Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
File:                     Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json)
Hash identifier:          DzF/R7cUcs0SEOCcsCQYEse2D9CN1af3tm68eXCJnEA=
Subject key identifier:   79:C1:77:78:18:FC:3C:A1:1F:E9:F1:A3:C5:CF:4C:53:6A:73:8F:B3
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       01962F06A241D294125CE6FB3F35FF3E2BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft
Manifest number:          039B
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: 05o0ilxpLPFj724SFa-brN8vzXk.roa (hash: CPN9MrS7MYDAN7zH2nr9vN3ZoOoKTAOXjde0z1Y3r4g=)
                          2: 5h88FMdyJ4BKxPsdcgHQyCeiggw.roa (hash: Owv+GMEcs1uONJHFnOZ4mKs3NxskXYOAjZpyCXtz47Y=)
                          3: 7HfOX3VXYMpd2AIPBc7-S-uMs_8.roa (hash: k5M6cr3ux0zaC3HrK4AQu/eEDnL7gIrijJy4BZ0Nw4M=)
                          4: 7OOt-MnHsX07hiPdKHIMZaJ8wrg.roa (hash: 7nZ90mtRGZWhPbm1Puw7IzZkWIgR1R3W35D51WFY05w=)
                          5: BT9PpbhARp2PKEupubiiio8TvBc.roa (hash: PoRHUsj11iEWOHUhXg6p185DLswF97IfYO5dpNwM+4k=)
                          6: F1OWe033_DuZ-JjrisCh6PYvi1s.roa (hash: bLONjsizRZ/N6QYxCW6KHMn5K6t8a7PJWP3/t57vEJk=)
                          7: K3PHjFr5iZQBePAHzZD7020H3CQ.roa (hash: cYqNDwyqOAThtjZwtvIGK4yhgMYUiG7kHacZddA60SQ=)
                          8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: jGHGlvIkZ0VVZinX1JU65NdQN4EjQRvcUBDR0g92+/8=)
                          9: PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (hash: FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=)
                          10: SGJaxM1tftN6eWW_JhWZIZdq6Hs.roa (hash: i3+GB/wkLsPOj8TleSkbJUTDI0kj7dMA6dFb0QRWP+8=)
                          11: X-V1c33BeHLMq6YPZ6efCsl3cMM.roa (hash: qD2GqEyAmd2okDBw6OR3DlzX+O8r0bDHBHVLHEg9U3g=)
                          12: X6A7ZOxQkF-N5TBF6hNZ0D-sPxQ.roa (hash: sOJamuYIhYJWJLrvAE1wd1xA2gh7NgXmer7n43KBLdc=)
                          13: Y68HM_eE8K1w4SS6fxm68_4816Q.roa (hash: j5XSBxx8t0t2IG8jaeix/JPoU5Vp2pcHE0yvoVN43nY=)
                          14: eM7RoSEq3C715iKtcwBUqsiVTDM.roa (hash: U7xNVv9g2fKrI4EOjzXQcIX1ekwna/aEJqfXxfKaR90=)
                          15: u-M1H4DlyfJcf3cI4KPf60AAf5E.roa (hash: rqvHkJ1B+GOatMUS6IQfjBMvmK91Ea22MfD3TS1yuVM=)
                          16: us6ukJjPwguMUHmhc8SpjnjeHOE.roa (hash: RuHDwxtF2zmik+S8Nhu0t8NrGvwHVQJraNmp1nORf/c=)
                          17: zvMqPtiLMOCgjOxqm6euJp83YNA.roa (hash: jIvx8RFgHAKB/kauSEcxDljiE/0sDn1/Jfcw3a0iCKU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a2:41:d2:94:12:5c:e6:fb:3f:35:ff:3e:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=79c1777818fc3ca11fe9f1a3c5cf4c536a738fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d7:d1:ae:61:33:2d:3e:6c:ea:26:8a:a6:ed:
                    a8:07:16:91:e5:ec:6d:cd:52:87:72:b2:71:9e:46:
                    77:62:db:5f:ea:d3:65:d6:df:7a:f0:28:1e:69:88:
                    05:22:49:3c:34:f0:68:dd:87:20:dc:ba:bf:45:19:
                    f4:43:37:36:70:b4:03:c8:d1:98:92:60:e6:b7:0d:
                    e2:64:86:3c:45:c0:6c:e1:9e:88:cb:82:a3:f7:43:
                    1c:ac:cc:35:30:a6:aa:31:ca:85:9b:99:50:32:71:
                    ed:2a:05:5a:62:c7:15:96:62:a0:9a:38:30:3d:a8:
                    6c:fd:4c:de:a3:9b:0b:fc:f6:e0:4a:b1:6f:68:a5:
                    2e:90:2d:03:dd:14:55:59:13:21:8b:9c:0d:a2:c8:
                    f5:02:22:b8:f8:f0:98:d6:d4:9d:61:35:50:a0:7e:
                    35:b6:89:f6:e8:80:19:ef:b1:16:b6:3b:c4:cf:35:
                    4c:60:e3:fe:24:23:63:09:a1:ce:03:0a:5c:72:ac:
                    fd:43:d1:37:77:56:97:3b:0c:90:08:df:16:9e:e8:
                    89:b5:37:7f:8c:cc:7c:58:f7:45:62:b4:7e:25:86:
                    ed:06:dd:7d:b1:2f:76:3b:6f:d6:f5:ff:b3:d6:96:
                    f7:50:53:e3:77:4e:fd:1a:9b:18:b3:06:36:30:12:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:77:78:18:FC:3C:A1:1F:E9:F1:A3:C5:CF:4C:53:6A:73:8F:B3
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:22:08:b8:98:37:6a:9a:74:c9:43:2a:b5:66:d7:c8:a4:
         dd:c4:50:87:47:d3:c5:34:c5:6f:96:2d:47:f6:13:20:d8:e5:
         f7:9a:e1:81:30:5b:33:dc:8e:2b:9a:59:04:4b:1b:40:1a:73:
         39:ff:60:12:2e:fe:92:2c:bb:f1:b4:c0:3a:05:51:5a:c1:53:
         b8:70:76:9a:85:4b:76:9c:c5:6a:2c:33:3c:38:29:f0:1d:a0:
         27:0a:cd:bc:41:62:66:2a:f0:87:14:11:a3:36:47:36:40:a8:
         04:a4:dd:f4:30:95:6c:70:f2:f4:32:5a:32:9d:09:5b:6a:7c:
         e7:ce:e2:6c:cf:c8:c9:39:ed:b2:28:2f:d0:85:05:e3:b4:e5:
         77:bd:c1:24:75:b0:dc:d5:27:48:24:ff:3a:80:a0:79:ff:10:
         fa:51:8b:ad:4f:49:56:b7:82:fe:a6:ac:ad:58:94:1e:01:ad:
         a2:37:f2:7e:bd:29:fe:48:01:f3:14:41:f4:ad:c3:86:07:70:
         9d:cd:93:5b:0a:8e:2f:91:3e:a1:b7:24:fc:45:55:21:ea:17:
         13:68:81:fe:79:7f:a9:79:a5:ab:8e:e0:4e:c6:df:6c:6b:de:
         27:2a:2c:0c:0b:fe:60:36:07:9b:3a:5f:36:54:4d:45:e8:a6:
         44:b0:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----