Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File:                     kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier:          oxfYV0bOrJ9ISqoRpCKhVA0nicG9SEKsjX3BkBMNHPs=
Subject key identifier:   18:B8:D8:0A:B8:73:4B:65:9F:23:18:01:78:08:96:5F:4F:E9:30:4A
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer:       /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial:       01962E98F54972D67C840CDD816171F9349E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: JMgEk4InThcWPOA+Bzb2LhaPvlAQNwiPesgV3VS+Bak=)
                          2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f5:49:72:d6:7c:84:0c:dd:81:61:71:f9:34:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=18b8d80ab8734b659f2318017808965f4fe9304a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:16:29:40:72:67:63:a8:6a:9d:19:e1:cd:
                    38:14:9a:9a:8c:1c:a3:6d:77:2b:bb:29:69:20:6a:
                    2a:33:e7:9d:03:b5:c1:70:5c:ba:8d:3d:eb:79:4a:
                    ea:94:03:51:64:d3:18:35:29:fb:8e:19:b5:b6:f0:
                    b7:fc:9a:ed:fb:63:29:55:0d:ed:93:a5:98:3b:6c:
                    69:2a:1a:16:5c:c2:55:18:eb:d0:05:ff:b6:f8:5b:
                    f2:7d:a1:bc:ea:12:a3:a5:4c:65:d8:6f:bb:55:72:
                    2a:17:98:4a:5a:14:d9:68:3e:4d:a7:a8:d3:4d:f7:
                    f3:4b:da:07:03:68:6a:20:80:37:3a:07:e2:2c:17:
                    ef:fb:0d:63:d3:f0:73:ef:26:a5:e9:d3:99:a2:fe:
                    95:5f:58:18:3e:13:73:8d:42:ee:9b:8f:ba:9e:b9:
                    13:eb:f6:82:0d:91:2c:fd:8e:fa:1a:79:7d:39:58:
                    5d:86:65:af:c8:9e:18:9a:08:e2:af:c1:62:c1:4e:
                    5b:8e:e9:8a:12:fe:06:45:18:b5:49:77:44:c1:f9:
                    09:d4:c5:09:73:96:b2:d2:c8:bf:4b:f9:b2:90:f8:
                    18:c3:99:34:ab:a4:20:25:47:2d:1e:3d:0f:40:03:
                    1c:6b:cd:b9:19:bc:bd:c2:c9:1d:10:04:59:b3:a4:
                    a7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B8:D8:0A:B8:73:4B:65:9F:23:18:01:78:08:96:5F:4F:E9:30:4A
            X509v3 Authority Key Identifier:
                keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:b1:1c:8a:98:68:f4:5f:b2:fb:c6:d5:cd:2e:2d:99:40:
         8c:e8:5c:12:ed:7d:2d:d6:67:6a:fb:da:e2:2d:6b:59:9a:15:
         2e:bb:28:e6:be:6e:25:81:1a:a2:13:97:0a:dd:2c:52:40:c6:
         9a:ce:f6:c0:c2:ce:6a:f4:3f:2f:b5:2f:b2:84:b2:c7:1f:cb:
         43:0f:da:12:69:83:f8:49:36:b2:ad:1f:4e:2b:5c:95:fa:e8:
         1a:32:51:4d:f5:6e:b3:81:f5:2d:3b:ea:a1:24:c5:23:b8:37:
         1a:cf:07:ce:85:ee:72:69:dc:88:3d:4c:74:b9:26:84:74:7a:
         75:b3:fb:20:47:b9:b6:af:fa:e9:e5:30:78:89:1d:4f:78:e5:
         4e:78:c4:32:44:4c:ec:f8:3a:41:76:2c:c3:d3:b2:be:bd:8c:
         1e:67:e3:4d:a9:de:a1:19:bf:ca:b2:3e:4f:b9:fe:6c:72:09:
         f5:55:61:18:a9:72:52:f8:5a:d4:2c:68:f1:93:10:35:01:3a:
         ee:cc:d4:60:d2:db:b4:91:84:b0:c1:6f:b6:09:99:b1:05:20:
         ae:dc:61:9b:5c:94:7e:6b:57:65:0f:7b:63:2f:d0:49:d1:e9:
         2d:6f:e4:a4:3f:5b:cc:1c:9a:28:9a:f3:e6:11:53:eb:e0:9f:
         68:7f:19:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----