Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
File:                     kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft (raw, json)
Hash identifier:          qVUtz83VDSPB1VaxxkCoySnSpX4TW5pwosQRfe5l+7E=
Subject key identifier:   36:FB:03:6F:69:37:15:EC:27:16:9C:08:98:CB:EE:5D:DD:1E:CC:CC
Authority key identifier: 90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB
Certificate issuer:       /CN=90d426209bd8c405cbefee5741b1a52548012bab
Certificate serial:       01962E98FF0D5549B30F00D09788C63958AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: 81r7MDlREVnve0gPHpK-YMqPGos.roa (hash: LBj0CTTN9bH+FtAXQEk67Yy3EpjLyRKJ5E4kGwybQXs=)
                          2: kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl (hash: fzNbB22rofT/Mu050vWZmWKg2XzlUNcYZ/HijL1c9QI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ff:0d:55:49:b3:0f:00:d0:97:88:c6:39:58:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90d426209bd8c405cbefee5741b1a52548012bab
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=36fb036f693715ec27169c0898cbee5ddd1ecccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7c:53:11:43:be:d2:59:77:ec:91:dc:02:1e:
                    f6:03:b9:25:cb:f2:22:13:58:b9:0f:2a:e5:2d:e1:
                    fa:9a:ee:6a:63:9c:c0:6f:9a:0a:29:58:52:bb:1d:
                    bb:77:98:c4:73:a7:24:a0:fa:90:89:ed:03:f5:56:
                    dc:9e:e5:a7:27:b8:91:4d:5b:fd:69:36:89:41:27:
                    05:60:ec:93:f4:b5:4c:6f:b6:5f:86:32:a2:e7:e1:
                    8b:eb:70:17:86:d6:8d:d1:68:8a:6a:df:59:a9:cb:
                    10:d6:4d:ca:6f:d3:40:21:bf:55:01:34:22:d8:bd:
                    4e:1f:de:1f:11:f9:29:3d:6e:79:ea:97:b6:fe:c7:
                    1b:94:04:ea:8d:8a:12:c5:dc:f5:9b:5e:fb:91:66:
                    a2:17:02:ce:4b:ff:4e:93:94:30:6c:3b:88:c9:21:
                    58:61:23:b9:f0:86:4a:33:3f:31:24:de:09:90:e8:
                    bf:0d:b4:fe:d0:36:e3:0d:f0:59:64:2a:1d:6c:32:
                    20:2c:eb:81:2e:67:4e:72:8f:5e:46:58:d6:47:14:
                    0a:a7:fb:03:b0:60:93:eb:9d:0e:44:e3:e0:c5:d3:
                    ba:15:94:5d:4a:98:57:0d:9c:76:93:44:08:b4:28:
                    6f:e3:1a:48:e0:07:f5:43:bd:80:09:1b:87:3d:1c:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FB:03:6F:69:37:15:EC:27:16:9C:08:98:CB:EE:5D:DD:1E:CC:CC
            X509v3 Authority Key Identifier:
                keyid:90:D4:26:20:9B:D8:C4:05:CB:EF:EE:57:41:B1:A5:25:48:01:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNQmIJvYxAXL7-5XQbGlJUgBK6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ec9616-79ad-4a36-aba4-84bd67ed0eef/1/kNQmIJvYxAXL7-5XQbGlJUgBK6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:64:aa:42:44:e4:c1:ad:3a:bb:9e:36:53:95:6d:e2:b1:6b:
         b1:38:59:4d:14:bf:94:c6:4b:18:08:ff:be:b2:e3:67:1b:b5:
         9a:06:48:b6:71:b6:72:f0:a0:62:19:dd:7a:51:66:a7:02:4f:
         e0:3c:4d:d6:f8:89:23:a2:bb:5e:39:66:e4:5f:28:fb:61:1e:
         18:dd:3c:4c:f0:29:a9:6a:93:07:7c:25:41:41:73:5f:c0:71:
         97:c7:5b:fb:e8:fe:f3:20:45:df:14:90:a5:3d:11:51:49:07:
         ee:6f:49:5b:66:dd:cb:95:66:4a:14:ed:a8:93:de:ef:de:34:
         9f:28:a0:c0:e6:93:a6:92:3b:35:39:11:6c:a9:3d:41:e9:2c:
         55:9f:cc:8f:68:50:87:83:35:c2:05:a5:dc:db:2f:1b:49:8c:
         27:91:06:3d:ad:07:a8:b5:62:ea:62:e1:f9:b8:eb:be:19:f6:
         3d:8a:a6:a5:e6:ee:f7:08:73:15:04:71:f3:63:41:ae:d6:e8:
         3c:69:70:a6:c7:6d:aa:51:21:12:93:4f:c9:93:ee:43:01:7b:
         80:2e:a9:48:b8:10:77:d2:c2:32:b6:c0:a9:f5:a0:76:46:92:
         ac:b6:42:e7:b4:c7:c4:2f:17:7c:46:3a:06:c4:f6:2e:32:dd:
         88:57:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----