Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
File:                     K87k2VI_FSkcV2df0m3JUKfNVVA.mft (raw, json)
Hash identifier:          D15bMVidgWpr5n2FdBUmTLaE70dndBEasaj1ZcN5ysQ=
Subject key identifier:   B9:14:1F:ED:81:C3:1E:09:4F:E5:4E:51:90:FE:CE:37:E0:4A:CB:33
Authority key identifier: 2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50
Certificate issuer:       /CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
Certificate serial:       01962FAB89976A72CDC47FA16DD71F8F0E5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: K87k2VI_FSkcV2df0m3JUKfNVVA.crl (hash: 1o4D7eCw3W+E5weyii1P2qg1mU2VZHU6LkWj5NjjUEw=)
                          2: pxqHr4sai6w4MscZayNHP7SOQ7U.roa (hash: ixQj9fChzVhStwA3xD3Awi6hHSqhUCeXJMrkMLmnies=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:97:6a:72:cd:c4:7f:a1:6d:d7:1f:8f:0e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bcee4d9523f15291c57675fd26dc950a7cd5550
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=b9141fed81c31e094fe54e5190fece37e04acb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:d6:f0:01:cf:66:dc:fb:f4:1e:16:a3:82:
                    d1:79:75:63:65:c4:75:73:ee:b6:06:65:0a:42:0e:
                    28:91:5b:b3:bc:78:2f:61:2b:71:af:74:1a:a2:df:
                    ee:3c:0a:82:1d:a9:b3:b5:2a:fd:76:48:f2:ae:47:
                    93:cd:45:42:86:1e:d3:12:89:94:ac:36:91:39:17:
                    62:2b:fa:b8:b6:ea:4c:58:46:c8:5c:23:7d:c3:00:
                    fb:a8:0e:3e:5d:50:ac:3d:bc:a1:b8:8b:07:15:f7:
                    60:0a:26:5e:82:f6:74:cb:c6:53:7c:33:bc:67:b3:
                    cb:2b:6b:be:e6:3b:2d:24:28:47:2e:9d:24:1d:bc:
                    68:d7:b1:3a:09:0b:57:38:16:51:62:0c:34:2f:e7:
                    a1:84:07:e1:b0:c3:d6:8e:c2:fd:ed:c3:33:2c:89:
                    3b:f9:c7:37:fb:48:91:ad:14:bd:5a:cd:df:a6:c2:
                    45:c5:7c:23:0b:7c:4d:a3:97:d9:58:b6:14:99:08:
                    d6:39:33:7e:bc:14:da:2a:4f:69:42:af:f7:54:b0:
                    52:be:29:4b:a7:21:75:1e:e7:d3:33:4e:fe:0a:9f:
                    3c:6d:fa:7d:48:6d:c3:ef:d9:b8:ff:0f:62:71:33:
                    81:48:19:ea:72:28:cd:49:03:93:f4:79:3b:64:aa:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:1F:ED:81:C3:1E:09:4F:E5:4E:51:90:FE:CE:37:E0:4A:CB:33
            X509v3 Authority Key Identifier:
                keyid:2B:CE:E4:D9:52:3F:15:29:1C:57:67:5F:D2:6D:C9:50:A7:CD:55:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K87k2VI_FSkcV2df0m3JUKfNVVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8bbc27-2088-4cc9-b8d3-a03169d68a19/1/K87k2VI_FSkcV2df0m3JUKfNVVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:79:a4:74:13:4c:c2:40:49:b3:72:f6:d7:13:9d:3e:1b:bb:
         2e:0b:46:54:fa:40:ea:48:be:2f:61:5c:dc:56:83:39:25:08:
         ce:ab:a7:df:f3:05:b1:0c:01:a9:58:1c:6f:5b:4d:b1:ed:af:
         46:ef:27:e2:5b:33:5a:eb:5a:a9:24:9e:d5:a8:45:25:41:0c:
         c8:30:9c:63:e1:b9:49:9e:62:78:98:13:9b:dd:de:24:55:57:
         df:03:c7:27:18:12:74:e2:a6:b5:c8:c1:21:7b:7f:cc:94:2d:
         ea:be:82:94:81:d6:c9:98:ec:3f:b9:74:aa:ae:e6:c3:0c:ad:
         5e:4e:56:41:ca:32:07:4b:dd:62:98:08:66:f5:cb:f1:de:40:
         7e:15:a8:e5:6e:06:a0:a9:f3:1d:1a:e8:c7:28:1b:4b:89:d9:
         71:f2:03:93:fd:38:49:c7:dc:ae:08:15:7f:37:e5:35:b0:f3:
         8b:12:45:b7:9f:e5:2a:37:0a:02:ac:e8:18:ba:15:03:f8:01:
         fb:60:96:6e:f5:76:81:7d:0c:89:ba:2c:0d:c1:ef:30:3c:7d:
         81:9f:a7:f0:9b:87:aa:01:cb:e6:aa:3f:4f:67:a1:a6:f5:b5:
         57:5b:33:92:c2:fa:d9:71:83:2b:80:a2:fa:92:c2:e4:ce:66:
         02:0c:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----