Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
File:                     knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft (raw, json)
Hash identifier:          WrUvo6KOArvuF504OYOQ8R49aXIfwcVBh4i3cPPvn3c=
Subject key identifier:   32:51:EE:02:0E:BB:C1:37:40:13:12:38:18:35:74:3B:31:C0:E3:73
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Certificate issuer:       /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial:       01962FAB165E59D241C8D34F48FAED597977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: ZZutCOlh3Ali7o57VArVQ-r6xEQ.roa (hash: Z8oFv1O8k+i1SuyJDIP9mmTPP/Uv75FEkkBOgolEt4M=)
                          2: knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl (hash: wJ+Svpv/kz4BpBMQVHhG8OfpgfRN+79m3co6yDXZPds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:16:5e:59:d2:41:c8:d3:4f:48:fa:ed:59:79:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=3251ee020ebbc137401312381835743b31c0e373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:08:a4:38:c5:20:08:9b:a2:05:6e:fa:55:
                    60:6c:ef:54:31:aa:a9:cb:eb:92:97:53:c3:c6:fc:
                    e7:b0:7a:a1:fa:b7:a8:4f:5d:44:21:fe:9d:84:9c:
                    a6:9d:c2:09:a0:db:b9:81:53:a1:b5:be:bd:03:ad:
                    f8:3d:7c:cb:fe:8a:1c:cf:c6:6f:b5:51:72:ca:c6:
                    d6:c6:33:2b:ab:fa:65:e7:27:e4:61:c5:0a:09:5b:
                    f1:4a:ea:8c:8c:79:06:0a:6c:8f:59:c4:64:23:74:
                    54:dd:61:31:76:ea:4a:bd:f8:8d:e4:9d:f1:c7:8f:
                    1a:88:63:64:ba:d8:2c:c1:a4:f2:02:5e:f7:91:74:
                    c9:54:94:b5:20:53:4d:53:52:c7:71:19:8e:a2:f9:
                    bd:63:9f:bd:3a:97:2e:66:41:c5:6e:09:32:cb:81:
                    b2:4a:f4:5f:fd:34:4f:4f:14:c2:de:c0:3c:74:e9:
                    3b:17:6d:05:f6:9d:98:df:d6:82:8d:b3:26:e1:50:
                    4e:0a:af:fc:23:16:ba:e6:85:f0:9d:78:50:d7:17:
                    67:e0:0d:dd:17:65:b7:ac:5d:42:c3:97:b4:76:e5:
                    7e:d0:1c:91:a9:5c:7c:b6:3c:d7:1a:be:d7:6c:26:
                    e1:85:96:93:8a:34:e3:e0:99:82:3c:66:8b:1d:93:
                    27:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:51:EE:02:0E:BB:C1:37:40:13:12:38:18:35:74:3B:31:C0:E3:73
            X509v3 Authority Key Identifier:
                keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:5e:ec:60:f8:7f:49:0c:c6:c0:79:e6:9d:2c:37:ee:5a:
         c5:d3:80:96:8c:f0:1a:31:b7:9d:79:e6:be:3a:e8:f7:d8:9c:
         e7:59:f7:e0:6d:e2:8b:f0:09:34:da:c6:1d:a0:1e:69:d1:be:
         e9:57:7d:52:57:02:ea:3e:de:bb:7a:e2:9d:08:e8:99:a9:c5:
         74:a5:19:c4:2e:e7:67:2f:6d:28:bd:8e:5e:dc:c6:92:41:93:
         53:1d:6a:ae:f4:3e:8b:c7:79:9d:41:60:4c:25:bd:51:de:e7:
         e7:eb:70:53:28:b8:fb:89:f5:08:d8:cd:80:4d:5f:50:76:47:
         48:84:8c:99:d9:ff:be:f1:20:e0:c6:c4:17:27:f5:80:ee:7b:
         dc:03:41:32:e7:b3:db:d5:7b:80:29:6e:d9:6c:88:93:70:23:
         a9:7e:de:30:c9:2d:dd:df:5c:dd:88:de:2c:ff:01:b5:ee:2c:
         07:b6:40:69:3c:86:00:ec:89:c6:05:77:1e:55:60:b5:a1:20:
         96:bb:34:fc:c1:ac:47:a1:62:69:01:9a:a1:31:e4:3c:3c:71:
         09:cb:70:10:8a:c4:21:1a:c2:ba:5f:cc:97:53:33:72:95:49:
         cf:54:a1:a8:29:96:28:eb:c2:e6:eb:89:56:e4:88:0a:50:df:
         86:18:7f:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxZeWdJByNNPSPrtWXl3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2IxZTU2YWM3ZDA3ODAyYzQ1NjdjNDY3OTQzNTE1OWI0
MjIwOTYwHhcNMjUwNDEzMTUwMTAzWhcNMjUwNDE0MTUwMTAzWjAzMTEwLwYDVQQD
EygzMjUxZWUwMjBlYmJjMTM3NDAxMzEyMzgxODM1NzQzYjMxYzBlMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq4IpDjFIAibogVu+lVgbO9UMaqp
y+uSl1PDxvznsHqh+reoT11EIf6dhJymncIJoNu5gVOhtb69A634PXzL/oocz8Zv
tVFyysbWxjMrq/pl5yfkYcUKCVvxSuqMjHkGCmyPWcRkI3RU3WExdupKvfiN5J3x
x48aiGNkutgswaTyAl73kXTJVJS1IFNNU1LHcRmOovm9Y5+9OpcuZkHFbgkyy4Gy
SvRf/TRPTxTC3sA8dOk7F20F9p2Y39aCjbMm4VBOCq/8Ixa65oXwnXhQ1xdn4A3d
F2W3rF1Cw5e0duV+0ByRqVx8tjzXGr7XbCbhhZaTijTj4JmCPGaLHZMnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJR7gIOu8E3QBMSOBg1dDsxwONzMB8GA1UdIwQY
MBaAFJJ7HlasfQeALEVnxGeUNRWbQiCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTIt
MzY1MzQ3ZjQxNmMwLzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMTFkZWEtMzA1ZS00ODk4LTkxOTItMzY1MzQ3ZjQxNmMw
LzEva25zZVZxeDlCNEFzUldmRVo1UTFGWnRDSUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB5e7GD4
f0kMxsB55p0sN+5axdOAlozwGjG3nXnmvjro99ic51n34G3ii/AJNNrGHaAeadG+
6Vd9UlcC6j7eu3rinQjomanFdKUZxC7nZy9tKL2OXtzGkkGTUx1qrvQ+i8d5nUFg
TCW9Ud7n5+twUyi4+4n1CNjNgE1fUHZHSISMmdn/vvEg4MbEFyf1gO573ANBMuez
29V7gClu2WyIk3AjqX7eMMkt3d9c3YjeLP8Bte4sB7ZAaTyGAOyJxgV3HlVgtaEg
lrs0/MGsR6FiaQGaoTHkPDxxCctwEIrEIRrCul/Ml1MzcpVJz1ShqCmWKOvC5uuJ
VuSIClDfhhh/Zg==
-----END CERTIFICATE-----