Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File:                     kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier:          Z4D5GWwU2ACBNYRIUnjH5tL0iQxo8RHWA0nE/QzB67I=
Subject key identifier:   AA:62:C9:43:6D:BE:E9:03:53:45:5B:EF:33:63:8D:0E:99:20:7C:B7
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer:       /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial:       01962DF445B14FE10C5FBAA243C4873A0507
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 07:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:45 +0000
Files and hashes:         1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: scMIBCTHUFPB99hWevhk88NSoVVSrDd/8hUtl8FfIiI=)
                          2: t6aLSSMcfA7Wmiqf40BGuDSs16w.roa (hash: QoJ0LZB+2Of6cXEGtrOrsAOrDyP5OnzmUXKVyd4YZpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:45:b1:4f:e1:0c:5f:ba:a2:43:c4:87:3a:05:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
        Validity
            Not Before: Apr 13 07:01:45 2025 GMT
            Not After : Apr 14 07:01:45 2025 GMT
        Subject: CN=aa62c9436dbee90353455bef33638d0e99207cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:a4:e3:eb:1d:52:99:14:3e:5d:d7:30:89:
                    74:95:dd:9a:02:3b:44:6e:05:10:69:8d:a1:16:01:
                    81:92:f5:46:89:ea:8e:3e:40:66:b8:2f:32:51:56:
                    78:18:7f:1e:f5:a7:15:45:89:e7:3d:42:65:58:ea:
                    9b:f7:df:8f:24:2e:e4:88:98:5f:86:11:51:8a:ee:
                    2d:d2:15:cd:bf:5e:ad:e9:68:f8:72:8b:c4:0d:c7:
                    e8:78:ea:79:fa:83:82:10:77:c4:c9:0a:53:16:10:
                    3d:30:ee:1e:9c:dc:58:01:8e:57:52:aa:91:37:80:
                    13:72:00:b5:f4:4d:38:0b:31:8e:ae:c5:2e:fe:06:
                    b1:3f:7a:4e:8e:d6:01:dc:59:97:25:03:c7:80:94:
                    b5:13:ba:0a:a8:40:53:d3:e4:56:82:75:2f:77:42:
                    af:d0:27:a8:fe:99:f4:e8:71:2a:41:bb:f0:30:06:
                    65:42:56:f7:05:57:01:63:14:4d:3e:c4:9b:44:b2:
                    e6:8b:3f:aa:95:84:6d:54:e5:ba:d5:11:a2:b5:91:
                    96:35:f5:87:c1:e3:c3:4f:ec:9b:91:31:31:58:91:
                    66:81:87:a2:d6:b5:d8:39:0d:40:34:2b:c9:60:05:
                    bb:e5:f7:2b:6c:66:08:d1:f0:c9:64:1b:67:21:5f:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:62:C9:43:6D:BE:E9:03:53:45:5B:EF:33:63:8D:0E:99:20:7C:B7
            X509v3 Authority Key Identifier:
                keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:16:2e:d9:9a:dd:76:74:65:7b:f1:86:ca:de:32:e5:93:
         80:6e:e4:2b:15:99:5a:38:f1:8c:11:c6:2d:08:eb:70:ee:b2:
         dd:69:1d:09:77:21:e8:bc:10:9d:de:9d:35:b4:73:f1:e0:f2:
         fc:04:bf:af:a0:eb:86:39:94:06:28:a8:83:ce:e3:30:5a:1f:
         e2:80:94:38:c2:8b:b7:86:58:aa:29:41:e3:86:21:fc:4c:7c:
         24:b5:36:9e:ff:cb:44:2e:d4:3e:d8:6b:c6:f2:90:f0:68:4d:
         38:46:e6:9a:bf:58:58:21:55:98:65:f1:24:25:d0:94:f3:e0:
         3c:fe:f1:a4:5b:7a:c5:23:4d:60:c0:78:0b:22:46:46:56:56:
         99:8e:f4:3a:db:b4:f6:75:15:95:e0:be:71:30:30:f5:56:ae:
         5d:65:8a:2c:3c:ed:ee:14:c0:2c:4a:62:77:ba:32:e5:67:68:
         a7:77:21:24:c1:32:d4:05:4f:f8:e2:29:c4:be:9e:f1:96:29:
         ec:5f:4c:f3:34:fa:72:33:b6:47:65:53:b0:03:e8:1b:73:b6:
         a8:1f:49:a4:33:3f:2d:49:b2:9e:a1:49:01:74:9a:f0:32:f3:
         50:1b:01:ef:63:5c:1e:83:8a:98:c5:b8:c1:49:0f:51:2d:a3:
         97:81:cc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----