Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File:                     ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier:          UNbDDjo8c3Jc38AbEY0V0yabcpMiIXOfoJA850MjpN8=
Subject key identifier:   EA:D1:80:05:B3:71:A0:FA:73:33:61:B0:EB:39:DA:02:FE:31:53:9D
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer:       /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial:       01962E98D3DFE751D870D9D11FCCE3C20A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
                          2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: GnzVgAtc90Xw2ImvIpT1VbEAq+RweOW/k8CRXZ3hmYA=)
                          3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:df:e7:51:d8:70:d9:d1:1f:cc:e3:c2:0a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=ead18005b371a0fa733361b0eb39da02fe31539d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:35:65:47:9b:89:07:e0:d6:0f:a2:f2:52:
                    85:0b:aa:4e:f8:f6:41:f4:7f:77:86:d5:af:18:80:
                    10:ca:dd:8b:a8:06:69:78:30:57:0b:31:2a:70:d4:
                    62:2f:31:1c:99:9f:db:18:f3:21:6d:8d:58:bc:2b:
                    33:43:f5:23:fc:a2:69:74:9c:57:dc:5f:d5:47:b2:
                    c9:86:e3:fa:b1:dc:45:88:47:79:14:6c:59:f6:00:
                    a3:40:14:b9:bd:e0:a3:b4:ab:7b:b5:72:c9:10:9a:
                    7d:eb:9a:9d:95:41:dc:7f:ad:92:f3:55:d7:87:81:
                    de:5f:35:c9:b7:2c:19:6f:af:79:e9:d1:1d:2d:e4:
                    91:fc:be:a0:5c:9e:d3:11:f6:c1:5c:16:49:6e:59:
                    54:a4:4c:81:aa:27:60:db:82:21:24:d1:ae:c6:16:
                    64:d4:8c:f9:2f:3e:c4:90:fd:5a:88:90:3d:14:9c:
                    fa:c5:a1:f2:df:c5:0d:9e:fe:7f:4d:73:e4:ff:4f:
                    3b:4c:9a:b0:90:7e:ca:d9:f4:0f:8b:d2:b8:92:05:
                    21:56:d0:d7:98:ed:50:cc:ed:03:56:09:c2:63:68:
                    12:af:18:94:af:3f:bd:db:6d:03:74:59:53:31:06:
                    ce:b7:29:91:a4:05:8f:a5:fd:67:9b:b0:b1:58:8d:
                    58:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D1:80:05:B3:71:A0:FA:73:33:61:B0:EB:39:DA:02:FE:31:53:9D
            X509v3 Authority Key Identifier:
                keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:df:0a:3c:85:d8:9d:1f:d5:ff:36:e3:c3:84:47:05:2a:f1:
         a3:35:76:83:cf:87:0e:7e:ac:38:70:50:4a:e4:06:b5:05:11:
         61:47:a5:2a:c7:1a:f1:a2:7d:65:60:db:4c:45:57:83:0f:8c:
         a9:a8:bc:d6:a4:86:c4:bb:3b:13:17:83:fb:93:c8:75:f2:82:
         4c:c0:dc:7e:6d:4a:e1:79:5e:8f:fb:bd:06:3a:23:cb:3b:31:
         70:54:42:5d:97:97:80:b3:73:c9:54:16:f7:14:2d:1f:0d:3a:
         35:e0:5e:9e:cd:81:5a:88:97:16:c8:54:56:ee:66:a3:0e:90:
         f5:58:72:7a:1c:92:2b:cb:0e:88:82:4b:82:75:71:9c:0b:f2:
         4e:9b:b7:f5:48:78:b9:fa:05:75:80:80:e0:0d:f0:6e:67:f8:
         81:22:69:34:82:ff:f5:91:0f:3c:f3:d6:fd:c0:53:49:61:fa:
         4a:bb:2e:7f:c5:4b:01:84:87:3e:1b:82:99:80:1c:4e:9c:fb:
         92:6a:ef:fa:a8:cd:65:fd:b6:0e:db:75:d1:29:c4:3c:70:56:
         16:be:5c:e8:9a:e5:6a:eb:f2:b7:e4:d3:69:82:b8:d0:8e:81:
         60:08:77:12:32:9a:5d:18:68:c1:9f:12:ef:28:e2:8e:ea:f5:
         5b:6f:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----