Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File:                     K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier:          6pk/Y6YNid2zEvhx1qAt7I/12TivNb1Vkf+Dg9kVwHk=
Subject key identifier:   53:57:02:51:D7:96:FE:68:07:88:CB:39:B2:45:9F:63:3B:61:D1:DF
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer:       /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial:       01962E6213B2D7F1716DA62807802C9BC747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number:          0CA2
Signing time:             Sun 13 Apr 2025 09:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:41 +0000
Files and hashes:         1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: QVlUtPLf7JrEHh+3WS+5M4JGS13l8go6ncNjIoed2iI=)
                          2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:13:b2:d7:f1:71:6d:a6:28:07:80:2c:9b:c7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
        Validity
            Not Before: Apr 13 09:01:41 2025 GMT
            Not After : Apr 14 09:01:41 2025 GMT
        Subject: CN=53570251d796fe680788cb39b2459f633b61d1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:73:9d:5c:66:1d:58:f0:fe:6a:61:8b:d0:
                    f3:25:00:2c:02:ce:5f:a3:0a:64:ba:05:b0:38:c9:
                    91:d3:b7:95:e8:13:f4:7d:fa:8a:95:9c:9c:87:18:
                    46:c8:24:10:68:6d:a0:1a:6d:98:81:88:ee:4e:60:
                    ea:fc:11:72:8b:34:53:49:f3:87:7e:4d:a5:2f:94:
                    61:a4:45:c2:ad:93:44:99:b0:78:00:c9:cd:2b:07:
                    85:85:b9:a0:80:96:ff:38:55:3d:9f:1d:75:95:6d:
                    63:04:c3:e4:0d:fb:ba:9e:fd:76:55:c3:64:2b:7c:
                    94:0b:5f:f8:fd:b6:58:36:ad:9e:5d:66:4a:94:7b:
                    c7:16:ee:ec:d7:7d:5e:4e:3f:82:4b:c3:6c:d9:08:
                    59:99:1f:69:9e:40:6c:f6:3d:6f:59:24:2f:62:cf:
                    61:6a:eb:24:5a:a6:b3:e8:d1:b5:67:02:bb:f4:7e:
                    ee:05:fd:01:7f:44:b9:fd:83:64:a8:ae:8f:cd:bc:
                    aa:fc:72:cf:15:35:84:71:eb:94:84:61:74:50:44:
                    e9:c1:9e:08:c7:34:7c:f3:e4:fc:12:70:ba:0a:3e:
                    ef:fa:ab:da:ef:8e:00:8e:ae:b8:e0:84:d0:e1:74:
                    10:c0:f1:23:a2:ab:50:bc:4c:d3:9c:93:06:2d:c1:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:57:02:51:D7:96:FE:68:07:88:CB:39:B2:45:9F:63:3B:61:D1:DF
            X509v3 Authority Key Identifier:
                keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ed:a7:8a:ee:d5:1b:ba:5b:86:d3:e7:ce:f5:b7:61:19:40:
         b8:6e:f6:60:6a:6f:f6:52:b9:9c:45:34:8b:4a:1d:f9:4e:3a:
         d7:7f:d9:94:28:a2:72:28:30:8c:d3:e0:34:e7:b2:4f:ad:d5:
         98:eb:79:ac:82:19:8d:85:c8:c1:73:f6:35:22:04:65:88:8b:
         53:08:c0:de:65:9f:9c:19:d8:08:4e:e4:61:60:4a:23:7a:f9:
         aa:6e:93:80:d1:34:e9:d8:76:27:13:43:99:c7:d1:2e:bd:83:
         5d:e2:c6:9e:0f:c5:91:58:cb:3a:57:e7:3c:0c:1e:59:c3:3e:
         ad:c7:ff:18:c4:cf:52:81:1e:90:d4:9c:1d:58:a3:c3:29:4b:
         a9:76:f2:74:9c:67:a8:8c:b0:75:98:e0:6c:88:bd:ca:f6:de:
         09:7b:88:ad:a4:62:e5:b6:3e:32:ab:1e:c5:63:33:fb:46:3e:
         70:0f:67:5f:34:8f:3f:07:d1:a3:5a:c5:99:1a:d7:04:dd:c2:
         36:3f:ac:71:a8:96:d3:c4:20:ed:0e:ef:39:d5:0d:25:06:df:
         32:1f:fa:49:dc:5d:0f:93:c5:d3:96:32:eb:84:e0:d7:fb:b5:
         e2:56:fb:f0:e7:03:41:9e:82:b8:fb:32:a9:88:8c:51:66:fc:
         37:8d:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----