Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File:                     KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier:          XyVvEgaGh4HMCPVnlD+FFH5WtHixGxJZE+3Q7OU7Htw=
Subject key identifier:   8D:9C:B8:CC:59:9E:42:85:10:D8:15:F0:2F:CF:62:AF:63:A3:C6:53
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer:       /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial:       01962F0744A7A34B186447E60358F12CA569
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number:          06EA
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: FVbfc5fBsgcEW5rmL+/c1iBwhg37YrnEzAg+XwIC5JI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:44:a7:a3:4b:18:64:47:e6:03:58:f1:2c:a5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=8d9cb8cc599e428510d815f02fcf62af63a3c653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:ed:3f:a9:80:54:25:74:32:94:21:ef:5f:
                    c2:95:c7:9d:61:62:3a:fe:1f:26:f4:2f:4d:37:b9:
                    75:23:a8:f0:95:3f:6b:ef:2b:2d:77:9e:95:d9:45:
                    38:18:ab:42:74:00:2a:80:3d:2f:66:66:80:e8:1a:
                    79:a6:33:e6:e9:6b:67:61:2b:82:83:a2:5c:61:64:
                    03:d3:00:5d:b9:6c:4e:b8:cd:3d:ee:89:6d:14:21:
                    81:95:bf:85:dd:6a:79:6c:09:a5:12:64:b4:1d:97:
                    3e:f0:7a:f5:9a:2a:5d:c3:b4:6f:83:3a:7d:94:d2:
                    44:9f:cb:c8:7c:46:96:47:4c:a5:2d:b9:5d:87:7a:
                    97:4a:f3:22:61:f8:be:c2:75:b5:41:de:17:ef:5c:
                    d1:32:3b:0e:0e:17:e8:a4:27:3f:71:40:8e:73:78:
                    88:b4:a5:91:42:0e:7b:4a:e0:d3:89:09:a8:2d:dd:
                    c2:3e:28:54:98:9d:c4:3d:36:49:05:32:f4:ba:7e:
                    98:f7:0f:73:03:23:3d:b4:af:00:43:70:4e:e9:ef:
                    3a:45:d8:09:b3:42:3c:81:84:ea:b1:ed:f0:77:fa:
                    56:fe:ec:44:eb:6a:7e:89:66:b3:b1:cd:6e:ff:53:
                    2f:5b:15:cf:9a:03:e5:8a:bf:9b:40:54:67:29:9c:
                    91:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9C:B8:CC:59:9E:42:85:10:D8:15:F0:2F:CF:62:AF:63:A3:C6:53
            X509v3 Authority Key Identifier:
                keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:84:a9:d6:f1:ca:62:3d:9b:21:1d:7f:28:26:14:84:06:75:
         8f:18:db:f4:d3:c6:03:f4:ce:7e:88:91:9f:eb:39:3e:f6:e7:
         12:71:90:0c:6e:66:20:6d:18:d0:b6:9f:17:4f:49:60:7b:d7:
         70:73:cd:08:58:90:ed:87:51:91:17:37:c2:b4:87:6f:d5:fa:
         11:6e:ea:38:b6:88:13:ac:aa:08:87:76:1d:22:8a:dd:e3:16:
         04:ae:81:c6:0c:48:cb:66:99:38:a9:62:66:b2:22:af:37:1c:
         d9:fa:68:03:c4:56:1e:06:f5:35:77:b9:5c:69:25:4e:dd:36:
         0b:72:3b:86:fb:08:ab:c8:d9:00:e8:2c:ca:71:ce:36:fb:c9:
         6e:26:f8:a6:93:14:0d:d6:b9:a8:cd:07:86:61:23:92:dc:82:
         03:55:5a:27:f6:0e:6c:13:07:20:38:21:e6:6d:7e:de:07:fb:
         d0:e4:00:68:7c:7d:e0:c2:f5:62:f7:f7:c3:57:e2:e0:e1:cd:
         0a:52:4b:76:1c:99:17:ce:e9:7c:1a:38:d1:13:fa:9b:d9:32:
         84:21:db:a5:86:b2:1e:fb:3b:89:73:d1:75:8e:4f:b5:46:34:
         3e:d8:26:86:73:a9:f4:7c:fb:96:7f:3d:73:b3:b0:56:9b:50:
         d7:c7:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----