Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File:                     kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier:          xbLMHim6x3XrB9RKq9RfC7m9XjgEyZEMxHwVe7G2yzI=
Subject key identifier:   C6:DA:05:2C:A9:37:4D:F8:37:81:79:AF:52:91:DC:8E:AA:F3:0D:7C
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer:       /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial:       01962E61771025A32B1848C44C06508DDCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
                          2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: LaGTW3Fja50wUy7YVVm8r8gBC0VBoDALRb771gPRTIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:77:10:25:a3:2b:18:48:c4:4c:06:50:8d:dc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=c6da052ca9374df8378179af5291dc8eaaf30d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:85:5d:6e:c2:59:9f:c7:e2:36:4c:cb:ee:
                    d2:ad:9b:c7:32:63:d5:cc:a6:9b:49:e2:03:91:89:
                    4b:cf:c0:ce:ba:f9:dc:78:11:a5:5c:dc:a0:8a:22:
                    ff:dd:0f:d8:40:23:d4:f1:d3:43:53:37:4a:d3:a2:
                    31:02:42:5d:01:bc:a6:71:0e:99:0f:1c:d1:13:1f:
                    cc:f6:8d:e1:fe:28:ec:c6:80:2a:14:d3:59:e5:f1:
                    61:30:1b:ce:0b:ba:ea:fa:d0:57:c7:8c:83:eb:b7:
                    e4:a0:74:6e:be:bf:3d:4d:dc:49:fc:f5:89:bc:2a:
                    b1:bc:43:7e:11:4f:c7:ac:6e:c5:7f:22:62:a2:2c:
                    50:5f:2e:50:48:d3:19:f7:ec:22:cc:98:bd:a2:10:
                    1a:30:f3:bd:b6:22:25:c9:45:1c:96:c0:9f:ce:df:
                    ad:ac:80:1d:b9:84:45:75:6e:2a:0c:18:7e:e5:06:
                    1f:ed:b8:6f:36:2a:f1:c5:04:8c:d6:48:96:79:38:
                    aa:f9:db:e7:af:51:2d:68:8c:d6:cb:57:48:7e:70:
                    2b:c1:07:22:29:50:02:43:d1:f8:99:e3:b2:1d:fe:
                    74:ff:06:04:eb:a8:af:28:18:59:bd:c0:55:33:df:
                    14:75:4a:41:f4:df:27:49:25:d8:8d:1f:ff:54:04:
                    6d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:05:2C:A9:37:4D:F8:37:81:79:AF:52:91:DC:8E:AA:F3:0D:7C
            X509v3 Authority Key Identifier:
                keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:13:d7:b3:2d:3d:e0:52:fd:f7:26:5e:90:74:3a:c9:5d:9d:
         1d:2e:8e:dd:11:d3:87:03:ff:3a:28:a4:dd:ae:5c:50:78:17:
         9b:02:15:9a:f7:57:c6:76:56:ad:15:45:b2:2c:18:96:6e:ad:
         98:88:11:22:d4:56:67:bc:39:bb:33:20:31:df:6b:5e:96:7a:
         c6:98:ce:29:17:55:28:16:97:93:af:66:2f:b1:f2:45:0f:2d:
         54:19:d8:c3:8e:46:ef:1b:e6:fb:43:af:90:23:42:06:60:0e:
         e4:d3:78:eb:e4:52:a1:89:11:20:d7:99:7f:14:9d:e7:5b:e7:
         67:db:73:d1:88:cb:0d:12:2c:fa:70:1f:c7:3b:d0:f4:bf:1a:
         06:7e:26:6f:80:b8:86:0e:46:6c:a5:d7:b8:44:9b:ae:20:a8:
         58:26:f5:1f:8d:54:05:4e:2a:0a:c9:fe:12:c9:cc:74:2f:71:
         b3:64:04:a3:8c:01:7a:bf:b9:a0:36:55:d7:37:ba:d4:05:8b:
         7b:71:59:1b:40:84:3b:1a:0d:51:4e:3d:15:7b:63:1f:95:a3:
         20:bd:d4:60:4a:c9:c9:77:86:bf:a6:36:a0:75:90:ac:3b:b1:
         2d:a2:4a:9a:0b:68:3c:6f:9c:4b:bb:36:98:19:12:c6:9a:b6:
         3f:95:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----