Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File:                     ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier:          DSDFb4B+9rVyNGISXMzWefDEX4XbzQ+1cNbqx/PVZGM=
Subject key identifier:   03:97:FA:8A:AA:39:B9:34:24:99:0C:E3:4E:D7:3D:2E:57:D8:2C:D1
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer:       /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial:       01962E9862098CB4EB9C8E2922F76FA538BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number:          04A7
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
                          2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: D137E6GWxJ+8V1pbKNshTE6tKKZA9luyClOAOs9yW7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:62:09:8c:b4:eb:9c:8e:29:22:f7:6f:a5:38:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=0397fa8aaa39b93424990ce34ed73d2e57d82cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:cb:07:5e:72:b9:44:0f:21:e7:4b:1e:dc:
                    9f:1d:7e:da:3a:ba:ec:2d:ec:ec:23:af:83:c9:1a:
                    3c:e1:6e:8a:ea:c9:3f:62:61:e1:89:c9:b2:1b:fa:
                    43:82:b0:45:8f:0c:70:c3:a3:14:f3:6f:2d:40:11:
                    5f:6c:24:b1:0d:34:d8:ac:1c:3f:ee:dc:9d:ef:0e:
                    42:6c:64:0d:93:b2:a3:50:d1:6a:88:3e:09:03:e5:
                    d9:7b:37:2a:36:53:11:ce:22:19:81:3c:10:be:3b:
                    6b:11:59:2c:f0:ce:7c:5d:c2:78:fc:50:e6:1c:07:
                    14:70:d2:f8:85:da:75:87:15:3c:91:31:c5:6a:1b:
                    bf:66:d0:52:0b:22:69:d7:73:24:27:24:a2:41:e6:
                    ef:e6:58:9b:32:e1:85:19:49:93:0b:2a:79:93:e9:
                    41:08:da:6b:02:a2:e2:f0:e5:14:27:cf:f3:09:b7:
                    e5:d9:3e:7e:d1:88:16:9c:11:75:4e:3a:74:cb:ba:
                    40:02:ee:ca:f2:d4:02:ef:5b:df:06:80:49:1f:53:
                    a2:97:5d:1d:f0:b1:64:0c:4e:83:fc:f1:d1:cc:ce:
                    c4:60:d7:2a:84:ca:19:20:47:2b:14:e8:a7:0c:05:
                    5a:45:23:06:2b:d3:50:d7:ea:b3:82:d1:35:fe:04:
                    a1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:FA:8A:AA:39:B9:34:24:99:0C:E3:4E:D7:3D:2E:57:D8:2C:D1
            X509v3 Authority Key Identifier:
                keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:99:81:c5:07:88:b2:f6:52:e7:7c:02:58:1b:af:1d:22:
         bd:4a:5a:d9:fd:82:2e:da:c2:0b:f7:f5:f0:07:45:91:13:4a:
         1d:52:df:67:ea:bb:9b:06:84:40:50:cb:63:f4:a4:e9:de:a4:
         74:c4:3a:89:5e:6a:6b:d0:ed:10:75:59:e0:c4:d6:14:82:11:
         a9:8b:cf:29:82:45:d2:0b:75:87:13:ad:90:a6:bb:cf:e9:81:
         d7:ef:80:37:59:49:ea:9c:3f:ce:f4:91:9e:c7:85:83:cb:ca:
         5d:c7:90:4a:de:13:3a:84:e4:e0:c7:a1:00:85:00:3a:4b:f1:
         b4:e6:d7:13:30:9d:72:78:17:41:91:9a:72:f9:48:7c:da:3a:
         b7:b7:93:e9:4e:a7:ae:d0:3a:7b:a7:89:59:74:45:46:00:31:
         bb:2a:20:a6:52:44:e8:9b:ee:a2:9c:4a:3c:50:1f:fe:a6:cc:
         09:72:41:3f:99:c2:03:80:9e:04:ff:f2:eb:96:fc:be:21:b7:
         bf:76:7c:37:4d:f5:41:02:a8:6e:cf:25:36:00:e7:a6:55:11:
         83:b1:ab:38:4d:ee:a8:b4:eb:15:fe:a0:dd:38:cb:5d:40:0b:
         6a:0b:84:4e:49:19:00:c3:8a:ab:d8:db:fb:9a:17:99:c8:b0:
         7f:01:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----