Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File:                     kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier:          aShS3NJpb8D9xT8XbUUUY8CB/rsffQdBJtfx5vOOAIc=
Subject key identifier:   42:E2:FE:BA:67:2E:1A:8D:12:8B:90:25:AF:C6:25:E0:87:A1:7C:36
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer:       /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial:       01962ECF834D17BBF022FDA01A801014FB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number:          0EBD
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
                          2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: VKyulmS/A+lwXYI5x8+HYz2OX4hiFtyVNscuMYu8fAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:83:4d:17:bb:f0:22:fd:a0:1a:80:10:14:fb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=42e2feba672e1a8d128b9025afc625e087a17c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:fe:a9:0b:00:19:7a:4a:76:e2:40:25:b9:
                    22:10:1f:ce:39:4c:2d:f2:6d:b1:1c:25:55:d6:f7:
                    ca:21:24:32:1f:49:c7:8e:59:2e:b1:8f:71:97:37:
                    62:56:cb:0b:85:fe:3e:34:10:c0:a9:1d:d9:0e:bd:
                    5d:c4:f4:57:27:b3:b6:83:6d:f7:bb:61:09:62:07:
                    a5:1c:0b:98:a8:7d:e1:1f:2d:63:68:ef:02:2e:a0:
                    20:98:49:c9:2b:7b:8d:43:90:98:09:25:37:ef:16:
                    9c:dc:50:6c:5b:e0:fc:da:3a:8b:c3:74:73:54:26:
                    97:e6:e1:f0:26:bd:1b:ec:51:1b:25:05:be:93:43:
                    59:58:08:16:25:56:ff:77:37:4a:5d:d4:4f:04:64:
                    f7:4c:d2:37:9f:aa:d2:78:8d:d4:43:d6:f7:42:d5:
                    7d:5a:b3:08:7c:fa:56:0e:be:6e:fe:12:5d:c5:e4:
                    12:d9:ed:30:47:51:61:b7:c6:68:72:74:14:b1:bd:
                    0b:f4:6a:e3:5c:e4:15:bd:4f:06:10:d6:dc:57:73:
                    e4:b8:bb:5d:7e:52:c4:40:68:63:ce:23:cf:5b:c4:
                    9c:5b:b4:24:b6:31:74:04:36:58:3e:23:cc:f6:52:
                    87:bc:05:4b:18:c1:f5:bf:b1:0f:1b:ee:5e:85:07:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E2:FE:BA:67:2E:1A:8D:12:8B:90:25:AF:C6:25:E0:87:A1:7C:36
            X509v3 Authority Key Identifier:
                keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:33:42:d1:53:43:4a:c2:90:2e:4f:04:1c:d0:55:3c:ec:
         5a:1f:c6:38:bc:f9:19:28:28:e8:5f:f7:26:79:b0:a1:06:d9:
         11:fb:da:d4:42:cd:ac:91:67:5f:40:0e:69:9e:24:59:9e:78:
         f1:ec:c2:83:53:61:00:b0:dd:7b:83:7a:03:ac:a7:fd:58:f8:
         c7:fe:be:ed:68:d0:c2:06:b9:94:09:77:7a:65:41:29:82:4a:
         fc:80:f1:54:7d:e8:19:8b:5f:28:73:95:6d:1f:ee:65:e0:db:
         8c:ba:b3:15:a9:9b:e4:e4:09:b5:d7:dd:16:94:ed:f7:ef:f2:
         6e:99:ea:6c:75:cf:34:18:b1:f8:72:3a:eb:a3:63:72:c6:e3:
         62:4d:b2:b7:d3:21:ea:b9:3f:cb:71:fe:ca:1e:12:aa:4d:20:
         ca:93:e1:20:a3:a8:f3:fb:4d:c3:25:fc:26:9c:5e:a0:64:3d:
         96:3c:1c:27:3a:26:85:b8:5f:4c:b3:5b:9d:57:15:22:89:97:
         83:05:76:f9:66:e2:6e:f1:97:85:91:10:21:04:1c:e6:79:43:
         ed:3e:dd:36:1f:0e:50:c1:37:f6:ee:0b:5f:25:3f:26:c4:48:
         50:ac:bc:81:37:e0:e8:f7:c0:1e:89:1d:45:6b:fc:4b:d2:2d:
         cc:e1:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----