Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          elvJ3gakA+UOmXi8EyAbrMXhGgZWjPe3IkMlEzoKTQk=
Subject key identifier:   9F:9D:7E:38:18:6C:F3:3C:ED:9F:B8:8B:DE:8D:B2:5D:8C:50:51:63
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       01962E2B10E748768A5BC9DA29A4C55C02BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 9_JGTVW5qMW7yCkdP0E_-NpXB0s.roa (hash: WnTsDGxoDG2mHWxyzgJxMMHknGyiRAiwLMWZ5xXwktI=)
                          2: GEAFSRO55yyL2hanen4IQZHuURY.roa (hash: 2FshQLANrdy2nUZzMPBP36DvAVDN+Uv1owhoY0rOS8I=)
                          3: H8DQXyH0KVxtyAs-rlTWAJw5n0M.roa (hash: dDFoBjvjKcHyX8s6IHYrzZBS6btcUzoDxFIxBvgUAfs=)
                          4: SllXdUUCPVChZ4jvhpor-ghAAj4.roa (hash: gzrQw/PD5uiW072kDXHdmBevESe9Vs8UwVovlju078g=)
                          5: UlaIUZkK3B529LjdTkdHqn2YBxQ.roa (hash: PIB38ClEzEekziyvI7kD6lwcN8Tv1wlGPtaK62LmSRI=)
                          6: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: 4u17qUkF1gaxqguYEosugUMfUiJggLP3Ojt1un2T2o0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:10:e7:48:76:8a:5b:c9:da:29:a4:c5:5c:02:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=9f9d7e38186cf33ced9fb88bde8db25d8c505163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:66:a4:97:88:cf:6a:71:75:ea:ae:d2:d8:
                    d6:88:69:c4:7b:5d:8f:bd:9e:c1:9a:fd:ab:d3:9d:
                    ac:44:a5:85:4b:75:ff:fb:ed:20:c8:be:8d:49:8b:
                    00:f5:43:18:58:05:f5:16:fa:f0:85:85:23:04:ca:
                    23:36:a8:5f:9a:d2:90:d5:53:78:b1:22:ef:03:a4:
                    41:a4:ff:08:c0:76:2d:59:d6:e5:8a:e3:b7:43:e0:
                    82:d4:ab:de:4f:19:88:f4:27:b8:80:3b:07:88:d1:
                    26:42:dd:f8:bf:75:63:7e:db:ce:0e:85:1e:8b:50:
                    14:35:37:3e:19:66:f1:3f:26:8c:64:25:7f:c8:75:
                    f5:61:5e:65:10:0b:99:59:c6:fe:65:5a:bf:b8:47:
                    be:d6:be:38:36:bd:85:a7:eb:d3:e2:e1:3a:62:b7:
                    2c:63:23:1e:63:a7:fd:88:1b:bd:d4:71:ce:85:e8:
                    3a:32:fe:5c:53:c6:eb:7b:8a:72:8c:0b:c5:79:29:
                    ba:b0:87:94:bb:05:33:be:c4:ac:a0:d1:72:71:bb:
                    1d:e4:51:c6:85:b2:be:3f:f4:0a:a4:3a:f4:50:13:
                    0f:b1:48:c2:89:44:bd:a3:45:a0:04:44:2f:bd:a4:
                    93:32:68:0a:2a:60:f5:33:5d:f5:07:06:1f:97:35:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9D:7E:38:18:6C:F3:3C:ED:9F:B8:8B:DE:8D:B2:5D:8C:50:51:63
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:fa:b8:dd:78:c2:4e:f0:15:fc:51:a2:d0:2d:d5:8b:a2:90:
         1f:d3:c6:8d:c4:23:8c:99:dc:c1:64:c0:58:fd:ef:35:97:61:
         64:34:31:59:25:cd:3d:5c:46:10:36:bf:83:00:bd:6d:13:cf:
         c7:34:e7:49:9e:45:b0:a2:e0:89:ab:8d:7e:b5:cf:3f:02:21:
         0e:b5:df:7f:37:56:b6:5c:71:9d:65:9b:c8:fa:5e:56:f2:9a:
         a8:03:07:04:02:00:24:a5:07:ea:bd:38:3b:80:a3:0b:2d:e5:
         d5:58:31:30:a1:8e:8b:39:79:7c:c9:d3:ed:54:71:9f:e0:96:
         39:bc:cb:87:80:ca:6b:6b:f7:01:10:dc:28:b1:ab:64:0a:35:
         4a:fc:47:cc:54:44:a0:a3:8f:83:51:e0:42:b6:d2:5b:26:b3:
         4f:94:82:7a:70:b6:38:7d:e1:0f:d5:3e:e8:12:e3:1c:0e:66:
         50:33:66:21:09:8e:48:df:75:f6:0f:58:95:eb:1b:d0:a0:cf:
         39:35:e5:e0:d3:33:6f:30:68:8c:71:c5:f0:da:9b:88:aa:40:
         8e:c5:03:0b:3a:1d:72:8d:12:95:bd:77:78:f8:28:2a:f7:75:
         0a:18:d1:6e:f7:91:48:af:43:c1:90:6f:a4:e8:d0:1a:34:ad:
         27:88:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----