Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File:                     KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier:          mHu/NdFiIIlr3N2n/qF6RCQHZY6H1rHTBnvGns693Lk=
Subject key identifier:   9A:2E:26:8C:37:03:3E:B6:09:53:48:8C:59:27:93:FB:60:14:C0:62
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer:       /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial:       01962E98EAC4742BE1D504D85053C5A65F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number:          0CB6
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: jnzBDiUGU4CNNpy2bFb86bMipVJ1sBH7N0VTBAVwbJg=)
                          2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
                          3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
                          4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ea:c4:74:2b:e1:d5:04:d8:50:53:c5:a6:5f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=9a2e268c37033eb60953488c592793fb6014c062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:2b:6c:5b:0e:36:90:55:49:c0:a0:eb:3d:
                    2f:1a:7e:7c:2b:19:d8:35:8d:9c:79:67:d8:9c:4c:
                    b4:46:dd:15:e3:2f:d4:bb:eb:2c:f7:10:46:a2:1d:
                    50:64:9c:fb:2e:e1:a5:9d:ce:48:ee:11:ad:95:f5:
                    f0:4f:61:ce:e8:8a:f9:ba:39:1f:5b:71:fc:0d:65:
                    47:99:ac:d6:bf:3e:9b:d1:fd:87:58:6a:14:93:f8:
                    83:4a:4b:0f:b8:c9:f1:87:a0:b5:73:f6:df:96:cb:
                    d8:ae:d2:34:37:4a:30:78:7e:53:12:91:5f:a8:a6:
                    a9:62:88:3a:1c:7b:22:72:3c:c3:0e:49:b2:b3:87:
                    ed:92:dc:fd:62:66:54:dc:5e:c7:9d:e2:c4:db:17:
                    91:93:6c:ce:3d:dc:ec:2d:1d:0e:8c:9f:e6:ac:68:
                    0d:46:3e:51:e8:85:54:1c:b2:e7:3d:d6:4c:0e:12:
                    e4:88:16:9d:7b:91:a1:70:39:1c:51:c4:ba:98:1e:
                    74:5d:7e:5c:ed:ef:7e:de:91:08:56:51:2c:d5:4f:
                    5a:d4:1e:ad:19:e2:ed:ba:d1:85:50:58:e4:20:9b:
                    a6:5f:6a:98:f8:05:c8:55:23:c9:2d:39:df:a7:b2:
                    a5:c0:06:06:34:6b:f5:05:12:e0:1a:19:13:83:3d:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:26:8C:37:03:3E:B6:09:53:48:8C:59:27:93:FB:60:14:C0:62
            X509v3 Authority Key Identifier:
                keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:f7:e9:57:84:5c:c5:9f:ba:11:44:a8:62:02:f5:d0:f4:
         9f:2f:bb:a1:b9:1d:1c:2d:95:ca:f7:23:3b:68:ac:92:4b:a9:
         2f:ff:bf:14:c9:d3:2b:6e:ea:a2:bb:93:fc:3f:75:7a:e3:b2:
         21:20:b4:c1:1b:2a:39:9e:9c:b2:6b:1e:5e:92:4f:34:71:a5:
         36:11:65:9f:01:56:2c:c2:f7:93:f8:66:36:f0:44:c8:5d:13:
         24:30:26:cc:ac:89:9a:5d:f3:62:3f:39:9c:53:6e:bc:be:56:
         df:17:38:ae:c4:07:85:8e:af:55:d9:58:26:df:ac:83:d5:15:
         4c:d3:3f:8e:18:47:b5:f1:dd:18:eb:a5:cc:2e:c3:05:b9:9c:
         19:6c:f3:b5:2f:f7:67:1a:9a:b0:a7:7b:2c:41:53:63:a0:99:
         d3:4c:fc:89:99:56:4b:e0:78:55:a2:4b:07:f2:80:bf:ef:5e:
         26:dd:b2:52:c9:13:61:fe:98:e1:74:44:fc:bb:a6:81:69:9d:
         ec:e9:c4:6f:fb:4a:d3:4f:a0:02:8c:16:35:fa:55:d1:0f:b9:
         7a:4f:8a:80:0a:62:6e:3d:e2:4f:73:32:0d:17:74:f3:ea:f3:
         7e:57:ce:3b:22:1f:cf:34:bd:cb:70:b8:9c:2c:57:a7:0b:36:
         a4:6d:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----