e:27:df:8c:93:12:
                    30:1e:61:91:26:c9:37:74:4b:07:0e:d8:98:cd:f1:
                    e4:ed:a9:62:72:08:c8:44:42:c5:d7:12:39:1c:a3:
                    b1:c7:ca:2e:7d:83:1b:0e:27:52:21:4e:24:c4:8e:
                    3b:a1:08:73:4d:b0:1f:b3:ce:f9:ee:0b:3c:a1:c5:
                    62:38:de:61:57:dc:4b:ce:26:e9:4c:d4:c0:85:47:
                    9c:f0:09:bd:a8:4e:91:4f:59:23:05:59:63:34:26:
                    1a:89:94:cd:2b:d4:f6:97:bd:76:04:ad:7a:09:7d:
                    01:be:45:17:0e:65:4a:c2:14:81:2d:1f:e6:8e:1c:
                    86:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9A:98:95:18:3E:D7:B0:46:34:D1:C0:5B:82:2F:68:B8:85:2D:4A
            X509v3 Authority Key Identifier:
                keyid:2A:A3:E3:04:97:62:08:68:E1:7A:CB:47:86:82:CE:7A:0B:D1:35:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPjBJdiCGjhestHhoLOegvRNTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/987b3c-f345-4112-9240-a4c0aba9bbeb/1/KqPjBJdiCGjhestHhoLOegvRNTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:0a:8f:ae:36:8b:a9:d9:bb:f5:17:a9:6f:56:9d:05:88:
         13:fc:43:d8:2c:eb:b3:bd:c7:bb:78:1a:6e:e4:7e:d1:4f:da:
         4a:60:81:3d:81:ee:39:77:ce:5f:a2:81:58:0f:7f:4e:60:15:
         36:78:84:50:69:cf:a2:2b:2d:a7:0e:ec:fa:f8:c6:c7:41:8c:
         34:6c:66:87:7b:b4:e8:fb:79:99:bd:e2:e2:45:58:b9:db:a0:
         a2:0c:94:ad:06:e0:1c:aa:cf:58:30:42:5b:cb:e0:50:d4:03:
         eb:d2:da:81:fe:50:dd:fe:14:21:09:44:10:04:7b:29:b7:40:
         95:3e:b5:5b:84:f5:94:8c:db:b5:9f:c9:12:4f:23:32:bb:0a:
         c2:ec:22:12:ae:ed:47:b0:ff:8c:3c:90:be:39:98:1c:93:88:
         cc:18:d8:ca:e5:43:4d:1d:8b:bc:20:f9:63:b5:b0:da:0a:d7:
         0f:82:a5:3e:1c:3d:49:95:ef:18:97:d6:9f:df:00:1c:4e:77:
         b6:68:da:d8:c2:ff:5a:4f:43:1e:96:31:40:60:b1:53:ba:5d:
         2c:f6:7a:ab:2a:9f:3d:c0:a4:d0:f4:30:b1:6d:2a:73:3d:47:
         74:fe:fe:ea:54:68:d7:73:b4:54:07:05:b1:d2:59:78:d0:4c:
         da:1a:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----