Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File:                     KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier:          t3tJ4Hamwn5ETT81BxLQBHF/hUt+hpvvgaLqf2CdcEc=
Subject key identifier:   03:6C:9A:F8:E5:06:7F:C8:93:93:5D:36:76:BE:C2:DB:D1:C1:CB:7A
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer:       /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial:       01962F064D2B25F2A45CD7966D6C54107E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
                          2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: T8pMM+DZ5gjZ4zfUe3kcCbS2GfiIlmeREbZGgxxcW7Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4d:2b:25:f2:a4:5c:d7:96:6d:6c:54:10:7e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=036c9af8e5067fc893935d3676bec2dbd1c1cb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:3b:2b:0c:68:d5:9e:42:e5:d3:8a:8e:b3:
                    36:f8:76:de:58:db:5e:07:c8:a1:fe:4d:a8:e8:b6:
                    8f:df:29:3d:ec:60:c4:53:23:08:19:a4:d8:8c:95:
                    cf:02:a3:46:16:f5:fc:ac:ae:f2:19:0d:a1:49:49:
                    9d:c3:2d:89:1a:a9:0e:ca:5c:f5:42:ea:4d:4a:d8:
                    51:ec:7b:57:ab:69:80:cb:ce:40:12:9f:c8:e9:de:
                    97:8d:87:1a:94:1e:bc:9d:35:0e:37:6b:e5:72:d3:
                    c7:f5:04:33:6c:ca:fb:e6:c3:13:39:c9:a5:df:11:
                    12:29:66:46:23:72:4b:bf:52:bd:7c:1e:08:3f:f2:
                    59:05:df:2e:ff:39:92:6f:49:39:6b:60:3d:ec:f7:
                    ab:1f:ba:b2:69:61:55:d2:0c:75:39:3e:a6:39:db:
                    18:40:4c:b5:b5:cf:5d:57:08:ef:a1:59:e6:2c:c0:
                    c5:52:88:4d:27:4a:4e:1a:f0:e4:1f:6c:d7:4c:ff:
                    bb:95:96:5c:f2:62:54:74:ae:39:41:db:f4:72:a0:
                    26:9b:b5:c1:8a:6e:00:3a:c1:77:d9:2d:40:9a:54:
                    64:21:c7:3d:a2:a9:26:ec:68:78:51:3a:f0:3d:18:
                    bd:a1:25:48:e2:37:d0:e3:b7:20:44:17:71:bf:8e:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6C:9A:F8:E5:06:7F:C8:93:93:5D:36:76:BE:C2:DB:D1:C1:CB:7A
            X509v3 Authority Key Identifier:
                keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:8d:01:2c:98:c3:c7:99:02:e1:ed:c3:f0:ba:6a:59:a4:
         27:b2:be:f2:1c:4e:98:41:cd:5c:c0:be:44:d9:b8:0e:04:ed:
         55:6a:29:66:9d:b5:bc:35:e3:b1:ee:90:4b:3f:17:54:1b:4d:
         d7:d3:e7:64:aa:3d:59:dd:9c:23:1e:fc:f8:bd:41:f6:6e:18:
         cd:c5:8f:15:2e:a0:2f:b9:92:d7:f6:6a:ac:b8:a7:1e:3f:6c:
         2f:99:fc:d8:23:f8:88:74:a7:ef:1c:e3:e8:48:fc:dd:a5:d9:
         8b:87:0a:0a:5f:81:37:b1:20:bf:c3:5b:be:15:90:92:cf:1c:
         7c:f1:6b:c4:04:3e:84:2e:b7:ba:64:d4:2a:5d:43:93:a5:fb:
         6c:ee:2a:de:b5:30:92:07:d4:93:11:1f:21:97:0c:49:1f:b2:
         61:04:01:5a:4f:08:77:ff:13:fc:11:42:61:cc:52:ae:1a:6f:
         34:22:5f:89:47:22:3d:0a:74:17:7f:06:7f:29:20:96:67:08:
         71:29:f9:4a:f0:78:c3:bf:69:c1:84:75:ff:7e:4e:4b:19:0d:
         18:a0:14:fd:2e:46:d2:0e:39:1b:cc:cd:9e:41:f8:07:ba:ec:
         b2:20:d1:e4:4c:ca:74:25:44:30:dc:c3:8b:60:7f:3b:e0:9b:
         c2:73:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----