Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File:                     KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier:          mygdNxpGYzmLk14aMKcOw1h4nOFqsmWw8dbII07PoOg=
Subject key identifier:   AA:F8:70:82:D7:48:13:FA:50:48:04:8B:A8:FC:96:93:67:05:FB:CC
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer:       /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial:       01962E9992C2DAB4577347C0A5E902B10373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number:          0767
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=)
                          2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: GXlEh754LMG0PDObG4O5P3IegSuEBRzR2IX7HAUX4dE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:92:c2:da:b4:57:73:47:c0:a5:e9:02:b1:03:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=aaf87082d74813fa5048048ba8fc96936705fbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:d5:04:29:56:5d:d1:02:b6:ab:91:b8:0f:
                    d1:8a:9c:27:fe:c3:62:5f:55:4b:aa:35:84:47:54:
                    3b:f3:a0:56:27:df:17:dd:81:e7:df:f8:40:78:ea:
                    69:f2:aa:cd:9c:9c:0c:de:d5:8c:db:e7:96:d6:d5:
                    c2:1d:66:07:93:08:b2:78:b2:f5:3b:64:b7:bf:b2:
                    2a:66:c1:e5:de:f1:d9:24:f1:3f:f6:30:05:ad:4b:
                    66:ee:d8:50:27:74:6a:37:fa:12:c3:24:b5:01:6c:
                    89:4c:55:8c:d5:b3:83:ee:36:05:5a:36:6e:96:a1:
                    a1:ef:71:3c:c9:4f:02:fc:7f:46:cb:ef:3f:3a:66:
                    4c:de:51:b5:3e:cc:88:01:29:0c:8c:35:51:43:17:
                    1a:70:15:9f:30:c9:69:1b:fd:99:45:ca:95:1b:6a:
                    39:59:86:f3:b0:10:e7:aa:9f:7b:55:96:e7:01:87:
                    6d:b2:a1:14:c5:46:25:88:1f:e2:e6:fd:5c:0b:54:
                    e6:50:3d:f1:a5:8c:20:df:4d:d1:8c:44:85:d4:ca:
                    ee:7c:0e:16:02:1d:68:3c:7e:0f:43:0d:9d:f5:3d:
                    5f:aa:89:39:f1:3d:6b:3d:73:b4:c8:63:0b:22:41:
                    77:80:97:c1:eb:7f:90:df:8a:e4:b5:eb:13:d0:71:
                    82:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F8:70:82:D7:48:13:FA:50:48:04:8B:A8:FC:96:93:67:05:FB:CC
            X509v3 Authority Key Identifier:
                keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:31:67:7b:37:62:77:78:3b:a5:86:73:f0:76:54:aa:01:6e:
         99:10:25:21:17:7b:18:c6:a7:81:d4:47:2a:10:4c:63:5b:ac:
         e5:49:b5:53:9b:ed:0e:4e:f2:78:57:43:7f:38:e3:0c:3a:7b:
         fe:26:6a:2f:47:4f:df:9c:01:1b:c1:ef:35:2f:a7:be:9c:75:
         14:3d:d1:a2:b4:74:39:c4:1a:ea:93:5c:cb:68:b4:4a:ed:09:
         db:49:db:3f:a4:85:ba:39:44:14:c2:44:d6:da:3c:10:ea:ba:
         1e:4d:73:c8:a9:c4:0d:45:18:16:2a:01:df:a3:75:31:33:9f:
         9f:bc:7a:64:6f:c4:9a:d4:52:88:7f:48:1d:23:e1:c5:7a:5d:
         43:a3:28:41:58:ca:cf:c8:3d:74:0b:14:03:c2:f2:9b:62:aa:
         f4:3d:7a:16:bb:98:99:3f:ae:30:b1:b1:2f:f9:81:6d:50:7f:
         02:97:49:4d:aa:a1:3c:21:f6:66:38:cb:1f:3f:9f:73:12:39:
         74:c6:10:68:9f:6e:9b:f8:8b:5c:78:c4:bf:77:60:79:df:5c:
         c0:d3:43:ab:a5:74:84:29:4a:d5:a8:8c:e3:27:01:4d:54:37:
         cd:84:34:29:c1:3d:4c:db:bd:e5:98:a0:af:89:6d:86:93:bf:
         4b:55:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----