Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File:                     KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier:          B+XGL84lP5Y9bqQw/nuE3ZjA1rb1FNsRxlVxvgH31VM=
Subject key identifier:   DF:B9:C7:22:A6:02:BC:FE:3C:D6:A2:72:8A:5F:D3:2F:4B:B2:85:9F
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer:       /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial:       01962E2AE9A5DEF36E99D788A318BFBCC79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:26 +0000
Files and hashes:         1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: o6U4qqEoNfrtLKoewDDlSf5OeKW84DKOdrqh28GyXXk=)
                          2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
                          3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e9:a5:de:f3:6e:99:d7:88:a3:18:bf:bc:c7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
        Validity
            Not Before: Apr 13 08:01:26 2025 GMT
            Not After : Apr 14 08:01:26 2025 GMT
        Subject: CN=dfb9c722a602bcfe3cd6a2728a5fd32f4bb2859f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:85:c2:11:6e:57:1d:af:05:0d:59:98:61:30:
                    eb:3b:d3:9f:b4:c7:52:e0:2d:5a:3a:47:15:6a:b7:
                    b4:b7:01:54:e0:5d:c7:b4:e5:ca:14:dc:a5:b0:8f:
                    6e:6d:b1:87:4c:fd:11:92:f4:23:72:ab:2f:a4:a9:
                    a7:c5:a0:f2:8d:f3:55:40:fb:eb:3f:e3:fc:35:54:
                    8c:7a:d3:cf:6c:fc:85:3e:f3:3c:8d:fb:15:6b:31:
                    e2:2e:64:d4:75:45:39:75:b4:03:a1:6d:ec:40:94:
                    7c:ef:61:e0:ab:4d:e0:3d:18:cc:07:13:61:ba:2a:
                    b5:e2:cd:5f:bc:3b:0b:1f:13:1f:eb:02:a3:85:c1:
                    8a:e8:35:9d:0c:2b:98:a8:61:64:98:61:d2:bc:0f:
                    56:61:4a:f6:fb:fa:04:8b:c9:67:1d:51:24:1f:16:
                    42:55:df:79:74:1a:33:3d:1b:f8:7b:76:c9:3a:f9:
                    4d:8a:63:3f:67:14:b6:51:65:87:1a:c6:5e:56:91:
                    c1:10:1f:60:1f:a5:2a:69:96:92:0b:4e:9e:70:7e:
                    bd:d7:94:01:40:58:14:ac:71:30:41:8d:d2:07:08:
                    c2:08:8d:df:98:af:53:eb:f7:ab:d7:ad:b9:96:d7:
                    5b:a4:68:98:9f:98:c6:f3:4f:8d:f5:42:56:ac:8b:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B9:C7:22:A6:02:BC:FE:3C:D6:A2:72:8A:5F:D3:2F:4B:B2:85:9F
            X509v3 Authority Key Identifier:
                keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:df:0b:47:a7:f8:ae:aa:11:fc:34:e9:0f:50:a7:0a:a5:68:
         e0:44:3b:40:16:1d:50:fc:bb:c4:d2:b4:23:9f:e7:43:9a:ac:
         41:52:aa:9f:3a:fb:f8:99:cc:c5:91:d2:09:ab:bc:3e:b2:85:
         ae:29:74:ce:7d:77:30:0c:94:f9:77:1b:c9:2f:d1:b6:38:51:
         19:de:64:0d:36:e5:c0:4b:3c:9f:84:02:cc:34:0c:f6:d5:e7:
         a3:80:57:5c:93:82:3e:6d:ad:ff:17:f4:08:7c:49:a4:74:7a:
         14:41:04:fa:b3:ce:16:c9:f0:76:2b:47:11:c2:9d:0e:f0:7b:
         5f:c3:32:3a:34:90:fd:75:0a:f0:f0:e3:02:4f:78:ec:e0:10:
         0b:62:29:74:ed:aa:33:b1:eb:e9:ae:69:4e:87:89:dc:1f:5a:
         40:9a:88:63:df:c3:5b:73:a5:00:b9:40:a6:1e:a9:bb:87:bb:
         f2:96:05:d3:90:c9:ce:54:e8:e8:ca:a3:0d:dd:80:42:54:ed:
         4d:1b:6a:78:9f:3c:68:e6:59:e6:97:93:dc:13:5f:72:ae:8e:
         4f:6f:a5:4b:e3:4f:0f:de:02:c1:21:44:89:6f:f2:d1:d0:59:
         e4:69:11:ea:36:1f:16:26:ae:92:0f:73:b5:65:49:8b:85:f0:
         7a:2d:96:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----