Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File:                     kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier:          p2UH85nI7m4KiUY6vjzkyjkuhH+Ofmwj69oJ0p4KEAU=
Subject key identifier:   0D:F3:D8:D7:18:D7:3C:6B:4C:ED:E7:D6:CE:F7:17:4B:5A:99:D6:50
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer:       /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial:       01962F7430A0312488316A6671286DFFBFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number:          04F7
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: n8dNz9LiqZvYjnGGpiyId4W6KspiPEE7S8usbckHu2g=)
                          2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:a0:31:24:88:31:6a:66:71:28:6d:ff:bf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=0df3d8d718d73c6b4cede7d6cef7174b5a99d650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:4d:11:06:84:c0:ab:e3:ea:72:fa:5b:09:
                    61:9f:87:d5:19:70:dc:01:1e:a2:68:df:cc:40:b6:
                    13:6b:24:63:1d:22:72:77:84:ef:18:c8:cc:4e:02:
                    b9:1e:60:4e:e1:9e:85:95:b2:6c:e7:82:ad:7d:bf:
                    ca:f6:f0:07:89:07:a9:c0:5f:23:5c:a4:ca:03:e7:
                    02:e2:5e:0f:47:2b:b8:35:fa:37:6c:bf:d1:b8:1e:
                    81:39:e0:18:cc:a7:7c:3c:1d:b3:79:c6:5b:f9:c7:
                    4b:5f:a8:e2:3b:f3:f4:35:9b:5b:05:6e:da:c4:2b:
                    44:24:85:7d:67:bf:98:f7:4f:45:a9:5e:6b:91:9e:
                    3c:ce:a2:03:aa:fe:61:8a:9b:5a:43:03:4f:6a:e8:
                    ec:ff:d0:9d:29:b1:ff:eb:9c:4a:bd:b9:56:b3:0d:
                    16:af:ef:77:05:47:ee:1b:8d:56:98:64:54:6f:70:
                    37:02:a2:0d:4a:14:24:ef:24:d8:c5:01:b2:1b:b7:
                    22:76:f3:12:5a:7a:ca:46:e7:3b:e1:b5:8a:ee:9b:
                    5b:40:64:4f:d3:88:3a:81:b8:b7:49:c0:75:d4:4c:
                    0b:cf:9a:68:b3:4b:14:34:f6:e3:b8:44:14:2f:25:
                    62:98:60:b7:87:04:20:d1:bd:49:d4:e9:9c:8c:d5:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F3:D8:D7:18:D7:3C:6B:4C:ED:E7:D6:CE:F7:17:4B:5A:99:D6:50
            X509v3 Authority Key Identifier:
                keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d6:a3:50:4c:54:7b:23:2e:e1:e4:db:d3:ae:ab:bc:8a:cb:
         ea:2f:9c:fb:1a:34:ab:f9:ec:e6:80:a5:ba:16:ba:f2:6d:03:
         56:1d:70:aa:7f:83:23:e1:fa:9d:8d:58:a6:97:8e:6f:ff:e0:
         c2:22:34:f0:e2:3e:1d:38:2e:4c:1c:f5:fd:a9:8a:ba:d8:99:
         dc:90:b0:10:4f:01:fa:c0:85:e7:16:08:39:47:b2:ed:d8:77:
         8b:a8:1e:a8:91:34:49:7c:0c:ae:b9:c2:28:0f:ed:f4:f9:5c:
         f1:5a:ff:08:55:06:b4:e4:9f:4e:62:84:6b:8b:1c:52:11:bf:
         10:b5:89:7a:83:d4:3f:b5:cc:4a:99:6e:b7:2f:77:21:44:bf:
         e3:b4:42:3e:6b:2b:a1:77:f4:fb:64:98:14:4f:a4:09:6e:9d:
         da:5e:24:4c:c5:20:ac:4b:a1:a8:bf:8a:12:17:d2:73:c2:95:
         a6:be:5d:12:1d:98:18:ab:e2:13:ab:d5:51:75:cb:4d:88:f7:
         86:78:1b:49:de:af:63:d2:9b:07:61:ea:54:50:40:38:58:ba:
         5d:45:69:c5:da:bf:27:5f:10:94:eb:17:6a:d5:39:5c:9d:e6:
         21:ab:b9:5a:43:4c:75:3c:97:13:18:72:70:5a:77:25:42:a3:
         10:26:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----