Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File:                     KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier:          22rWOPh9OXVKMU78mXHcfVE/ygRH6bmiZ4ZRFpz7SJE=
Subject key identifier:   08:E0:6A:EF:FC:0E:EE:A2:DA:3F:29:B5:68:D2:18:1B:9C:A5:3F:DE
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer:       /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial:       01962E2B27E76484774B292137F2072D47BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: XyY0sjYtoFRF3yurDEqAESlxEhq07FvOYzVe8DEpfyA=)
                          2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:27:e7:64:84:77:4b:29:21:37:f2:07:2d:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=08e06aeffc0eeea2da3f29b568d2181b9ca53fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:08:3f:b1:78:47:a8:c7:94:94:ae:76:45:
                    bd:04:95:a5:83:d1:4d:04:ab:f2:96:c3:28:5e:29:
                    89:4a:a7:12:db:aa:4d:fe:8c:78:99:de:07:bc:99:
                    10:6d:cc:33:25:db:97:5c:e4:de:89:56:bd:dc:a3:
                    a2:20:41:44:a2:cc:18:23:d1:64:cb:a6:dc:95:62:
                    47:35:8d:16:00:52:98:50:94:de:df:a6:fd:e8:80:
                    f2:7c:cb:2f:cd:3d:67:13:5c:9e:d9:b1:12:a3:97:
                    a3:86:90:ab:4a:a2:4c:a8:6e:56:c8:ff:e0:b4:a7:
                    9e:b5:9d:b0:f4:5c:3f:7a:1b:07:d4:54:33:04:0c:
                    d5:0b:ae:17:4d:71:d6:c6:a1:40:07:4f:e3:28:2c:
                    b6:0d:23:11:87:1f:28:74:f4:c7:0b:cc:3d:8e:04:
                    1a:91:dd:f7:b2:56:ae:04:02:c0:dd:2f:40:bc:3d:
                    11:15:ba:63:78:55:44:91:7c:cb:26:91:af:18:ff:
                    fa:95:ab:eb:0e:65:ed:0c:70:ed:7a:ed:91:1b:19:
                    ac:17:57:af:5d:49:75:c3:74:2c:89:7d:f2:b1:b9:
                    eb:a7:7a:31:fe:8c:80:f1:aa:99:1e:7a:ea:33:aa:
                    51:ff:2a:a7:21:3f:ee:85:9d:15:4c:92:9c:f4:e2:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E0:6A:EF:FC:0E:EE:A2:DA:3F:29:B5:68:D2:18:1B:9C:A5:3F:DE
            X509v3 Authority Key Identifier:
                keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1a:ed:f4:35:e3:6c:aa:16:4f:35:7e:01:47:e3:71:c5:8a:
         08:c4:0d:98:5e:a9:99:b8:f4:54:54:3d:f9:60:8a:2e:0b:4e:
         f7:a0:a0:f6:74:34:28:28:17:0c:b6:a5:99:8d:a0:89:43:d1:
         dd:9c:a9:fd:9a:cb:5f:ba:d0:07:16:99:ca:45:9c:cd:31:0d:
         ce:b9:70:3e:5e:71:76:cb:8a:94:71:b6:9b:12:ef:4c:32:aa:
         6a:9d:f4:84:d4:92:26:40:f7:8c:cc:62:98:10:3e:76:e2:84:
         4d:f1:06:32:a6:1d:5d:59:82:49:a5:f5:75:8c:5d:93:a9:ad:
         8a:91:d8:22:9c:d6:eb:ef:e1:be:29:52:44:e9:a3:47:dc:81:
         f7:1f:d8:67:7f:c7:64:2d:9b:6f:1a:b4:cd:ac:c5:96:4e:21:
         aa:92:3e:80:9c:84:e9:72:37:18:9b:af:43:44:7e:bd:f8:0a:
         eb:45:33:a5:50:8e:b4:90:bd:8e:29:bc:11:5a:c5:39:5c:05:
         eb:bc:63:7c:4d:fb:60:93:fe:3f:e9:7d:92:b2:44:52:9b:b5:
         60:08:04:af:b7:b2:4d:0b:08:26:2d:0e:5b:1f:f0:91:b7:17:
         d2:2d:7d:c9:7b:fa:9e:f5:0e:b7:4d:e0:16:b0:d6:df:59:9b:
         27:dc:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----