Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File:                     kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier:          vD0e5LjMY4RCDKlICWP53sxXQ+Ng0lgtoZrlOWNbeOc=
Subject key identifier:   A5:DE:36:B3:63:3D:FD:97:29:70:1A:BD:13:DE:7E:27:99:C5:5E:7F
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer:       /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial:       01962E61C973F015D4D786FD09C669925415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number:          0F72
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
                          2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: xM/R1Mz69Ca8PTxxWUA8YXSOnuv+TiKAwvbV5QoiWOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c9:73:f0:15:d4:d7:86:fd:09:c6:69:92:54:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=a5de36b3633dfd9729701abd13de7e2799c55e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:1c:2d:69:d3:a8:e2:22:79:1e:89:68:50:
                    fe:60:c8:33:61:64:45:ab:b3:1f:d8:bb:d1:22:0a:
                    a6:5f:92:61:cf:59:f8:08:69:04:f1:2d:92:7e:90:
                    87:7e:e4:c4:0c:78:b7:2c:c0:1c:96:a9:e3:41:39:
                    e5:79:f3:59:d1:f0:5f:aa:62:29:00:6e:99:ba:3e:
                    d8:e9:c6:eb:e4:44:c1:a1:9e:e3:c5:1d:d5:17:8b:
                    16:98:a5:96:f4:bb:69:df:f7:ed:8a:cf:40:30:a5:
                    54:5f:2b:82:a4:25:19:4a:2e:50:8c:5c:3e:ea:c8:
                    d7:d0:5c:3b:d7:69:8c:f3:1c:d4:7d:75:8a:e4:e8:
                    e6:0d:82:6d:14:22:8e:a5:12:13:dc:ec:1c:18:ad:
                    33:a8:a7:ff:52:27:d9:d3:1c:41:e8:52:5a:dd:c4:
                    e9:08:b4:20:11:cb:63:40:06:42:5e:8c:bd:c5:48:
                    fd:7d:dc:bb:54:55:82:b7:7a:ab:b0:d7:d4:e4:c5:
                    13:df:2c:39:21:62:ec:40:1a:b6:4e:7a:42:ad:fb:
                    df:6f:79:be:b4:2d:f8:c6:fa:d5:ca:c1:cc:f7:c5:
                    fd:b6:a7:82:af:54:6b:c0:a8:c0:b0:4c:9a:4c:76:
                    00:9f:ef:37:ac:d6:e9:fb:8a:e7:66:04:ad:0e:54:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:36:B3:63:3D:FD:97:29:70:1A:BD:13:DE:7E:27:99:C5:5E:7F
            X509v3 Authority Key Identifier:
                keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:80:de:a5:2d:ad:95:26:e3:23:b2:2b:81:b7:98:ee:1a:17:
         36:71:74:9c:62:61:9d:21:71:f1:78:38:b5:f2:d1:44:b2:bd:
         17:62:02:6a:d8:94:28:7d:a4:30:e7:b6:ab:b0:e0:0d:56:c1:
         49:46:16:58:f8:c5:63:6f:1d:c5:e7:c7:ca:d9:f8:f1:4e:ac:
         e6:31:f1:78:60:4e:53:4a:e9:3a:b5:75:23:0a:bb:75:14:78:
         af:08:b4:9a:2f:2d:6b:9e:45:d8:2c:0a:f0:74:fb:80:74:98:
         88:6e:1b:52:ea:49:2a:fe:f7:b9:80:99:a5:ae:4c:a3:90:08:
         be:1b:dd:b1:a4:76:2d:d6:e1:f4:63:27:27:56:51:b2:29:03:
         30:5c:c3:04:9f:82:38:3a:33:44:0a:97:fd:e1:ef:a8:a0:fc:
         18:84:c8:49:c2:3e:ae:7e:b3:29:36:57:9c:a7:03:14:bd:19:
         66:7b:6d:3e:68:6a:43:15:ec:7c:39:8f:7b:a6:a1:8e:84:63:
         5e:0d:b6:ee:9a:4c:91:ac:08:f6:b0:30:c4:d0:0f:20:96:60:
         f1:3f:67:3d:7f:1a:fa:62:d9:68:1a:d0:76:ad:cb:f8:3a:d7:
         dd:81:41:33:ae:56:d6:89:70:4d:ba:d7:4a:d4:83:61:38:04:
         6b:ed:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----