Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File:                     KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier:          kzMW3ocNGymTd54ux1Zo2w9H1crsyPhGvOw9jq+P6ro=
Subject key identifier:   77:E4:9E:FB:58:E5:C5:AB:7B:62:A5:F3:16:65:9D:AA:C2:02:07:42
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer:       /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial:       01962F06764140EC547931D22751B831D6ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number:          12C8
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: 4ndqIYJG4WXu5u0b2M1H0Qo5QyVBaBsO/ZrK9fgz64o=)
                          2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
                          3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:76:41:40:ec:54:79:31:d2:27:51:b8:31:d6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=77e49efb58e5c5ab7b62a5f316659daac2020742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:bd:f4:be:2b:3f:cc:ec:82:78:1a:df:30:
                    74:19:f5:5d:dd:ce:21:3e:a7:ae:d9:ea:60:49:e9:
                    ec:f5:76:ca:4c:87:25:e4:47:5f:2a:53:ed:13:ba:
                    cc:80:47:ac:4e:63:cf:f6:f3:8e:8a:3d:60:85:9e:
                    0a:ba:b5:f1:d8:23:e6:05:00:ca:07:73:ab:15:73:
                    00:fc:66:4a:1b:53:76:16:b6:ab:b4:d5:98:11:2e:
                    8c:08:21:59:e9:31:96:dd:16:d4:d8:d4:0b:fb:fe:
                    d2:8a:ab:a9:a9:f2:53:9e:37:73:c5:a5:50:24:76:
                    00:53:78:b1:47:bb:f2:52:3a:a9:72:38:ec:ed:b5:
                    69:96:5c:46:9a:17:f1:0a:b2:ed:0c:9f:a9:20:d4:
                    b6:67:e2:ec:c1:4d:21:4c:ab:7b:71:4e:3c:5a:89:
                    19:06:8f:c4:65:a2:a0:9b:88:ce:54:69:45:b2:44:
                    11:7d:bc:b1:75:e2:5a:21:f4:7d:98:18:4e:d9:2e:
                    48:6c:63:b0:82:b9:03:f0:38:23:17:f8:c9:6e:44:
                    f8:87:48:12:70:2f:b1:d3:35:78:37:2a:0f:29:54:
                    76:e8:1f:e0:2f:fc:fc:88:f0:0d:66:af:0b:0c:c3:
                    1d:5a:aa:8f:ba:4a:24:66:80:fe:75:0f:e8:0c:d0:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:9E:FB:58:E5:C5:AB:7B:62:A5:F3:16:65:9D:AA:C2:02:07:42
            X509v3 Authority Key Identifier:
                keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a5:12:f2:5e:9d:63:8f:76:23:40:f0:03:7b:ba:f7:47:e6:
         44:4e:2b:a5:e7:88:ee:3f:ee:1a:23:76:b3:e9:df:3b:d8:2b:
         64:3c:1e:ae:d8:7c:d5:b2:cd:b1:d1:64:07:fb:b6:12:84:be:
         1a:66:05:7b:63:97:8b:d9:bd:ab:d2:49:84:6f:1b:cb:6f:06:
         12:1c:ad:2c:31:dc:c9:98:61:82:5a:3c:00:5c:53:22:06:46:
         0f:8b:d9:6d:eb:84:da:b7:f4:b5:84:cd:0e:14:a0:79:d3:d7:
         31:3a:61:77:0e:3f:f6:78:23:d2:72:18:81:75:d1:43:b3:99:
         2c:a0:9d:01:6b:2e:dd:0a:80:ba:dd:65:da:ac:ec:d2:d0:c8:
         b4:8c:5b:26:17:88:c8:86:df:7b:37:7b:b4:c7:e1:c1:ed:d2:
         6e:4e:f2:81:81:51:a1:21:53:bd:2b:54:2e:8e:aa:7e:5e:37:
         1a:fd:a0:2f:da:13:ca:61:cd:eb:e1:52:e4:29:18:27:6b:24:
         23:67:a6:31:a0:d5:fa:33:3d:7f:73:30:8c:ca:4d:96:64:3e:
         db:df:fa:a4:ee:86:b9:be:5a:65:b8:a0:e6:78:e8:14:0c:9d:
         83:4d:af:b7:e1:16:af:2f:bd:82:55:18:89:2d:4d:79:02:88:
         16:c0:18:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnZBQOxUeTHSJ1G4MdbtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODUxYzZmYzZlYjM4MTZlMTE2YzhhNGE4NTFkMGQxNzhj
OTBmMzEwHhcNMjUwNDEzMTIwMTE0WhcNMjUwNDE0MTIwMTE0WjAzMTEwLwYDVQQD
Eyg3N2U0OWVmYjU4ZTVjNWFiN2I2MmE1ZjMxNjY1OWRhYWMyMDIwNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwS99L4rP8zsgnga3zB0GfVd3c4h
Pqeu2epgSens9XbKTIcl5EdfKlPtE7rMgEesTmPP9vOOij1ghZ4KurXx2CPmBQDK
B3OrFXMA/GZKG1N2FrartNWYES6MCCFZ6TGW3RbU2NQL+/7SiqupqfJTnjdzxaVQ
JHYAU3ixR7vyUjqpcjjs7bVpllxGmhfxCrLtDJ+pINS2Z+LswU0hTKt7cU48WokZ
Bo/EZaKgm4jOVGlFskQRfbyxdeJaIfR9mBhO2S5IbGOwgrkD8DgjF/jJbkT4h0gS
cC+x0zV4NyoPKVR26B/gL/z8iPANZq8LDMMdWqqPukokZoD+dQ/oDNDdiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfknvtY5cWre2Kl8xZlnarCAgdCMB8GA1UdIwQY
MBaAFCiFHG/G6zgW4RbIpKhR0NF4yQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQt
NTI0NWIxMzUyMjFiLzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQtNTI0NWIxMzUyMjFi
LzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaUS8l6d
Y492I0DwA3u690fmRE4rpeeI7j/uGiN2s+nfO9grZDwerth81bLNsdFkB/u2EoS+
GmYFe2OXi9m9q9JJhG8by28GEhytLDHcyZhhglo8AFxTIgZGD4vZbeuE2rf0tYTN
DhSgedPXMTphdw4/9ngj0nIYgXXRQ7OZLKCdAWsu3QqAut1l2qzs0tDItIxbJheI
yIbfezd7tMfhwe3Sbk7ygYFRoSFTvStULo6qfl43Gv2gL9oTymHN6+FS5CkYJ2sk
I2emMaDV+jM9f3MwjMpNlmQ+29/6pO6Gub5aZbig5njoFAydg02vt+EWry+9glUY
iS1NeQKIFsAYKg==
-----END CERTIFICATE-----