Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
File:                     CKkhe9gwYnyz5lfAuQY8giNN28s.mft (raw, json)
Hash identifier:          Iep0Gtuh/VweaQlHDKspk0RzmkKEoSd2GO5PvtFj6Ks=
Subject key identifier:   2A:CE:E5:ED:30:E0:01:28:36:96:55:B8:04:C7:FA:D2:A6:3C:1E:D3
Authority key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Certificate issuer:       /CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Certificate serial:       01962F068A5ECB98E3433EF8662AC7A16741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:19 +0000
Files and hashes:         1: 34veN2ucTJBbi388PrmLekhLRzM.roa (hash: zPkkR8nXQL9mfEVd+D/kn8bIVDt7EDLAoyKRPC1BVEk=)
                          2: CKkhe9gwYnyz5lfAuQY8giNN28s.crl (hash: ot3C0gQmGVfJtPjvGSPLRlm4yAaQp7ZkfAWmp7T8g9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8a:5e:cb:98:e3:43:3e:f8:66:2a:c7:a1:67:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
        Validity
            Not Before: Apr 13 12:01:19 2025 GMT
            Not After : Apr 14 12:01:19 2025 GMT
        Subject: CN=2acee5ed30e00128369655b804c7fad2a63c1ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:46:11:ff:63:e6:a7:56:5d:60:94:b3:93:
                    af:51:c0:33:64:ed:8d:08:64:10:71:e1:fa:3b:47:
                    3e:f2:26:88:fe:12:67:3c:94:2a:bd:29:8f:75:01:
                    83:87:0b:15:30:75:29:29:db:6a:da:72:df:f2:d8:
                    99:8a:70:b2:55:81:96:c9:65:77:de:e0:9c:1f:bd:
                    d6:c4:62:90:0a:ed:6c:eb:39:63:1b:85:61:0e:49:
                    a8:5a:b9:f1:1e:76:6a:20:97:e1:72:71:f5:e1:ac:
                    d6:8e:22:10:7a:8d:bd:0d:ee:5a:25:ad:da:6e:16:
                    70:d3:48:af:24:b9:1b:be:64:5d:3c:85:1c:36:7e:
                    74:cd:8c:c3:fd:97:33:10:cc:dc:61:8d:88:1a:e9:
                    9c:91:4e:f8:70:7c:0b:1e:68:87:89:46:cc:6b:c4:
                    25:98:4c:17:d0:ef:67:1c:a9:2f:3a:f5:47:da:fa:
                    10:bf:5d:ca:9d:63:9b:eb:28:ac:f1:a2:18:7a:88:
                    65:af:8a:9c:8f:1d:dd:9e:28:26:f7:f4:01:7b:51:
                    c5:7a:10:bf:45:9d:01:6b:fe:39:0f:1d:74:66:a6:
                    f2:a4:9c:6c:d6:7b:96:93:5b:04:ef:18:3e:ef:43:
                    2f:0d:76:f4:c3:6d:24:39:2d:04:7c:0c:ca:9c:70:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CE:E5:ED:30:E0:01:28:36:96:55:B8:04:C7:FA:D2:A6:3C:1E:D3
            X509v3 Authority Key Identifier:
                keyid:08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:61:dc:33:f5:b7:59:80:1d:63:87:57:6a:c2:5c:84:81:69:
         07:4a:a4:61:21:0d:ce:a6:5d:76:35:23:fa:be:d6:31:7d:d6:
         ca:4a:b6:6e:35:2b:f2:c9:f6:fe:bd:d3:b6:a1:24:e8:10:f9:
         74:95:6b:5c:3f:d1:f9:65:6d:ca:ac:5c:b7:7e:d0:73:18:f5:
         6e:ae:32:98:ef:d2:94:37:68:be:0d:7c:e9:c1:6a:c1:1a:c2:
         ff:0d:fa:0f:fe:e6:3e:43:ab:18:4f:c5:9a:4d:d0:98:ed:f7:
         9e:7d:49:ce:6f:bc:cb:b7:e2:19:b3:eb:10:e1:e0:aa:e7:a2:
         20:83:2d:89:dd:83:b0:9d:c0:87:ab:88:15:e9:87:13:33:95:
         1c:29:55:03:b7:21:22:f7:36:69:09:9c:9a:eb:41:a5:94:ad:
         70:cc:88:20:fa:71:4a:2e:db:a2:c4:23:f1:75:99:1c:29:86:
         5d:88:19:11:74:22:f1:d1:f4:ba:58:c8:a1:81:8d:bb:89:65:
         8a:74:61:5e:cb:ad:5b:be:9a:89:e1:29:ca:14:75:4a:51:4f:
         86:b6:b4:31:c0:5d:1e:46:fc:6a:ef:bc:1f:91:77:e0:e6:fb:
         4f:58:97:ef:62:2e:41:4e:4f:40:67:14:08:9a:3b:d4:57:18:
         ac:ef:5e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----