Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File:                     KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier:          XE9wszDWJ8w0AbTMT5VFtOHdyjpHYh/O54dR9tSHGPU=
Subject key identifier:   02:B9:D9:B3:7D:F3:77:25:1E:4B:91:A4:FC:15:8D:4B:AA:FE:63:CE
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer:       /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial:       01962ECFBC358B5BEC4DE59986D9A33F1C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
                          2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
                          3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
                          4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: OeE0GEMkHSU164EsJQw9Umiv1GzQveICz9Np/QeuZY8=)
                          5: WlNY40vGoHsISV8cxe7v-uDL1z8.roa (hash: DSI5lhy3OTW1NGDCgjE4YBOi3i582drRHl7z2eh8GT4=)
                          6: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
                          7: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
                          8: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
                          9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:bc:35:8b:5b:ec:4d:e5:99:86:d9:a3:3f:1c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=02b9d9b37df377251e4b91a4fc158d4baafe63ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:c0:16:b7:26:f9:aa:b8:6f:0f:6f:95:72:
                    7c:38:00:c4:fb:6a:1a:bf:9c:6e:a6:5d:82:32:04:
                    3a:c1:b0:cf:ce:15:e9:03:85:9d:74:d2:e4:b8:f6:
                    8b:3f:b6:0c:4a:a9:28:7b:29:5c:4d:71:af:fd:bf:
                    7f:be:f1:bf:b0:7c:f3:b8:a1:7a:a4:49:f3:b7:d1:
                    e7:bc:24:ad:90:a1:29:c5:28:db:74:69:98:23:ba:
                    97:46:4c:e6:45:d7:e1:92:19:d4:1a:ea:ba:65:a0:
                    9d:5a:ff:f9:bc:ec:42:4e:72:aa:2d:49:ce:db:32:
                    54:bb:14:6f:3f:36:59:f5:64:47:d4:73:df:22:2c:
                    95:c2:9b:ed:d6:e7:85:6d:eb:4b:15:0a:9c:b5:dd:
                    e7:49:e4:3d:0a:1a:61:0c:e7:a7:6c:0b:d7:b7:89:
                    09:60:27:98:a0:d4:7c:48:e9:2f:68:1b:4d:eb:6f:
                    21:44:4b:02:6d:42:a1:60:39:78:f6:77:92:7e:fe:
                    5f:77:d0:36:0f:04:a5:1b:54:b2:12:16:a6:2c:e1:
                    af:72:e8:f8:db:e5:ef:8a:26:85:1f:cf:1d:dd:2a:
                    81:80:6c:cc:a4:eb:0e:d2:6b:42:00:20:e6:98:ea:
                    81:7b:47:05:e1:b6:86:b9:7a:92:f3:f3:85:16:67:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:D9:B3:7D:F3:77:25:1E:4B:91:A4:FC:15:8D:4B:AA:FE:63:CE
            X509v3 Authority Key Identifier:
                keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:e5:18:2c:7f:58:44:f9:10:76:c2:5f:6d:11:6e:da:72:
         10:fc:1c:ba:38:88:97:fa:6f:5d:f3:d2:71:af:58:59:e9:a3:
         6c:e0:47:a3:48:29:d7:75:9d:85:03:8a:fc:ba:d4:0c:db:7c:
         bf:2b:88:44:6e:80:32:c3:9b:60:02:65:d0:98:68:ed:bf:c0:
         ce:ee:0e:fa:7c:28:42:e2:d0:42:20:c1:3c:03:09:5d:4f:c2:
         aa:19:d0:ea:03:83:9c:3a:2b:34:e3:f3:e3:63:04:d8:7f:1c:
         97:47:42:0e:6f:af:01:36:38:82:94:24:38:f2:10:4b:b4:af:
         ca:03:cf:25:5c:44:a4:3b:23:21:31:cd:71:c4:e3:18:ea:86:
         0b:30:0d:56:5b:ba:fd:dd:b0:1c:1f:18:3c:5a:45:f1:5e:e7:
         05:a0:22:d8:43:0a:78:3d:58:35:fa:65:e9:cd:ca:02:8a:58:
         86:35:49:52:d6:e8:23:4b:a9:e9:13:e0:69:c6:31:10:b6:81:
         3e:c9:a2:5a:46:c0:0c:72:33:fd:4d:41:5a:1e:1c:89:36:00:
         52:0d:1b:73:ca:b5:58:90:27:1c:4c:3b:7a:86:c9:d0:ff:89:
         4b:90:af:ad:88:94:ee:63:b7:a6:0e:07:04:a3:3d:d3:8d:9b:
         3f:a2:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----