Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File:                     KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier:          ooYKyEQd/LxbSnsVgtc8LFHgUDlDpql3wz9Fx5zIwnU=
Subject key identifier:   20:46:1E:03:D7:41:89:19:98:D9:17:9B:55:EF:99:03:57:9C:DB:EC
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer:       /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial:       01962E99BAE5FBD358FB08D219E4EB3E6233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=)
                          2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: 72oIBCCzXuxZ+ATOUfw1TwsYZ1HFOHpFPW/NSolobbQ=)
                          3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=)
                          4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=)
                          5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=)
                          6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=)
                          7: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=)
                          8: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=)
                          9: r35yid910YnMRVJ0dohWLbFg9fA.roa (hash: R0fRzKPoSAK4VI2tCDaL9PTR+axXctfnY3qc7wzVVJQ=)
                          10: zP8qZCQuiGnyynXqFEworI-l4Kk.roa (hash: 8v3+9BYp2qaRN+mDEqf3MiLHJ2vk/UAqK532lYFyFAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ba:e5:fb:d3:58:fb:08:d2:19:e4:eb:3e:62:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=20461e03d741891998d9179b55ef9903579cdbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f3:e6:c6:9c:24:e8:30:60:70:99:fa:97:21:
                    25:7e:b5:cd:8e:a4:fe:43:74:74:27:59:05:b5:e0:
                    4e:ac:65:12:88:88:af:f8:3a:58:f4:b6:2b:06:ee:
                    99:b7:a7:b3:8c:1d:23:ac:67:0b:71:a3:be:95:ba:
                    a3:67:a0:13:3f:2e:5c:7a:50:c0:e2:58:25:8d:20:
                    5d:90:a5:e1:4c:38:6f:4e:98:6c:3a:4b:c2:b4:47:
                    26:f8:8c:ea:95:fa:0e:6a:d6:e5:91:85:2b:65:f6:
                    02:07:04:66:98:ff:fe:7d:c0:e1:1e:b0:8d:84:ad:
                    28:a7:cd:d5:6f:2e:0e:e4:be:36:d9:35:16:7a:c0:
                    29:96:ba:c1:75:ed:5b:31:c1:47:4a:b1:fc:37:3c:
                    21:eb:e7:18:7a:1e:aa:f0:6e:e8:9f:20:42:10:3b:
                    f8:0c:b5:12:87:40:4d:1e:bf:f7:49:ae:df:02:28:
                    db:58:96:cb:c6:9c:13:7d:59:ec:fe:25:44:2b:c7:
                    69:90:f8:40:08:29:f3:4c:1f:6a:67:7f:8b:63:62:
                    92:b6:9a:c5:77:9c:cd:e6:91:ab:23:c4:f6:53:38:
                    a6:46:c2:1a:cf:53:90:ee:d2:20:28:3d:a0:d3:20:
                    69:6e:61:1a:78:1f:e8:8a:8e:98:65:9e:3a:fa:30:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:46:1E:03:D7:41:89:19:98:D9:17:9B:55:EF:99:03:57:9C:DB:EC
            X509v3 Authority Key Identifier:
                keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:17:10:64:7d:86:95:4a:bf:9c:ad:73:21:be:62:a8:b6:73:
         06:13:5f:73:b4:79:1e:f5:60:eb:08:af:79:ff:f1:8d:94:f3:
         b9:c1:34:39:e5:68:42:32:d8:b7:79:75:0d:5f:24:ab:dc:a9:
         e6:d2:ec:00:37:1e:17:55:7e:b0:43:16:13:19:f7:d7:5c:3e:
         57:f1:9d:25:2b:35:42:ef:d6:a8:a7:04:c4:ab:dd:2f:7c:3e:
         f2:80:a0:c5:28:f5:c0:cd:90:3d:3d:51:0d:07:92:96:48:20:
         f2:f3:3a:70:99:eb:4e:44:07:79:8e:29:17:df:54:9f:c9:17:
         65:9f:59:c6:52:9b:cb:b8:10:16:58:28:11:b8:12:45:9b:17:
         c6:17:b5:05:a7:bd:8f:57:d2:c8:05:ee:78:0a:ac:7f:21:2b:
         17:a4:8f:2c:95:d4:fb:21:b4:75:98:03:fb:10:f1:f4:47:98:
         0e:95:39:32:03:28:e9:4a:25:11:ae:3d:58:d5:1c:85:0d:b2:
         e6:85:81:b0:36:cc:00:99:2e:1d:bc:a4:9f:c1:db:81:f0:a1:
         5e:ec:95:ee:fa:7c:e3:22:ea:56:01:a5:af:11:e9:d6:25:1a:
         4a:bd:82:04:3c:41:11:fc:c1:72:2b:b9:23:b0:12:ca:ed:c4:
         eb:00:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----