Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File:                     KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier:          iZLEHSGKSfLQqwJG2mOtGaCWEybt7EMLCX6ytR6o9z8=
Subject key identifier:   50:F1:0F:DE:20:A9:8C:C3:D5:AA:4B:04:39:17:04:74:BB:67:7A:26
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer:       /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial:       01962F74F33FE423FFCB6EA3CAAB09D2D2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 14:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:55 +0000
Files and hashes:         1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: s/ur4aQdF0v/LJNI/cL/LW6fUBeA3ngWuQIWa2sMfUY=)
                          2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f3:3f:e4:23:ff:cb:6e:a3:ca:ab:09:d2:d2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
        Validity
            Not Before: Apr 13 14:01:55 2025 GMT
            Not After : Apr 14 14:01:55 2025 GMT
        Subject: CN=50f10fde20a98cc3d5aa4b0439170474bb677a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:db:b1:be:c0:59:5b:f9:52:4f:09:e3:a2:
                    64:f1:9b:77:9e:a2:0f:ed:ed:c4:6d:c5:2b:82:7e:
                    44:66:27:f3:05:be:14:89:84:94:17:07:01:98:af:
                    56:51:c7:8a:d2:e6:3e:33:67:37:80:10:a6:75:61:
                    16:ed:27:8c:3f:b3:e1:a5:fa:f7:58:c8:e2:3f:fb:
                    b0:3a:75:9a:ec:9e:67:9e:90:1e:ff:8d:c2:01:25:
                    56:fb:43:c2:1f:9b:25:e7:0a:57:27:b9:69:d6:0b:
                    03:93:55:90:4e:92:67:89:d2:80:5b:0e:69:a2:04:
                    01:53:72:0a:bb:20:9c:5c:dc:f0:c7:f7:eb:90:e2:
                    35:74:0e:6a:96:55:86:7c:99:63:6b:f6:af:2c:01:
                    60:bc:66:da:99:4c:80:e0:55:81:db:b0:22:71:1c:
                    91:87:df:24:ed:ed:26:c3:60:e7:d1:5b:96:46:5b:
                    0a:93:dd:48:20:ed:f7:ba:31:92:e9:e6:f0:8b:a7:
                    a0:b6:42:5b:1a:e2:fb:f8:2f:58:a3:0f:1a:72:7f:
                    30:a8:59:ce:13:08:7c:f1:93:f0:23:be:68:36:04:
                    03:6b:09:bc:53:5c:da:d0:69:6a:7a:17:8b:1b:35:
                    f4:1b:a1:cf:63:ce:9e:c4:e5:f4:6c:81:06:20:3b:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:0F:DE:20:A9:8C:C3:D5:AA:4B:04:39:17:04:74:BB:67:7A:26
            X509v3 Authority Key Identifier:
                keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:34:98:17:44:98:db:d2:60:b1:a1:1f:91:4c:5a:bf:98:4a:
         88:a4:31:c6:4c:07:5e:6f:22:e3:79:0c:b3:f8:78:6e:8a:9f:
         25:02:91:1b:70:b2:20:f0:2f:99:bb:a8:1b:0e:bd:b6:c6:c5:
         19:12:22:78:89:db:17:aa:1e:9e:b0:44:4e:61:6d:d9:a7:d4:
         4d:94:13:ea:54:91:40:99:57:14:ba:7d:d7:a8:1c:c6:01:d4:
         9f:b6:7a:f9:c7:43:4b:80:18:2c:74:0c:c4:cc:1c:dc:b0:91:
         f2:61:4a:32:70:81:c8:a9:66:47:d6:00:60:cf:60:43:f0:ac:
         2e:9d:b7:b5:08:34:48:01:4f:79:af:d7:2a:ef:e6:10:9a:dc:
         ad:a5:63:29:ca:33:db:c9:a6:28:c7:1e:f1:a8:4a:03:11:b8:
         9e:0d:fa:b3:06:51:d3:71:c8:cf:d3:a3:1c:b1:3b:d6:d1:c8:
         35:e3:d8:87:33:71:ce:6e:3c:fa:93:c3:6c:af:95:c5:50:91:
         e1:78:e9:24:a3:86:ee:8c:da:9e:69:e9:69:a2:40:bc:35:59:
         43:18:23:4a:ad:4a:e6:dd:d7:4b:60:1a:94:cd:2c:e1:14:76:
         3b:41:84:5b:bb:1c:a8:3a:90:17:25:ca:7e:f7:03:5b:cb:9d:
         8d:ab:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----