Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File:                     KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier:          H4XvNC3zKdN1NAzk98E1DTueDA9eWgiae/Xo8muCkJo=
Subject key identifier:   4B:CF:83:07:C8:DF:FA:5F:5B:C1:42:0F:0F:F2:1D:DF:0F:5A:D9:1F
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer:       /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial:       01962F06E0658759623FBFFBF1F288A64991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number:          0585
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
                          2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: GToCqPyFKf+WtkcSmMaAuTp+zNbGtjUelUUfQdB6/vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e0:65:87:59:62:3f:bf:fb:f1:f2:88:a6:49:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=4bcf8307c8dffa5f5bc1420f0ff21ddf0f5ad91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:de:7a:85:6d:1f:6d:3d:16:b1:37:c9:e4:
                    3a:c4:49:24:6d:61:16:ce:f6:9f:67:39:9f:a5:de:
                    48:7b:89:58:22:51:ba:23:84:49:67:3d:e1:c3:99:
                    c4:a0:ab:72:9e:4d:46:9f:c2:dd:d6:bc:32:2d:d2:
                    ae:d0:83:38:3e:96:7b:e0:67:57:9d:95:d3:57:47:
                    8a:89:5a:bc:43:d6:4c:b3:48:1d:37:6f:91:bf:ff:
                    f4:2c:17:2d:51:b0:27:cc:05:02:6b:6e:28:50:42:
                    dc:e7:bf:8b:5e:bf:5a:8d:08:dc:76:2c:b2:82:9d:
                    a4:ce:13:21:08:d8:2f:d1:07:0b:80:23:2b:a1:45:
                    20:78:fe:5f:db:1a:8a:56:19:33:be:e3:4a:24:89:
                    39:50:81:34:2e:18:07:c9:fe:8f:ea:54:79:0b:69:
                    50:34:4c:c3:6f:d3:74:cf:96:2c:95:3c:07:65:a1:
                    95:71:0d:9a:23:d0:5b:04:44:1f:f7:d6:7e:c7:ff:
                    1c:84:f6:68:5b:74:ed:40:98:7c:6b:f8:a0:e3:f3:
                    90:fe:71:25:ee:ca:ad:01:7f:ce:0b:f4:b2:2f:d5:
                    26:11:83:3d:32:8a:0d:e3:54:5c:67:fe:54:32:ee:
                    e2:52:a6:03:ea:d3:1f:b5:02:bd:e4:f2:de:4b:58:
                    91:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CF:83:07:C8:DF:FA:5F:5B:C1:42:0F:0F:F2:1D:DF:0F:5A:D9:1F
            X509v3 Authority Key Identifier:
                keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:1f:dc:9a:5c:b1:88:64:e4:b3:0d:43:35:36:ea:22:af:
         06:71:11:f3:94:30:4c:b7:cd:79:9a:ef:ea:34:38:9b:34:36:
         08:79:3d:da:0e:62:82:8e:90:e3:43:69:f7:d4:e4:a2:7c:96:
         d8:2e:ad:fc:90:f4:67:66:54:62:78:81:75:c1:cf:0a:d8:5c:
         cf:cd:31:a7:fa:46:98:f2:3f:39:a5:c0:ef:c5:f7:f0:08:d3:
         98:dd:61:ce:4c:5e:54:49:c0:71:db:ab:2c:3c:d5:8f:df:cb:
         23:e3:db:f2:00:75:37:74:95:a3:18:2b:bc:91:48:06:e5:47:
         25:c5:81:c0:f3:ca:42:c7:8f:4d:cc:e0:d7:df:7a:c9:ce:66:
         37:a8:43:62:8a:3e:d4:e2:b4:79:cd:7b:bf:56:58:84:fd:cb:
         3d:45:cf:58:ee:aa:b5:d2:0d:7f:00:d8:ae:ca:08:24:aa:df:
         53:88:ef:ea:8b:06:4d:58:70:62:e6:ba:96:d4:64:bd:27:db:
         c3:06:41:fa:0d:a1:b6:87:3a:bd:1d:cf:c3:88:f1:ae:e0:a4:
         99:96:e8:24:f7:0a:0c:19:d3:73:fe:59:65:8f:b1:51:a2:25:
         06:db:d7:31:2d:e9:4c:72:e2:65:bd:a2:3d:80:85:e2:f1:e6:
         1f:6a:6e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----