Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File:                     KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier:          DFIEehBsFbkmwwcN67WsjMrYu+I3vNRIaPiFY+PI7Zo=
Subject key identifier:   3F:DD:4A:13:AB:B7:77:BD:1F:8C:E9:6D:16:EB:16:FC:35:8C:25:CA
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer:       /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial:       01962ECF6D6080AA5D32B3B21ABBB061F0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: 8sz8KhR4ZV3V8E0TdapQd5NYlOoCF6fZbkeberQ2WmI=)
                          2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
                          3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6d:60:80:aa:5d:32:b3:b2:1a:bb:b0:61:f0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=3fdd4a13abb777bd1f8ce96d16eb16fc358c25ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:25:8f:1f:67:99:2d:d0:93:10:39:bb:fe:69:
                    9e:a0:26:9b:84:a5:3e:73:69:d5:91:20:ec:fe:0e:
                    b5:b6:e6:88:2b:f5:ad:85:c4:a7:42:80:56:ad:fe:
                    9a:0c:b1:6f:22:8a:2c:23:68:cc:f5:d4:9e:d8:84:
                    93:49:4b:d6:26:c4:5d:20:e0:e4:42:3d:8d:17:c2:
                    d9:11:3d:64:9d:90:03:3b:33:86:de:25:7e:1b:c8:
                    6b:56:9f:ee:87:1c:76:b4:4a:c4:72:55:e5:13:12:
                    a8:e2:03:98:3e:c3:a6:f1:d7:27:e5:a0:97:66:7a:
                    3f:dc:1b:28:05:25:f0:fa:3e:8a:18:18:cf:5d:1a:
                    6e:49:aa:cb:d1:7c:3e:6c:69:81:b2:7b:93:75:97:
                    39:6a:fe:49:0d:64:88:33:02:8a:c6:49:55:64:b2:
                    f8:d3:f0:50:71:3d:0e:52:48:90:07:fe:15:57:24:
                    5b:1c:ab:ad:07:9a:8f:1c:32:b9:90:9b:32:0c:68:
                    be:dc:c6:0b:db:9a:3c:3d:41:c4:d2:c9:4a:4b:69:
                    fe:59:c5:d4:b0:2a:6e:f4:2f:38:f2:4d:21:c1:3b:
                    a1:15:70:34:ea:6f:2f:64:54:fd:e4:bd:cb:78:17:
                    02:f3:6b:88:0a:f8:88:21:a2:6e:c8:90:6a:c8:25:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DD:4A:13:AB:B7:77:BD:1F:8C:E9:6D:16:EB:16:FC:35:8C:25:CA
            X509v3 Authority Key Identifier:
                keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:94:ee:d5:17:4e:09:8e:43:4f:31:c1:62:a2:83:4c:3c:35:
         71:4f:05:c0:2b:d4:69:19:a3:08:89:99:55:d5:37:59:ec:b9:
         18:db:56:af:01:cf:77:6f:70:9c:72:4e:d1:1a:77:24:ef:56:
         fb:97:82:cd:d9:24:30:38:c4:36:d1:32:0d:e5:a7:2c:53:55:
         1f:02:38:af:e9:a1:e8:8b:9b:cb:a5:89:95:d7:74:8a:e3:b4:
         c7:71:7b:3c:35:f0:10:60:35:63:03:31:73:a8:da:a3:b8:3e:
         b6:6f:19:f0:d0:2b:64:8a:76:68:c9:95:05:e0:db:61:f7:ec:
         67:56:06:91:a1:5a:fe:3b:76:0e:80:1c:c5:fb:6f:e8:fa:30:
         e8:c7:a6:9e:a1:58:d6:e8:4d:02:9f:e6:15:f3:c3:d9:46:9d:
         ba:68:1c:a5:83:62:c7:52:63:94:35:40:b5:3f:95:60:7c:31:
         a1:77:b4:06:c2:51:cb:03:77:5e:83:a5:a1:9f:d5:8b:5f:1e:
         9e:8e:99:c2:d1:66:fd:20:55:37:4e:ec:35:bb:5f:2e:ff:cd:
         30:ad:5c:7b:c8:bf:8a:97:8a:7f:67:80:a1:f0:ce:b3:42:06:
         01:60:a5:53:4d:3c:db:a0:8a:40:5d:ca:c9:55:ff:89:8e:ff:
         bc:8c:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----