Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File:                     kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier:          YrJ98wHPuPTpXtblxK4Kv4kmrZoPkOpp10LpEP/Jv0M=
Subject key identifier:   60:FE:8E:6D:49:87:03:50:F0:B4:82:B0:1D:75:B2:61:FC:D8:B5:09
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer:       /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial:       01962F06EC0A0534039AD5F56BB812367F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number:          0896
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
                          2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
                          3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: 9qw5WRNri7h5jsfLIWNzKu79/LGGn2Fbpf+6y3dnq7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:0a:05:34:03:9a:d5:f5:6b:b8:12:36:7f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=60fe8e6d49870350f0b482b01d75b261fcd8b509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:f7:23:06:54:39:5b:c3:f7:fc:1b:b3:51:
                    40:f1:9d:1c:81:52:ed:1c:da:9b:5d:89:bd:61:f4:
                    8f:7f:a1:58:73:6e:bf:ad:9b:45:99:94:76:ee:20:
                    ce:81:ad:d6:02:b8:07:93:11:b4:cd:5d:f9:c7:28:
                    c0:6c:37:50:82:6a:74:51:e7:ca:f8:37:ca:11:76:
                    71:84:40:6b:58:8f:be:41:e9:4d:9a:5a:e1:b2:f9:
                    b6:8b:73:5f:96:a5:08:40:8c:44:91:8c:8c:0c:75:
                    3a:26:db:60:9c:1c:b3:71:cd:4b:7f:93:56:6e:be:
                    5b:a0:78:99:dd:bf:40:5c:47:f5:60:45:c4:2d:f1:
                    2f:e4:6f:40:8f:62:b3:53:d4:d0:77:25:f0:07:27:
                    3d:bf:88:68:91:f3:aa:38:d3:41:a4:a2:cd:59:85:
                    ba:9e:2b:39:21:e0:37:e7:0a:7d:71:72:b3:5b:13:
                    91:e0:b1:90:cc:d6:6a:32:e8:1c:71:77:63:00:1c:
                    fe:ae:43:2b:db:14:dc:c0:d3:75:c3:fc:49:1a:6c:
                    fb:bb:e5:01:2e:76:05:c3:42:07:4d:e4:d3:f2:9a:
                    1f:5c:c4:94:c7:30:70:04:71:81:91:c1:ca:b2:3b:
                    f9:35:d9:f9:b7:d6:e0:a3:e1:6f:63:bf:a2:69:12:
                    a4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:8E:6D:49:87:03:50:F0:B4:82:B0:1D:75:B2:61:FC:D8:B5:09
            X509v3 Authority Key Identifier:
                keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:8c:84:7c:0c:3c:e8:6c:07:d6:85:59:fe:4d:fc:f1:b0:
         10:46:fe:90:98:0f:88:da:66:6a:02:e4:db:7f:8e:9c:5c:67:
         9d:91:b0:61:f4:d1:d3:92:ce:5a:c1:5d:83:fe:7c:90:a7:80:
         c1:66:2e:b5:1c:93:8e:0f:7f:fe:c8:2e:74:72:53:52:14:7e:
         77:e6:9b:06:23:7f:19:30:51:cd:ba:df:cd:47:c9:54:d3:ee:
         2f:ad:b1:da:25:cd:d2:62:8d:97:58:13:18:d1:00:4d:ec:fe:
         7f:3c:3f:03:7a:c7:7b:d6:00:aa:e8:b2:9f:3e:e0:b3:10:52:
         5f:86:c3:ad:36:9e:70:c5:39:c1:05:9c:47:16:0b:24:57:c0:
         36:d9:6e:d6:9d:d4:c9:64:65:ec:b0:43:e0:15:16:88:af:8d:
         8b:9f:e8:bc:69:76:8a:f5:54:0b:50:1f:59:b1:0f:e9:ae:78:
         f9:e5:ab:99:22:2c:73:7a:b2:f6:b0:58:24:f3:a2:da:45:38:
         bc:4f:87:95:c6:1e:a3:2d:14:c9:27:ff:e5:23:f8:95:64:eb:
         49:84:0a:6b:44:b1:06:09:04:3c:f3:56:fd:11:6b:d1:d8:58:
         f9:e9:27:ab:4f:f8:8a:04:b4:d0:d2:85:30:50:52:3a:3d:fe:
         66:37:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----