Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
File:                     KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json)
Hash identifier:          1PCsGtk8ElDB3WLegh2cX5AOAvg2zT5FThq7vTJsKWw=
Subject key identifier:   42:C5:15:0D:57:5E:8E:9E:23:62:D8:4C:6C:16:40:1A:7B:9E:E5:7C
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Certificate issuer:       /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial:       01962F3DC9B1D824BBAF3727AD2E35DDF1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 3KSN_k3KfyRIpkOpKsbbz9Bqq5E.roa (hash: iHgOduhUsida+9pHg8iFsStpH/s/1dREHiJkoJW0aww=)
                          2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: t4v4VY/PitPNLBBLIi6B9q2lOqMhzc/nZyY4TaumVoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c9:b1:d8:24:bb:af:37:27:ad:2e:35:dd:f1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=42c5150d575e8e9e2362d84c6c16401a7b9ee57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:3c:9a:b3:14:3e:cd:6a:0f:16:bc:68:32:
                    5a:bf:8a:4e:9a:71:47:71:fb:e0:29:d0:c5:b2:88:
                    75:f5:54:6d:5c:ee:5e:ce:a3:a2:f9:d8:b8:6e:93:
                    48:43:2b:1e:9a:34:e8:89:19:df:47:a0:8b:5b:50:
                    7b:de:ae:44:0f:c9:6e:91:fb:f2:74:4f:ba:3e:ba:
                    00:55:cc:34:bc:1b:a7:f7:0e:0f:17:6f:ed:5c:fc:
                    99:af:3d:9d:cd:62:c9:96:cd:c7:ce:a0:41:45:3e:
                    99:72:8e:13:62:c7:9f:2a:b4:ac:9c:a3:73:a1:01:
                    34:c8:da:89:c4:d2:49:b2:30:b0:13:fa:9c:90:c0:
                    ca:cc:68:d4:ec:e7:61:95:d4:bc:4c:36:ca:ef:a5:
                    dd:08:53:af:44:eb:b7:bb:7f:8a:bf:c9:13:a3:e4:
                    83:4b:f8:a9:f9:25:d6:22:49:73:3f:63:7b:98:c7:
                    17:9b:20:e9:c9:a8:d0:c8:55:ea:4d:ea:9d:3c:5a:
                    e2:a0:c0:2f:29:34:49:3c:d5:ff:68:52:1b:da:86:
                    34:44:7a:99:35:af:36:07:31:9e:95:f0:8e:20:ae:
                    7f:90:71:47:e1:f3:e1:39:85:9c:85:23:ab:39:93:
                    07:18:01:56:5b:56:a4:52:22:5c:06:38:45:2e:f8:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:15:0D:57:5E:8E:9E:23:62:D8:4C:6C:16:40:1A:7B:9E:E5:7C
            X509v3 Authority Key Identifier:
                keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:e2:10:ef:89:df:12:75:4b:2d:44:9c:75:45:20:49:2e:
         8a:27:a3:04:67:55:54:f4:48:ff:fb:35:5e:3e:84:93:81:fd:
         ec:d7:9d:1e:37:7f:76:0b:8d:d6:64:cf:70:ff:18:e2:a6:0a:
         d3:f8:0e:d3:c4:08:55:6c:30:a0:95:fc:a8:2e:f6:d0:37:bc:
         99:e3:25:af:2a:bc:eb:55:b0:51:c6:30:5f:71:36:54:8e:16:
         68:e4:08:07:92:a6:3e:b5:a4:3a:25:05:6a:1a:94:36:54:ba:
         53:79:72:09:12:f2:ad:6f:9a:11:d9:d2:69:bc:16:46:f0:24:
         5f:a4:cc:48:94:b7:dd:fb:28:92:dd:44:d4:14:d8:d8:0e:6b:
         c9:73:80:b2:8e:5f:44:63:69:2b:0d:3f:8c:14:f2:37:90:f3:
         8c:2e:3d:cc:ae:db:c5:81:13:28:1e:39:f2:d9:b3:72:67:fc:
         0a:7d:e2:b3:d2:26:46:fb:2e:e8:1e:a1:e5:ef:14:25:79:f7:
         54:96:24:03:ab:5e:22:bc:bf:45:ff:44:38:fc:1f:87:90:ea:
         d1:80:a9:97:34:2c:20:02:76:cd:35:34:d2:b9:56:80:e8:b7:
         17:10:fa:1c:58:7f:49:99:0b:75:32:73:5a:07:ad:84:d4:2c:
         36:27:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----