Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File:                     kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier:          cEIko++/gK+Da5vhQuv2MMzDhwEnpgZvIFQnyl8Be3U=
Subject key identifier:   9A:1D:7B:0F:3B:9C:17:D0:9B:A9:C6:D7:DA:C0:00:FE:16:69:78:D0
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer:       /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial:       01962FAB7F8412248BB4DBD6CA1E0AD86268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
                          2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: TucU9beAhdf25knaL0e9rP3MBKWjcv9igPATObZhO+w=)
                          3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:84:12:24:8b:b4:db:d6:ca:1e:0a:d8:62:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=9a1d7b0f3b9c17d09ba9c6d7dac000fe166978d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:2c:67:23:da:75:36:56:d4:e6:4f:8a:08:
                    1f:88:23:f3:eb:5b:d9:ca:aa:25:bc:e4:ef:d2:d8:
                    51:f2:29:ad:f3:18:d6:b2:3a:49:d3:10:43:9d:7e:
                    ea:d0:30:1a:2f:79:05:32:dc:e5:25:24:1c:cc:3a:
                    99:44:08:fe:59:ab:c4:ac:a7:dd:af:09:79:c2:e6:
                    ad:73:36:ac:64:df:fd:4f:e9:69:cf:6a:7c:27:93:
                    ec:9c:b8:35:62:44:3d:1a:04:42:8f:43:4d:5b:a8:
                    10:19:85:68:01:c9:b2:e9:dd:5f:46:4f:93:a8:9f:
                    99:72:5d:59:e1:c7:46:67:d7:09:65:d3:9f:a4:b9:
                    01:ab:72:20:ab:8c:73:62:7e:10:9d:21:0f:11:80:
                    ee:60:75:6e:f5:74:b2:bd:2a:3a:1b:91:cd:36:9a:
                    e9:85:ef:bc:6f:6b:a9:68:50:3c:3e:a8:03:ca:5c:
                    50:26:d6:ad:3d:6c:ad:40:29:74:97:2b:fb:bd:b6:
                    c1:18:8a:9a:8a:0d:3a:8c:4b:84:06:b7:75:8a:dc:
                    88:d8:01:70:74:80:31:0e:98:c2:a3:70:b1:e6:d3:
                    7a:32:e2:dd:92:e7:bc:82:b6:18:dd:5c:cd:9b:07:
                    31:d2:0a:3d:b1:86:3f:d1:90:fd:b7:0d:bf:c0:e7:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1D:7B:0F:3B:9C:17:D0:9B:A9:C6:D7:DA:C0:00:FE:16:69:78:D0
            X509v3 Authority Key Identifier:
                keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d7:a0:61:80:18:a0:6f:6c:32:c9:57:77:91:fd:8e:ac:44:
         11:88:da:63:f4:b4:4c:1e:e3:05:ab:b1:ba:88:44:38:c8:f6:
         c7:b5:73:88:05:82:23:85:e4:5a:54:8e:3b:2d:d3:c9:a6:fb:
         02:34:2b:4a:5a:18:90:7e:53:bd:45:ec:1f:7c:5f:c6:87:48:
         84:3e:46:8a:85:51:4c:05:13:8b:2f:64:bd:a8:df:9d:a8:60:
         c8:20:80:2a:12:49:54:09:2d:26:69:8f:2f:b8:b3:87:06:8c:
         15:c8:18:63:f5:15:0f:b5:24:71:fd:c8:08:ce:c6:6e:23:de:
         b3:48:ba:db:81:7f:1e:98:70:3c:25:1d:41:0c:f0:04:00:8e:
         e2:3c:53:11:61:57:d1:e2:e3:18:41:ae:ff:33:bd:21:06:6e:
         d5:2e:98:6f:40:82:bf:4a:08:21:15:a7:ad:49:83:69:85:71:
         6e:08:0e:8c:78:d0:f0:9f:79:ee:bb:64:41:cc:c9:8e:02:ed:
         c5:45:e7:d1:21:dd:36:36:72:0a:2d:81:56:fd:e5:c1:9c:8c:
         2d:60:a0:e3:c7:21:c9:0d:65:c7:86:f7:57:a4:5a:6f:56:92:
         36:04:23:d6:aa:67:58:ee:fe:00:d1:a5:7d:a5:0e:bc:3c:35:
         3b:df:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----