Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File:                     kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier:          rcJypIrqFoENDv74TuF1lM/iRwUbScFtcV0RRptm3rE=
Subject key identifier:   04:3F:B3:70:27:08:F8:7D:44:00:37:F1:D6:73:36:FB:A9:2A:D6:6A
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer:       /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial:       01962E2ACDB1309F9600D35D2F14ED725573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
                          2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: niNEdt9/6FpjaVgJCINPwOV1VjL1PctL4IzNe3o+Q3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:b1:30:9f:96:00:d3:5d:2f:14:ed:72:55:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=043fb3702708f87d440037f1d67336fba92ad66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:21:83:5b:99:de:5e:bd:62:d8:f3:bf:2b:
                    5f:65:be:2c:fd:c8:40:3d:0a:81:3a:fa:b2:fd:2c:
                    74:b7:a8:c9:6c:72:cf:81:15:cc:96:99:75:c7:15:
                    f1:6e:08:be:ed:a2:05:a4:b8:67:50:e9:aa:1f:d5:
                    d3:4f:97:b8:13:f0:d2:99:2b:81:e3:34:e0:e2:76:
                    97:d6:c4:44:1b:aa:2a:aa:09:a9:d4:2c:9f:d2:a9:
                    2a:97:38:7e:90:03:f3:9a:f9:70:38:e2:a7:ef:28:
                    35:3c:e8:c5:52:e7:2c:5c:08:d3:24:d7:bb:b2:e1:
                    6e:0e:a0:87:7e:90:e2:af:4c:9d:0e:ad:06:6e:5e:
                    ad:bc:89:ba:6b:29:19:1c:7f:4b:30:3f:3d:7f:06:
                    74:e2:5f:7a:b7:94:65:3b:0c:48:f1:4a:01:17:c0:
                    e9:c1:85:af:40:1f:7f:cf:dd:d5:05:bd:96:85:fd:
                    8e:c9:0a:86:2f:62:0f:8b:46:8b:2b:b2:08:12:71:
                    5d:ae:25:7e:05:67:27:6d:c6:b7:96:f2:a5:8b:ce:
                    b4:15:2c:b7:52:aa:8c:99:a5:2f:6a:b0:f6:f3:6b:
                    92:a4:b8:80:5b:6e:48:b1:e7:fb:e8:5f:03:4d:f9:
                    52:21:9d:ab:82:4d:9d:3e:3e:8e:30:49:9a:03:10:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:B3:70:27:08:F8:7D:44:00:37:F1:D6:73:36:FB:A9:2A:D6:6A
            X509v3 Authority Key Identifier:
                keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:03:ad:e8:7a:14:84:4e:10:1e:f9:c4:1b:36:b2:c4:10:
         33:79:8c:e4:f0:ca:ff:d4:98:80:af:b3:15:25:53:fe:7e:70:
         fb:17:78:ef:96:5d:4e:ac:5a:d4:35:26:53:b1:38:2d:4d:a1:
         fd:af:dc:fd:33:be:96:08:8a:b7:0a:79:48:2b:59:bf:25:49:
         c6:df:bf:7b:a5:47:cb:9c:bb:32:ba:d2:a0:d8:ec:8c:4b:d2:
         3c:15:9e:b4:9a:f9:f1:15:30:9c:78:db:99:f2:ad:78:6f:93:
         96:ec:5e:e2:4f:d2:22:b8:16:b4:5f:1e:40:71:6f:5b:61:7b:
         86:1b:e4:ab:a5:97:75:8b:b4:14:4b:66:66:f5:2e:8e:35:9e:
         a9:a6:7a:13:6a:d3:ec:99:a2:d2:61:53:81:8a:ad:65:75:a2:
         be:ff:91:8d:f3:ec:f0:13:02:25:71:52:6b:3d:44:93:64:d5:
         77:61:bd:5e:3e:89:63:45:a3:35:77:52:15:80:86:f2:9e:28:
         46:ef:45:45:c7:62:5d:21:86:fa:8b:ac:7c:6a:f5:8c:99:0e:
         a0:5b:82:1d:d6:92:83:37:4b:03:ba:ae:59:cd:cd:e2:fd:f4:
         79:df:96:28:1b:21:63:98:1a:c9:d8:79:20:7d:cd:7d:f5:a4:
         88:cc:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----