Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File:                     Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier:          6W9NoXGBnPiTvWVzK8EkxWGP5in7M5JHHww11gxDbPw=
Subject key identifier:   58:0A:F7:30:7F:F5:29:0F:59:2B:55:AC:4D:0A:B6:EA:5B:A0:E1:3F
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer:       /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial:       01962F0692BCC2B7163D96637EA466C0C33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number:          050F
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
                          2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: Y5a/CDf1Nm4JYHo/W0VjGFOqAOi5ixnoGDmtWHoPZbE=)
                          3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:bc:c2:b7:16:3d:96:63:7e:a4:66:c0:c3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=580af7307ff5290f592b55ac4d0ab6ea5ba0e13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:66:73:90:ef:f1:d1:88:c9:2d:e3:f8:d6:ec:
                    82:79:a1:8d:53:d7:8b:2a:1d:23:ca:89:4d:91:dd:
                    ac:f7:6a:06:6d:5b:9c:e4:f7:d9:02:3d:3b:8b:ba:
                    e8:6b:7b:f1:c1:ea:b5:37:7c:05:a9:31:cf:8e:32:
                    b8:30:1f:f4:32:31:51:93:4f:04:3c:4c:34:bc:72:
                    f2:45:f0:e6:27:0a:27:e0:44:1a:23:6f:f3:8e:1d:
                    91:bb:91:5c:49:a0:d4:ef:14:ad:c9:d1:d8:09:8a:
                    c8:86:9e:50:ae:2a:58:f5:40:b1:9c:d2:be:06:a3:
                    84:2f:f1:a2:39:45:b1:b1:83:53:1b:5f:bd:7e:0c:
                    c1:d9:8d:47:11:15:e9:b7:32:d0:aa:d2:85:a4:bc:
                    95:d4:96:2e:ff:40:71:22:89:cc:b8:3f:9a:be:06:
                    79:7f:d1:00:39:a0:59:28:35:c1:b8:14:de:7e:fb:
                    f7:b9:1b:79:e6:eb:70:f2:d2:62:65:43:7a:89:be:
                    49:fc:46:a0:8d:14:11:6e:8d:5d:41:8c:92:3c:89:
                    42:17:e4:39:10:eb:99:44:97:07:fa:76:84:b6:01:
                    47:ce:e2:8a:a4:6f:70:1e:11:4b:b6:26:b7:0e:c2:
                    d6:7a:c4:7e:1d:06:7f:88:87:4b:66:e9:be:12:22:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:F7:30:7F:F5:29:0F:59:2B:55:AC:4D:0A:B6:EA:5B:A0:E1:3F
            X509v3 Authority Key Identifier:
                keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3d:77:3c:cb:64:5d:b0:8c:12:23:73:f8:f4:2d:46:7b:47:
         a5:54:54:ae:49:0e:03:1b:01:ff:d5:b7:db:27:4a:d8:35:ec:
         9a:42:07:28:6f:05:ad:38:d1:20:9c:65:9f:16:49:e6:40:dc:
         b2:c2:9b:54:d8:61:12:2a:1f:40:05:6d:d5:8a:b6:df:18:c8:
         80:dd:e0:59:64:95:5c:3e:bc:d5:e1:39:eb:0f:b4:5f:f2:db:
         13:51:fb:1c:a4:bf:7f:83:1c:53:4e:f1:e8:48:63:26:74:87:
         95:3a:ea:47:1a:fb:e6:4d:60:3d:cc:bc:c9:b9:ec:9b:8a:fd:
         bf:41:98:dc:33:2e:73:7d:5d:7e:84:c8:8a:fa:d1:cd:a7:b2:
         73:64:5f:16:17:58:19:ff:43:c2:6c:ec:c9:32:d3:a7:1a:03:
         86:31:f8:32:91:66:a4:a1:7c:ba:21:d2:7b:a0:8c:b2:59:23:
         f6:5f:11:fc:98:f7:09:e0:66:d7:22:79:21:76:07:1a:e0:df:
         33:49:9f:4c:5c:ea:52:cf:bc:74:5b:ea:d1:c1:9e:cc:6f:1d:
         ca:5c:35:98:2d:b5:3f:77:5c:c7:0e:9d:24:cf:a5:a2:b0:f4:
         e1:f4:57:70:6c:89:0e:d3:33:79:bf:68:25:39:6a:cd:4f:84:
         34:bb:1a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpK8wrcWPZZjfqRmwMM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmY4ZmZiZTA5ODkyMjA3MWYwYzljM2E2MGY1ZGZkY2Rl
NDZkYTQwHhcNMjUwNDEzMTIwMTIxWhcNMjUwNDE0MTIwMTIxWjAzMTEwLwYDVQQD
Eyg1ODBhZjczMDdmZjUyOTBmNTkyYjU1YWM0ZDBhYjZlYTViYTBlMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZzkO/x0YjJLeP41uyCeaGNU9eL
Kh0jyolNkd2s92oGbVuc5PfZAj07i7roa3vxweq1N3wFqTHPjjK4MB/0MjFRk08E
PEw0vHLyRfDmJwon4EQaI2/zjh2Ru5FcSaDU7xStydHYCYrIhp5QripY9UCxnNK+
BqOEL/GiOUWxsYNTG1+9fgzB2Y1HERXptzLQqtKFpLyV1JYu/0BxIonMuD+avgZ5
f9EAOaBZKDXBuBTefvv3uRt55utw8tJiZUN6ib5J/EagjRQRbo1dQYySPIlCF+Q5
EOuZRJcH+naEtgFHzuKKpG9wHhFLtia3DsLWesR+HQZ/iIdLZum+EiIIEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgK9zB/9SkPWStVrE0KtupboOE/MB8GA1UdIwQY
MBaAFCpvj/vgmJIgcfDJw6YPXf3N5G2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt
YzFjNGQ4Y2JmNDU5LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQtYzFjNGQ4Y2JmNDU5
LzEvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj13PMtk
XbCMEiNz+PQtRntHpVRUrkkOAxsB/9W32ydK2DXsmkIHKG8FrTjRIJxlnxZJ5kDc
ssKbVNhhEiofQAVt1Yq23xjIgN3gWWSVXD681eE56w+0X/LbE1H7HKS/f4McU07x
6EhjJnSHlTrqRxr75k1gPcy8ybnsm4r9v0GY3DMuc31dfoTIivrRzaeyc2RfFhdY
Gf9DwmzsyTLTpxoDhjH4MpFmpKF8uiHSe6CMslkj9l8R/Jj3CeBm1yJ5IXYHGuDf
M0mfTFzqUs+8dFvq0cGezG8dylw1mC21P3dcxw6dJM+lorD04fRXcGyJDtMzeb9o
JTlqzU+ENLsavg==
-----END CERTIFICATE-----