Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File:                     KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier:          /eRaWx56raU4wCCqc/uc9jF/CnLte34ixY0K0lTUvHM=
Subject key identifier:   63:68:19:68:DE:31:92:8E:11:07:79:D7:15:6D:B0:64:A8:8D:84:B8
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer:       /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial:       01962ECF903529DDE222280BDEFBD361D650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
                          2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: GPeIcckPXcztY2Ohm7ug5vPb54ZHT1lCLHMNBav4j5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:90:35:29:dd:e2:22:28:0b:de:fb:d3:61:d6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=63681968de31928e110779d7156db064a88d84b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:6d:b0:b7:23:90:ed:87:98:6f:8f:ea:b7:
                    c7:43:92:8b:39:8a:d2:f1:61:cf:d6:4f:96:98:03:
                    28:15:2a:78:d4:14:0c:64:db:09:68:4a:38:22:1a:
                    4d:be:b7:61:3c:ff:37:46:31:3f:82:0a:48:a8:2e:
                    3d:2d:2f:1c:5c:02:2f:6e:b3:99:77:dc:07:b2:16:
                    8b:78:2f:07:5d:c5:31:82:55:27:9f:b8:29:01:07:
                    d9:8f:94:35:ef:70:74:5b:d5:8f:6d:4f:e3:f8:88:
                    74:f5:77:ad:5a:92:e8:49:fa:11:73:92:b6:82:ac:
                    69:af:b3:83:8c:12:67:e5:79:06:6f:ca:5e:2c:b6:
                    ab:a3:86:ac:73:0f:cc:2b:9a:02:c1:ab:0d:51:32:
                    8a:d9:7c:7e:12:f7:ac:53:c1:0e:b9:99:08:d3:ad:
                    ff:10:15:96:ad:5a:61:c0:43:ed:e5:80:09:e7:2e:
                    f8:ea:be:26:13:92:b2:9a:1a:db:4c:36:19:56:7a:
                    00:bf:b9:89:29:83:fc:79:f1:ec:3e:25:5c:34:5d:
                    99:45:cb:c1:27:ba:6e:a0:56:78:bb:b1:0a:63:fe:
                    b7:9d:82:eb:e4:99:57:db:30:95:ab:62:91:85:3d:
                    9b:91:91:ed:2c:ae:b5:26:2a:46:7c:af:9c:d8:84:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:19:68:DE:31:92:8E:11:07:79:D7:15:6D:B0:64:A8:8D:84:B8
            X509v3 Authority Key Identifier:
                keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:e2:dc:4d:28:7e:5f:6d:74:c7:db:77:ec:2b:6f:a9:87:
         ea:b6:82:1c:8b:7b:26:12:03:69:11:3c:c0:c7:4b:01:2b:da:
         89:46:7a:78:be:e7:6a:05:0d:22:31:d8:6c:2f:76:b6:51:58:
         7c:2b:73:c6:04:f1:6d:2f:c4:94:5c:41:8e:94:25:11:88:6d:
         56:fa:66:eb:cf:51:d6:75:dc:cc:53:26:87:32:e4:cc:51:07:
         0c:ca:e1:3f:45:ad:b4:56:a2:d9:85:14:85:74:2f:a1:ff:2a:
         bc:e8:17:84:9b:0f:13:72:3b:69:9e:12:0a:be:75:03:b5:df:
         ed:5b:ab:b8:52:bd:6a:96:52:4f:70:1e:92:73:62:89:4d:48:
         87:04:ca:05:88:9c:86:d2:a4:be:5c:f8:51:54:ce:45:00:2a:
         f3:ed:1a:4a:46:e3:21:ae:4f:e8:88:28:d4:79:31:14:d9:90:
         0a:55:54:c5:8e:6b:a3:61:dc:25:f0:63:29:71:71:b2:11:19:
         17:ee:92:eb:0b:ca:0a:e1:75:3d:b9:be:41:33:81:ad:65:44:
         74:87:b8:94:52:cb:73:d1:13:19:ca:60:be:f0:c8:09:0a:d9:
         34:85:19:a0:3f:b3:06:05:aa:d3:c5:17:1f:df:e2:ff:7a:c0:
         61:2c:3e:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5A1Kd3iIigL3vvTYdZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMzY5Y2E5YmE4NGFkODQ3ZDQ5ZDMxZTI3NDY1ZmFmNTdi
ZjI4ZTQwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
Eyg2MzY4MTk2OGRlMzE5MjhlMTEwNzc5ZDcxNTZkYjA2NGE4OGQ4NGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIptsLcjkO2HmG+P6rfHQ5KLOYrS
8WHP1k+WmAMoFSp41BQMZNsJaEo4IhpNvrdhPP83RjE/ggpIqC49LS8cXAIvbrOZ
d9wHshaLeC8HXcUxglUnn7gpAQfZj5Q173B0W9WPbU/j+Ih09XetWpLoSfoRc5K2
gqxpr7ODjBJn5XkGb8peLLaro4ascw/MK5oCwasNUTKK2Xx+EvesU8EOuZkI063/
EBWWrVphwEPt5YAJ5y746r4mE5KymhrbTDYZVnoAv7mJKYP8efHsPiVcNF2ZRcvB
J7puoFZ4u7EKY/63nYLr5JlX2zCVq2KRhT2bkZHtLK61JipGfK+c2ISkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNoGWjeMZKOEQd51xVtsGSojYS4MB8GA1UdIwQY
MBaAFCo2nKm6hK2EfUnTHidGX69XvyjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQt
NTg5NWI2OWQxODllLzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hMGIyNjYtM2M5ZS00ZTBjLThhNmQtNTg5NWI2OWQxODll
LzEvS2phY3FicUVyWVI5U2RNZUowWmZyMWVfS09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHXi3E0o
fl9tdMfbd+wrb6mH6raCHIt7JhIDaRE8wMdLASvaiUZ6eL7nagUNIjHYbC92tlFY
fCtzxgTxbS/ElFxBjpQlEYhtVvpm689R1nXczFMmhzLkzFEHDMrhP0WttFai2YUU
hXQvof8qvOgXhJsPE3I7aZ4SCr51A7Xf7VuruFK9apZST3AeknNiiU1IhwTKBYic
htKkvlz4UVTORQAq8+0aSkbjIa5P6Igo1HkxFNmQClVUxY5ro2HcJfBjKXFxshEZ
F+6S6wvKCuF1Pbm+QTOBrWVEdIe4lFLLc9ETGcpgvvDICQrZNIUZoD+zBgWq08UX
H9/i/3rAYSw+ZQ==
-----END CERTIFICATE-----