Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File:                     KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier:          p/q1j0sKFQ6/+idUxotwdL8g4ymd5+Y31qoo45pB0pY=
Subject key identifier:   0F:23:BB:37:20:B8:EA:0E:9A:49:CD:C3:27:41:88:9A:3B:CC:A7:78
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer:       /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial:       01962E989D317DC38E05187CE8554B31E4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: 8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa (hash: 27BFHjr8J4UtWYs76eZEJg2mPxJknmE0rT/irucN/h0=)
                          2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: CTmelOd4VZmzrQnwYoT7ClMQw1YnhZdhXUiSeARHa1A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9d:31:7d:c3:8e:05:18:7c:e8:55:4b:31:e4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=0f23bb3720b8ea0e9a49cdc32741889a3bcca778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:a4:c5:5d:70:c9:28:03:df:2b:5d:52:2f:
                    a3:0d:9a:3e:4e:78:8b:a2:bb:ac:1c:fa:73:28:1b:
                    7d:21:98:68:e1:f8:01:59:33:38:a8:55:a6:0f:c2:
                    f0:e5:1a:f2:16:38:e4:34:19:ea:7b:40:03:aa:b8:
                    27:72:db:9c:aa:66:41:2f:8e:48:06:6c:56:3b:aa:
                    5c:1f:f2:d8:a6:d4:eb:f9:2a:83:24:2c:b7:0a:d6:
                    bd:6e:13:c8:48:fc:89:bc:13:25:b6:d4:02:97:63:
                    75:a6:20:ca:99:ec:3f:e7:43:7c:64:49:fb:9f:2b:
                    03:0c:81:5b:74:d5:82:09:9c:5f:06:d8:49:c4:d5:
                    52:fc:0b:2f:e7:f6:03:d1:98:96:0b:ed:2e:14:f4:
                    37:8a:55:b6:a9:2a:76:36:79:23:58:e0:ff:ad:7f:
                    93:c8:a2:97:14:10:2f:fb:8a:01:73:4c:3d:11:98:
                    49:3c:44:87:c7:5c:2e:38:57:4a:a1:40:d2:8e:d7:
                    f9:be:20:80:0f:7e:9f:32:6e:cc:1b:85:bc:59:34:
                    1b:a9:11:50:e4:30:50:b9:0c:0a:0c:b5:f1:46:0d:
                    c1:52:36:89:d6:d7:74:27:19:ac:e0:fb:4e:9f:6c:
                    80:43:34:ee:07:94:ef:da:14:84:bf:e5:4f:f9:13:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:BB:37:20:B8:EA:0E:9A:49:CD:C3:27:41:88:9A:3B:CC:A7:78
            X509v3 Authority Key Identifier:
                keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:65:28:0f:1d:f8:3e:52:18:9c:af:66:11:65:00:66:a9:
         4f:97:ad:3e:c2:61:6d:c7:fb:25:a4:91:e4:76:a8:2f:59:9e:
         bb:20:bc:37:96:89:3f:2e:3a:e4:87:93:55:98:56:80:8d:c3:
         95:b9:5d:53:3d:04:cf:4e:00:0c:6c:9e:23:ea:35:2f:4e:a5:
         e1:7b:3c:b4:93:50:70:b7:7c:0b:25:00:2d:a7:3c:d5:31:c9:
         09:3a:35:17:c7:a0:be:26:32:bc:71:54:3a:93:12:17:3e:83:
         da:36:ae:4c:59:3b:f0:e8:f1:b0:4b:cc:c2:da:7d:02:b7:4c:
         f6:c3:fd:8b:d4:91:d5:01:09:ff:11:9f:3d:ac:76:b6:b1:21:
         8d:3f:2f:7e:2c:00:53:ba:86:06:33:0e:8f:2a:83:51:00:65:
         71:b0:80:30:42:72:81:b1:c6:4e:f7:81:b8:41:ed:0d:04:c9:
         38:dd:d5:c3:03:e7:89:80:40:3f:b1:e6:81:6e:a6:e5:66:05:
         28:b9:81:cc:74:06:59:c3:2a:2a:15:01:8b:54:a1:b2:8f:6c:
         d5:47:f7:96:ca:8d:a6:71:28:54:61:d5:67:e4:ec:86:26:59:
         0f:87:e3:18:27:04:58:f6:db:dc:e7:24:bb:b3:b2:fb:e6:d1:
         3b:5e:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----