Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          4vgAbd5frdWRwL6a0NKwtl7Ch2aRF1AI48C+7uaRi+Y=
Subject key identifier:   E2:79:DF:C7:4E:7C:C5:F7:90:3B:4D:E2:10:41:53:2E:B3:C5:6A:BE
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       01962E61843F7CC116A7A8538E123D9E5610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 09:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:04 +0000
Files and hashes:         1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=)
                          2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=)
                          3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=)
                          4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: aMuH34cb+UnWGSHZxWDxumkoL9EYjnPKQ15+omIyQVg=)
                          5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:84:3f:7c:c1:16:a7:a8:53:8e:12:3d:9e:56:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: Apr 13 09:01:04 2025 GMT
            Not After : Apr 14 09:01:04 2025 GMT
        Subject: CN=e279dfc74e7cc5f7903b4de21041532eb3c56abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:40:90:89:29:e4:65:41:c9:ec:ee:4a:82:
                    1d:b5:34:dd:e0:ed:cb:83:6a:7c:44:52:b3:59:9a:
                    68:37:31:56:10:42:00:93:15:1b:9d:6c:dc:dc:2b:
                    d0:f9:a3:3e:d9:01:32:04:0c:12:ae:99:72:f9:86:
                    30:ad:2a:74:0b:a7:03:e1:51:d9:66:e1:09:a1:ba:
                    36:38:d3:a9:24:24:9e:1a:a4:12:e2:90:54:b7:b8:
                    d7:07:05:30:67:8c:49:7b:19:19:3e:1d:bc:bf:51:
                    1f:a0:26:42:0b:32:3e:fb:f9:f5:5a:60:d0:d8:8c:
                    1b:17:9f:e0:4f:6e:95:36:33:90:24:cb:7b:eb:60:
                    ec:ba:e9:a6:36:37:07:ea:c5:7a:91:23:91:b3:16:
                    5c:4a:ab:a9:45:85:10:36:55:b4:8f:4a:c5:16:6a:
                    2a:8e:f2:6c:74:68:99:f1:f5:d9:79:f1:f9:63:2b:
                    16:51:49:3e:e7:7a:ab:8d:fa:ad:44:d5:d4:d8:eb:
                    6f:40:4b:72:ca:4b:48:a2:8a:f3:df:f3:45:b2:76:
                    01:ce:6f:73:65:ee:58:0b:19:76:ad:ab:42:b7:7b:
                    b7:8c:01:4e:88:77:03:ce:98:57:6e:13:ae:1a:ae:
                    8e:7f:4f:c9:2d:5b:5b:16:0e:36:1f:f6:7e:ac:c0:
                    b4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:DF:C7:4E:7C:C5:F7:90:3B:4D:E2:10:41:53:2E:B3:C5:6A:BE
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:db:30:4e:d7:68:59:f5:14:5e:be:6f:d5:a0:7d:ec:61:31:
         40:59:25:c1:77:27:19:02:77:41:38:6c:f8:6a:58:c1:84:54:
         c9:9c:28:90:a2:00:0a:3f:d9:83:c7:31:ad:4f:3f:02:73:dc:
         8d:6e:86:46:25:dd:63:ad:7f:d3:a9:30:af:d1:37:7b:ee:9d:
         f9:b8:13:57:ac:2b:23:d1:18:16:de:49:fb:68:b1:22:5b:64:
         d4:d1:12:ab:e4:0c:3d:06:db:7f:c1:52:2f:16:cd:d4:96:4e:
         59:90:c9:0f:be:c4:fb:69:29:9b:c1:c7:8c:80:ea:4a:75:4d:
         e9:2e:9c:2c:71:69:e7:81:4d:c1:53:00:5b:4a:64:45:9b:6c:
         d0:d2:f7:f8:a0:a9:7b:19:7c:46:76:81:83:bf:9e:83:d0:fc:
         41:28:76:58:a0:95:1d:13:92:d8:93:35:3d:b4:e2:54:eb:76:
         f1:2b:8a:95:a4:06:d8:5e:71:63:06:d6:36:a5:80:1a:6b:b9:
         04:d0:fd:bc:e4:85:8c:8b:4d:c3:ac:d0:3c:c2:60:ad:53:b2:
         0f:3a:ec:2f:c1:11:28:c4:6d:0b:b7:da:25:17:52:4c:71:48:
         bf:77:61:19:1b:98:f6:d7:2e:14:04:c5:0a:2d:99:38:4b:aa:
         bb:19:7a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----