Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          SrjCkW+N+v7rFdpXi/ioFpnNwxBh7g8EDfmW9LZIwEo=
Subject key identifier:   2A:CA:0C:C3:F3:F2:19:96:BD:2F:F7:20:03:EC:10:A7:0A:58:FD:6A
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       01962E61F33C4D003FFF5A3E455EB7390F45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
                          2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
                          3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
                          4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: lQA7V1eSlLR3DpkY4w5E3LknCCS7RX2EeDhoQYIw0j8=)
                          5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
                          6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f3:3c:4d:00:3f:ff:5a:3e:45:5e:b7:39:0f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=2aca0cc3f3f21996bd2ff72003ec10a70a58fd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:78:00:52:bc:9d:e6:7f:78:8f:e4:39:2f:d4:
                    b8:cc:99:a8:8d:c8:1d:ac:14:39:15:fb:ad:b7:8a:
                    74:83:42:56:9a:70:fc:04:e0:6d:1d:f9:48:b7:c1:
                    8f:25:d2:e0:41:f6:c4:0b:49:b9:19:c3:d6:bc:68:
                    05:16:76:14:68:29:35:54:e4:00:de:62:38:1d:a8:
                    67:19:60:57:45:e4:d5:dc:7c:cd:bd:fd:d2:57:1f:
                    44:4a:46:a1:c1:08:6a:e0:8a:55:8b:11:78:6f:37:
                    e7:84:17:69:48:12:5e:c4:8a:b7:9e:16:33:eb:3c:
                    d5:b0:af:90:fa:d2:6a:32:3f:15:67:2e:4a:73:0c:
                    d2:d2:c4:e2:ec:38:91:d5:13:c0:05:33:e1:68:d5:
                    9c:e9:89:2c:b3:33:da:38:27:33:66:7d:f9:fd:01:
                    58:cb:24:7f:e9:76:19:b1:0e:f6:69:ff:a7:09:45:
                    99:8d:d6:21:01:0c:d7:04:c7:0d:94:9c:2e:3f:29:
                    45:2a:8b:fb:1d:cb:76:bf:74:9e:1d:2b:02:e8:83:
                    9d:31:26:40:4f:e8:1c:3f:ba:15:23:e6:74:a3:8f:
                    46:83:c3:7e:28:b3:2a:73:84:88:08:4a:d1:94:b0:
                    48:8a:d6:7e:79:ea:39:43:85:79:22:7d:27:c8:9a:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:0C:C3:F3:F2:19:96:BD:2F:F7:20:03:EC:10:A7:0A:58:FD:6A
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:8e:86:a7:11:41:22:c4:ee:7a:65:82:c5:42:99:1f:fb:
         c0:82:49:e1:40:75:bf:ff:39:53:bb:c9:42:39:16:d4:52:a4:
         0a:3c:2f:da:80:aa:ad:4d:5a:63:16:a7:ed:69:37:c1:50:17:
         7b:d8:32:02:74:6b:d4:46:28:80:2c:e3:4a:ea:67:53:6f:dc:
         a5:f4:2a:61:74:fb:fe:02:57:32:ef:4f:e0:5f:e5:6f:a1:88:
         79:af:2f:50:a9:a5:68:46:09:f7:9b:ab:34:2a:56:9d:b1:51:
         98:ab:2a:cb:f2:3a:f1:97:40:cf:53:67:0e:3f:8d:8b:3f:e6:
         8c:e4:fc:ee:11:40:c7:98:6a:c2:8b:ec:10:89:85:b6:05:3e:
         8b:d6:1f:14:73:eb:3a:6b:ad:ad:48:7b:80:27:9b:83:ec:a0:
         65:31:96:55:46:39:07:87:31:7a:e9:5d:0a:46:0c:b3:65:b3:
         09:f7:3c:54:ef:b0:e9:88:95:55:18:0d:ae:5c:de:85:cc:43:
         b5:93:37:72:7c:87:e6:c5:ff:8f:b4:9c:15:9f:a4:ef:e9:9b:
         27:e8:d6:69:43:dc:b8:bb:00:00:89:3d:a1:15:06:a4:18:98:
         06:c9:e4:27:61:35:c4:1c:56:56:f2:cf:99:18:9a:f1:18:9a:
         55:a2:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----