Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
File:                     KbeTgP5AdDnMLs0_rBgVfbNs92g.mft (raw, json)
Hash identifier:          UJMT9OFxSdx/wmq96GWHFMkOCAVMtcbVlIrwGTLBr8k=
Subject key identifier:   1B:61:67:C9:13:27:88:FC:E7:06:F3:2C:C5:FD:A2:45:91:BB:47:DF
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       01962FAB684F7764834EFE9E4E4C706D571B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft
Manifest number:          1069
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: KbeTgP5AdDnMLs0_rBgVfbNs92g.crl (hash: 9JIJXzaK9i6Geg8TCkvKPGax/5zZhXHEz5SU8KJydvU=)
                          2: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (hash: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=)
                          3: eJ1JUPisPyGRK8rwksI89SjAgW8.roa (hash: Yc8bpcgXGDfpskRZN1u08QJJzwCYTMenRq0PHCEk9iU=)
                          4: foMqTIfk3NGRU1ECjEYc0FzWeHQ.roa (hash: 8/tSFYSbydeBOM5cDt+MQjefx680IbM6wdc9EqGW/uQ=)
                          5: qOJSirqIZF030lDaiDlLOLszAqo.roa (hash: cceSZV5tbmDVcXVgGl8UFbkLxF9VVoz+OhMvXa1/dFw=)
                          6: zAPwb7bovDcweikHvlN-q4fyaQM.roa (hash: B1QW0kYW/vc9myo+dQ6hlc6KwNH6CLoF8DBlRQKFt8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:68:4f:77:64:83:4e:fe:9e:4e:4c:70:6d:57:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=1b6167c9132788fce706f32cc5fda24591bb47df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9f:06:26:16:72:86:90:42:18:89:3c:73:39:
                    78:f5:5d:b8:79:56:b3:3f:3f:8e:7b:d6:0c:89:1f:
                    64:7b:3a:ba:66:6b:f5:4c:a4:d4:27:6b:3e:14:a7:
                    22:3b:56:f1:c9:12:83:f6:8d:15:84:fd:27:bb:16:
                    7a:98:20:ff:2a:37:41:d8:77:bb:1d:1f:00:af:e9:
                    8f:e2:81:2c:88:8d:9b:cd:ed:e0:67:0a:b1:8f:2f:
                    3f:64:28:20:e8:1d:c0:f1:a2:e0:97:ac:99:ba:ea:
                    31:10:fb:a9:18:51:7c:9b:ae:ac:97:78:8f:cd:38:
                    18:fb:91:e8:48:41:40:f6:14:b5:14:32:46:f8:ab:
                    7c:21:50:aa:71:7a:da:f7:a6:64:47:af:6f:2b:66:
                    40:da:80:fe:79:f2:de:a9:58:59:56:8d:b2:bd:c8:
                    20:ae:d2:b8:e2:17:a7:26:d1:88:73:1f:a0:49:41:
                    50:32:94:70:6d:fd:c0:17:15:70:f7:a1:aa:ab:ea:
                    c8:8a:19:f0:94:e2:67:f9:2a:8d:71:ce:62:fc:b1:
                    73:32:3b:7a:3d:1e:99:13:34:93:b4:4b:7e:71:37:
                    ff:8b:f3:d3:01:99:d0:f7:05:28:8b:d0:54:b6:2d:
                    74:3e:9c:99:47:be:0d:b0:cf:df:10:aa:cc:bc:ab:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:67:C9:13:27:88:FC:E7:06:F3:2C:C5:FD:A2:45:91:BB:47:DF
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:dc:10:c6:e2:8d:68:b9:73:d1:10:57:2a:06:77:26:15:
         a8:14:a7:bd:d9:09:7e:3a:c1:60:36:c3:13:dc:c9:f4:13:f8:
         92:79:09:17:a6:65:f9:79:5e:8f:59:e4:a1:f6:d1:f2:cb:4c:
         6f:83:0d:b8:b3:f4:d0:f9:e9:1c:53:ee:c8:61:79:7d:89:7e:
         57:de:2a:03:63:f7:08:93:4c:88:66:62:63:d8:c4:42:af:2b:
         81:e1:11:05:7a:1f:9c:71:02:4d:b0:d2:4a:2f:54:e6:b8:63:
         9b:04:7b:71:67:be:5a:ff:0d:71:b9:94:72:34:bf:9d:7a:51:
         fa:d6:5c:27:1e:97:ae:cb:7c:d4:d7:4e:9e:58:42:af:82:f7:
         08:38:2c:93:5e:22:97:82:1e:2d:33:de:2a:0a:af:f4:fb:75:
         ac:49:90:ae:20:7a:58:39:d1:ba:1b:48:6a:26:7a:21:ab:a8:
         eb:da:c6:66:c4:01:a4:b6:a0:6a:b3:8d:68:4c:97:07:64:ea:
         b1:2a:83:73:94:bb:be:fa:95:88:25:51:8a:ed:68:e8:cc:bd:
         55:68:31:bb:c2:ad:a1:90:88:e6:f8:80:91:fd:32:06:1a:ea:
         9a:31:e5:e4:a7:9f:8a:a3:7d:05:7a:5b:82:66:89:88:37:e6:
         79:28:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----