Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File:                     KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier:          wg0LtuWUpdgBDiEtZfoEBSaSOvGeNXDcQV0dCupOE50=
Subject key identifier:   31:36:A8:94:53:87:23:24:67:2C:FE:45:9E:A0:65:5D:31:F9:E6:E8
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer:       /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial:       01962E995DDABB1894ECCBEFBEAC81017B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number:          0C75
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: ufY4js6jEvBatRaABx1uCLMrqlN+G2xaio5MbYljyxM=)
                          2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
                          3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5d:da:bb:18:94:ec:cb:ef:be:ac:81:01:7b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=3136a89453872324672cfe459ea0655d31f9e6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:dd:00:87:e4:96:56:d5:08:20:d1:38:39:
                    b5:65:79:8c:0d:cc:bc:72:b2:b6:33:cc:b5:3d:81:
                    45:84:f1:5a:99:2f:ce:84:a6:fc:52:3a:17:0b:a0:
                    3c:a5:54:60:0b:7e:14:2d:bc:7e:75:b8:0f:8e:bf:
                    93:55:ad:f6:4c:e1:cd:99:dd:f3:0f:a7:9d:a3:54:
                    fb:2a:79:fe:51:9c:1a:39:8d:53:c2:d0:10:f2:9f:
                    6c:a2:70:44:4f:2f:d0:6e:fc:4c:54:be:ab:c7:2f:
                    19:d0:3e:d5:8f:1c:fe:da:e3:93:38:74:8e:9d:49:
                    84:0a:9e:66:3c:57:30:6f:48:c5:25:83:e1:3d:64:
                    c9:76:a6:d4:d3:01:06:a7:b5:74:35:9a:53:df:dc:
                    76:4c:6f:11:ef:6f:1b:ab:da:71:37:41:11:b0:b2:
                    d4:a4:df:3d:87:66:d5:7d:f6:b5:c5:54:42:aa:3d:
                    c4:ef:73:3d:3f:ee:77:82:7a:32:be:31:f4:65:54:
                    4d:6e:68:ca:0d:21:3e:63:34:45:34:02:b9:ce:43:
                    c7:3d:40:db:5b:7b:91:b6:c8:18:ad:27:e0:62:a7:
                    41:a9:93:dd:4d:ed:c9:19:06:3f:00:1a:09:79:6c:
                    0a:cd:b7:6d:a1:8b:11:fd:66:90:c6:49:8a:0b:71:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:A8:94:53:87:23:24:67:2C:FE:45:9E:A0:65:5D:31:F9:E6:E8
            X509v3 Authority Key Identifier:
                keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5b:1c:73:8b:3d:21:dc:2e:23:61:e8:38:b1:9c:8c:ff:a5:
         de:97:7a:ad:7e:bc:8e:69:7d:f5:18:7a:e4:eb:80:cb:9c:47:
         42:fb:65:9f:ee:bb:bd:5b:d9:34:a4:f2:59:01:23:b8:37:54:
         b4:52:a5:b6:c0:93:77:1b:36:24:07:96:da:48:1e:ad:90:0a:
         04:15:21:fa:fb:e0:e5:4e:e9:7a:1c:18:3b:a8:85:c1:7b:b3:
         5e:d5:ef:87:43:46:14:de:b0:1d:03:e5:a0:a6:9b:86:63:fb:
         a1:25:2b:c8:b5:9c:18:8c:13:fd:e2:9c:d4:ed:9d:3e:ce:af:
         7b:dc:e2:53:89:17:fd:0b:39:2e:5e:d4:d8:c5:e1:ac:5c:ab:
         65:b2:60:4d:fb:f5:8f:aa:26:d2:39:86:01:b5:9f:d5:e6:25:
         d2:0e:34:fe:69:60:e1:ee:d8:59:76:82:90:bb:7c:68:e5:42:
         a8:50:41:c9:49:7f:6d:e4:e0:58:37:18:21:24:a4:c9:45:89:
         ee:88:e8:b4:7f:0d:d5:ae:22:c3:70:b2:0d:27:16:8a:86:e5:
         eb:fb:f4:0e:c0:e5:2d:27:0c:db:5c:82:fe:2f:83:b7:22:d3:
         91:65:c8:0f:af:b0:93:b3:f3:66:0b:de:7b:51:ae:57:9f:8f:
         43:a1:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----