Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File:                     KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier:          uvEddEOHNlBw85CE0ywc3mSQKRxz8Fr5deYA987Qkzk=
Subject key identifier:   C1:EF:7F:A9:8E:F9:25:4B:6A:41:2D:AC:C4:63:0D:25:3C:04:BF:73
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer:       /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial:       01962E2ABF7F9A0A6716229460CD571639A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number:          0A06
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
                          2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: nZ8M2AJ6grNIreFEoMmak1Ua4bc2unzq4cuo41cgH0I=)
                          3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:7f:9a:0a:67:16:22:94:60:cd:57:16:39:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=c1ef7fa98ef9254b6a412dacc4630d253c04bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:c0:c4:99:b1:87:a2:1b:93:13:f8:28:c6:
                    53:30:1f:4d:60:62:82:e0:b8:5e:b4:30:61:27:ae:
                    34:fa:cb:26:10:0b:e3:2d:5d:e0:c8:75:9c:c2:10:
                    23:c8:88:4a:20:28:12:ef:45:9b:d5:7d:29:eb:76:
                    0f:04:cb:3a:a3:70:38:db:1b:1e:71:73:bd:fb:4c:
                    de:3c:4e:fe:f8:e7:f9:0c:eb:61:a6:84:a1:ab:ca:
                    99:b5:27:77:d5:40:23:02:4b:32:18:7f:a8:71:94:
                    1e:ea:10:c4:77:8e:ba:c7:89:d5:4c:6f:54:ee:c0:
                    2e:a7:1d:15:43:84:f0:66:35:a0:1c:7b:4f:91:d8:
                    5e:cc:a1:98:b5:a5:54:77:1c:69:e2:cc:38:c0:e8:
                    f1:0d:51:32:40:00:8f:80:4c:ac:7f:da:09:87:b7:
                    96:84:35:ec:13:59:af:c6:21:a7:9c:c4:05:81:68:
                    29:55:63:b6:f1:ab:4e:f7:7d:a1:0d:c1:2f:53:fb:
                    d7:b4:f3:c6:9b:04:06:32:30:e1:8e:f2:89:be:7a:
                    42:7c:fc:36:ed:a9:22:96:d6:b7:d1:1a:9f:6b:1d:
                    ea:17:4f:f4:f7:9e:41:89:f6:d1:44:be:b6:1b:1d:
                    bd:a3:6e:8e:5a:2e:d2:c5:4c:6b:50:1b:cc:ca:86:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:7F:A9:8E:F9:25:4B:6A:41:2D:AC:C4:63:0D:25:3C:04:BF:73
            X509v3 Authority Key Identifier:
                keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:db:b1:6b:a9:c1:48:35:d1:e5:6b:d3:10:b1:89:1b:6e:87:
         9a:22:f4:61:2d:a6:a6:a4:70:4f:79:b4:b2:36:6d:ec:a9:45:
         da:c8:1f:5a:1e:41:b9:78:30:bc:c6:a6:a5:ed:50:bb:37:0d:
         49:58:c8:61:9f:b7:5f:1c:78:ec:26:de:0e:54:5d:13:d4:84:
         67:47:89:98:b1:87:91:c5:2d:d2:9e:65:e6:b6:c7:82:d7:b6:
         d2:d9:3c:7d:d2:52:d0:19:65:47:5e:17:7f:55:53:62:64:2f:
         ad:2d:8b:fc:6c:07:f7:43:a0:68:e5:7b:83:4c:b6:ed:65:5b:
         5e:7c:ac:a5:db:4a:ac:43:b1:5c:b8:6d:dd:43:c5:04:17:b5:
         9b:a8:07:56:59:0f:48:79:0d:bd:a3:83:de:70:9e:86:d4:89:
         57:fa:c0:69:da:00:7c:ea:a3:85:54:32:a1:bb:24:77:87:75:
         23:26:4b:96:ed:30:6f:71:3f:2b:51:c8:cc:2a:af:67:01:cd:
         bc:27:70:4e:17:83:91:51:b7:a1:4e:13:3a:21:48:63:2c:3d:
         a7:82:44:65:f2:87:bf:f1:5a:f5:15:85:4c:43:a8:db:0d:b6:
         ce:6a:98:6c:7b:2d:8f:68:ee:45:8a:83:a1:9c:2d:ce:a3:a0:
         d5:e5:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----