Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
File:                     kpbYTmTVXsgSR2-4BvD-daCL-ys.mft (raw, json)
Hash identifier:          oR4fL/Lz0Lu0Hr/4rdPmcNA/Xyw2CjA+7QPF63qf7S0=
Subject key identifier:   B3:4F:93:30:12:E2:32:F6:7B:3E:10:90:CF:1C:48:DB:C0:CC:E0:90
Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
Certificate issuer:       /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Certificate serial:       01962E98D26079934E5132EEB6F59F4C9998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: kpbYTmTVXsgSR2-4BvD-daCL-ys.crl (hash: 7NgrCD5gBaSQyF36aJRGWTNKnWRvFQt4KnQsWW8GcoA=)
                          2: r4bjJ2cCOInhIlG1f9hIdTm3g6M.roa (hash: aZToxg96BEY8Qvj4uVJxCXKyOgQmRt2zg6OKjNY/eQ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d2:60:79:93:4e:51:32:ee:b6:f5:9f:4c:99:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=b34f933012e232f67b3e1090cf1c48dbc0cce090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:8f:80:72:07:97:26:a6:e3:e7:1b:a0:1f:
                    7a:4d:c7:24:c6:13:37:6c:45:12:6e:bd:9a:ed:18:
                    7a:d9:9f:01:5b:4c:f2:04:e0:4c:fe:4e:fc:0b:b7:
                    5a:43:8e:e4:b3:5a:c4:a6:5b:9c:8d:4d:e5:f0:7a:
                    b5:7b:86:b3:be:fc:b6:a0:10:68:65:4e:af:29:49:
                    40:78:46:a9:71:15:bb:b4:f8:b1:c1:07:70:63:5d:
                    26:93:79:93:6a:c0:e7:96:29:02:3e:57:6b:a3:d9:
                    28:d8:c5:f7:5d:ab:76:e1:47:d6:c8:6f:3f:0f:5c:
                    7f:3b:fa:c7:ab:dc:1a:b9:61:4e:7a:16:74:b6:5e:
                    e5:d8:29:79:4a:da:1f:60:d1:c6:f4:cb:72:b4:a2:
                    6d:b8:b3:1e:21:2e:99:26:0f:ce:4e:fb:0b:0c:86:
                    80:6a:cb:0d:78:e6:aa:19:c3:58:96:89:08:d6:84:
                    5a:85:9e:e5:57:66:06:47:98:6d:81:8e:b1:06:5b:
                    f4:76:cb:0b:45:79:b6:0a:4f:50:e1:4e:9a:54:46:
                    83:ac:20:38:29:e8:3b:fa:f2:96:e1:d9:92:00:1a:
                    9b:3d:ce:70:31:d8:4b:14:c2:b4:0f:16:1a:fb:22:
                    a0:5c:46:79:b0:a3:34:21:8e:98:fa:bc:39:82:1e:
                    94:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4F:93:30:12:E2:32:F6:7B:3E:10:90:CF:1C:48:DB:C0:CC:E0:90
            X509v3 Authority Key Identifier:
                keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:46:82:ae:ff:3d:63:bc:60:c0:5b:42:dd:d9:a4:0c:07:85:
         ca:95:99:a3:c5:b2:55:e0:9d:75:e2:a3:f0:8c:3f:d5:fc:84:
         38:4c:f4:d6:24:a5:02:03:81:0f:dc:71:82:8f:5d:3f:93:e1:
         0c:96:86:ae:ee:33:68:ce:b5:b8:19:6c:ca:ad:d2:f5:a7:b4:
         1e:ad:62:b2:28:d7:72:f2:4f:6e:a7:43:78:9a:8d:04:27:fa:
         7f:ae:ff:9b:1f:98:84:3a:62:e1:b5:22:4a:f7:fe:87:84:47:
         fc:8a:a8:3b:04:46:05:d1:47:52:66:cb:1c:a4:7b:89:51:54:
         dd:f9:26:25:a5:9a:95:b1:1d:eb:4a:2d:c0:db:58:9f:7f:59:
         6d:d1:fa:d8:bc:61:08:97:4a:3a:ee:cd:d1:44:a8:a2:75:72:
         51:7d:1b:fa:34:9b:ff:52:90:80:d1:22:0a:55:80:01:3e:78:
         47:bb:c4:4d:df:6e:78:59:00:47:36:ca:4a:a0:c3:8c:f4:3c:
         9d:92:12:0b:d1:b2:5d:52:70:a9:76:b1:17:df:f1:5b:3c:eb:
         fd:35:64:87:93:bf:bb:ab:73:26:f9:ca:33:4e:7f:3c:97:ee:
         1c:c9:75:b1:0b:3f:fe:1b:5c:1f:dc:a4:72:2b:d6:0a:34:c0:
         4e:51:c0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----