Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File:                     kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier:          T3GWFlXYCAyJBsvJqmZKrBobOk12e4w6BwaLQBwr6tc=
Subject key identifier:   40:A3:3B:4A:56:21:EA:70:9C:92:13:1D:A7:35:00:64:16:FF:27:02
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer:       /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial:       01962E2AEBCA12C18C95089CB2757076ED4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number:          132F
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: ZHYXv+6kKMMWmw27AjMih8A2lYOJh61iwGD8+fb19xE=)
                          2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:eb:ca:12:c1:8c:95:08:9c:b2:75:70:76:ed:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=40a33b4a5621ea709c92131da735006416ff2702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:ed:e8:69:77:51:2b:a0:45:34:73:d1:08:
                    ec:58:95:ae:55:dd:97:b8:aa:54:73:f9:e0:3e:7a:
                    38:1d:ff:09:79:c0:83:a6:75:15:49:1f:ea:14:24:
                    4b:6a:9e:3a:77:6f:d5:15:50:0a:64:4b:cd:2f:61:
                    a2:32:38:73:b1:4d:3d:dc:f4:9a:d0:9a:f0:88:38:
                    5a:b8:cb:09:5f:b2:af:97:da:66:fd:1d:be:22:00:
                    38:b4:60:71:7d:a9:34:69:a7:e0:c0:53:30:a3:ad:
                    44:a5:88:e9:9f:de:92:cc:e4:46:03:c0:99:c2:fd:
                    70:1d:83:1e:9d:45:67:66:e4:b8:ba:c7:3d:c7:de:
                    54:b9:d8:41:09:ca:a8:0c:23:ba:91:c8:d2:a7:a0:
                    d0:30:48:cc:fd:fd:8c:6c:41:ef:5b:4c:72:72:ad:
                    c8:bf:ea:5d:43:bb:62:45:19:d5:d8:09:de:87:b5:
                    f2:ca:75:23:86:b9:49:ea:d8:f2:43:4e:37:aa:3f:
                    16:bc:ac:8c:53:95:79:01:0c:f2:85:4a:1c:29:02:
                    a4:9b:fc:b6:84:62:be:98:8a:4b:ea:e8:a3:fd:d9:
                    8f:d8:8a:53:ba:e1:b8:65:d9:ca:1c:3d:8e:45:36:
                    41:ad:84:5d:c5:fd:f5:f2:f8:fa:62:fb:d7:2c:ab:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A3:3B:4A:56:21:EA:70:9C:92:13:1D:A7:35:00:64:16:FF:27:02
            X509v3 Authority Key Identifier:
                keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:0d:1e:1f:cf:78:a5:04:81:97:c5:ca:5c:d4:76:ca:bd:
         24:11:57:5c:83:cf:e1:ef:6a:9c:dd:a5:ed:9d:06:53:de:f5:
         38:14:f4:2b:de:65:d6:d7:7d:4e:ad:a5:a4:d3:b7:01:af:ad:
         b9:84:4e:3d:2e:90:c0:e8:6b:65:24:1d:10:c8:46:12:d7:96:
         d2:c0:af:af:71:5f:81:5e:e4:94:56:10:75:de:15:86:96:bf:
         e4:ee:e2:47:6e:47:71:32:f7:51:2b:98:33:4a:4c:eb:cf:2c:
         d6:e8:f7:a2:a7:c1:46:6c:d3:82:29:39:79:35:8e:70:e9:50:
         31:a2:5a:a6:b6:09:af:1d:68:40:82:f2:eb:c6:61:33:7d:88:
         7d:03:70:da:78:70:7c:2a:a9:65:9b:b5:03:86:df:d1:5a:9a:
         2f:0a:28:33:46:e3:31:d8:6a:89:37:e8:82:de:f9:af:1e:e9:
         04:88:a6:64:4d:e1:90:6a:e5:34:1e:59:34:4e:92:7c:b8:ee:
         ca:82:a9:81:f9:7b:09:76:82:e0:c5:68:d6:7f:d1:6b:8a:e1:
         34:c4:2e:05:5f:c7:f6:a4:c0:5f:c1:63:4f:a1:02:0e:0d:dd:
         e8:dc:c2:ab:7f:43:9f:ae:37:b4:9f:72:44:38:65:b3:84:09:
         db:a0:17:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----