Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File:                     kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier:          nLh0j2AHss2r8V8AA8qNlQ41BNt68iZHLF+iL8LS0Co=
Subject key identifier:   89:F8:D2:44:C3:A2:52:F8:AF:33:65:E8:FE:27:A8:C5:2C:4A:CB:23
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer:       /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial:       01962DF4648B9B36AC7FD56F67DD8BB370F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:53 +0000
Files and hashes:         1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
                          2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: d8GE9ZNmkwk3X6DYnF6+Y2vpGKN7/Z3blRy8slpK7h0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:64:8b:9b:36:ac:7f:d5:6f:67:dd:8b:b3:70:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
        Validity
            Not Before: Apr 13 07:01:53 2025 GMT
            Not After : Apr 14 07:01:53 2025 GMT
        Subject: CN=89f8d244c3a252f8af3365e8fe27a8c52c4acb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:21:d4:52:ca:ba:39:54:cd:8b:6e:ca:86:
                    81:a3:a9:e4:c2:f3:1e:f3:74:e7:ff:c2:8c:29:0f:
                    ab:14:29:ca:71:d4:85:b0:1c:b6:38:f8:cf:0e:12:
                    d1:43:53:a5:1e:f3:04:cd:1c:16:5e:46:72:2b:88:
                    cd:dd:83:3d:00:b2:b0:76:d9:6f:88:a3:04:35:fd:
                    c0:47:ff:fa:d7:41:12:ac:c5:29:f3:48:6c:4b:95:
                    54:76:5d:af:03:6c:c8:1b:51:e2:52:5d:33:b8:7d:
                    a7:12:96:f9:6c:2f:bf:9f:2d:3c:aa:70:12:e3:14:
                    be:c2:dd:63:9d:4f:5d:cc:fb:c9:ec:65:68:c3:b3:
                    0b:93:e3:63:8e:68:f4:10:c2:e8:0e:bb:78:6d:01:
                    19:cb:bf:bd:34:5b:42:bf:66:71:94:4f:7f:a1:03:
                    0d:37:f7:66:fe:f1:dc:75:dd:20:24:0b:62:45:e6:
                    57:58:65:1e:01:54:4b:4d:ae:15:74:3b:08:4c:e1:
                    25:c2:3f:0c:bf:59:14:7b:7d:8f:c5:f8:7f:b1:2e:
                    5c:36:86:84:a6:93:93:1c:a8:62:57:d8:c8:59:24:
                    f1:a3:2f:e7:4a:26:db:87:62:d1:23:49:61:f3:4f:
                    85:65:16:df:34:20:ff:68:a7:dd:e5:70:a3:3b:7e:
                    ab:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F8:D2:44:C3:A2:52:F8:AF:33:65:E8:FE:27:A8:C5:2C:4A:CB:23
            X509v3 Authority Key Identifier:
                keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:56:e9:cd:b3:98:4f:fc:6f:7d:2f:94:69:3b:97:83:2b:17:
         a4:02:3f:b8:15:2b:5b:28:5d:d6:a4:46:1d:2c:a6:56:92:f4:
         1c:e5:c1:2d:b9:3b:16:61:a5:5a:74:9c:0b:4d:ed:c9:e4:42:
         71:c6:df:e6:a9:26:e8:ce:33:9c:9f:57:5d:72:ad:df:1d:cd:
         33:4b:95:da:5d:c1:07:c9:c6:58:fc:f3:3f:4e:a2:a2:c0:3c:
         7d:03:fa:cf:3b:ab:71:e0:06:a8:23:aa:e3:2c:7e:3d:b2:83:
         f8:5d:30:01:83:d1:7d:89:b2:76:be:e9:0f:52:62:59:c9:b2:
         d7:64:b1:a4:80:31:74:f3:3c:30:0f:55:5c:8f:87:fe:63:da:
         68:17:5b:d9:3d:55:b0:b2:4a:df:e1:e1:6a:c0:01:4e:c2:da:
         15:5a:1e:fd:99:26:ad:67:39:98:e9:33:20:f5:c4:81:15:dd:
         82:fb:19:05:0d:f7:7a:6a:32:63:7e:25:17:08:f7:87:42:63:
         5d:5a:eb:22:0c:b2:54:a3:ab:2d:80:77:91:75:6a:fc:41:36:
         5b:55:5b:06:dd:fe:11:fb:b4:35:4c:5b:29:9e:74:d4:9c:aa:
         45:69:0d:18:41:bd:44:85:f2:46:26:2c:be:b2:b1:2c:43:d4:
         06:0c:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----