Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File:                     KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier:          YucqZhgt0lpqoFq2Yuci1Qc7a2igqYiQdr8CEHup8Go=
Subject key identifier:   C9:8E:96:EC:7F:BA:7A:0B:52:3B:2A:CE:C4:95:C4:43:51:5B:9B:2B
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer:       /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial:       01962FAB8E4AFCD263FA369EEC569BD8CBE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 0l-uuc0ta--zZGivAH1vRPmB_34.roa (hash: N3+ixN59bx1CAdzBVH5dBhTA7XSG6tSZGbX7+qQ9kkU=)
                          2: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: 5X61lGTh3aDaxdC6RtKKaLUpCKpQV7mM4aKfyQcfd/4=)
                          3: ZjCHU3LEGq34M383f_KumGN_eB4.roa (hash: YxlGAgs8g3hAPxhoH9iP3cLnbEfE9zXQU/84spENz30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8e:4a:fc:d2:63:fa:36:9e:ec:56:9b:d8:cb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=c98e96ec7fba7a0b523b2acec495c443515b9b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:a3:05:f7:67:a8:8b:77:80:bb:c7:8d:2b:
                    74:11:a8:dd:4e:ce:71:0c:a8:25:60:db:8e:5f:f5:
                    34:2c:db:d1:32:8b:e8:0f:59:77:54:82:84:01:3f:
                    80:3b:60:6b:ad:ed:80:22:06:a8:2d:e8:f3:a3:aa:
                    c6:8f:96:47:09:d2:36:4c:51:d1:b9:e3:08:6d:cf:
                    59:f8:46:1d:ab:50:e0:a8:30:b5:f4:2b:ae:2f:a2:
                    02:4e:e9:40:80:16:75:9f:d2:4e:01:9b:00:46:f9:
                    d4:8f:78:e9:11:e8:b6:7c:18:c4:e2:9b:2e:23:84:
                    08:3e:4f:d6:cd:b4:65:c2:1e:8f:10:bc:ab:c7:a1:
                    b7:db:e8:04:2a:fc:32:93:e9:3f:90:87:26:9a:ca:
                    4d:6a:99:ea:f0:bf:3c:6c:82:c8:0a:a6:e3:72:87:
                    12:4a:fe:73:e6:e1:a6:2a:03:9a:5b:0c:89:01:61:
                    e3:93:52:4e:42:8f:0d:d9:f6:b4:f8:15:40:b4:1f:
                    f9:db:64:0e:47:27:52:4d:34:5c:42:5a:08:54:9c:
                    1d:66:fd:40:f5:e1:7b:7a:e0:11:c6:e9:22:ff:85:
                    86:8c:e9:dd:15:b5:a9:27:2c:3f:ec:91:44:c6:c6:
                    76:59:83:e5:0a:50:0a:5a:1f:ac:bf:d1:f4:ed:d7:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:96:EC:7F:BA:7A:0B:52:3B:2A:CE:C4:95:C4:43:51:5B:9B:2B
            X509v3 Authority Key Identifier:
                keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:2d:41:de:f6:d3:27:52:47:9f:36:85:14:e0:4f:61:5b:
         d9:95:3a:36:40:9d:b5:7b:25:5d:8b:3f:87:2c:97:23:ed:39:
         52:46:21:53:7f:6d:be:b8:60:b4:d3:a4:42:fe:00:e8:c8:bd:
         30:d9:63:97:6f:25:0b:d1:ef:fa:e4:ed:b3:c1:43:2b:50:12:
         15:a1:d6:61:94:71:83:71:be:d8:36:ea:c4:c0:aa:2d:be:7a:
         ba:07:1a:62:84:15:11:2a:10:d4:72:55:98:9f:ab:19:4d:e3:
         12:4c:97:83:83:19:18:21:7a:7f:15:f8:89:c7:1e:4d:79:7c:
         cf:4a:bc:d3:d4:cf:82:e3:62:01:01:7c:87:a8:ec:e3:77:27:
         b2:78:82:87:13:7c:6c:24:ed:cf:63:ce:e1:0d:40:dd:fd:32:
         5b:b6:68:51:ea:b1:ef:19:eb:d5:7e:d4:67:57:09:7c:27:96:
         46:23:c8:b9:41:78:82:43:e4:bc:03:e5:01:8a:1c:d0:5f:44:
         03:d7:d2:df:cb:0c:c1:63:2a:6a:60:02:af:a8:4c:ce:3b:24:
         2f:ee:ad:2a:27:ab:c5:29:b0:2a:4e:1a:12:c3:8f:50:42:bc:
         f3:b8:ce:51:55:9e:c2:f7:79:8a:e5:1e:73:fd:77:90:3a:20:
         2b:43:a6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----