Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File:                     00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier:          RqnD57JXPs9e/3pWNU2nHevZ8IgY6RSLpPb+5VsvnLM=
Subject key identifier:   32:15:BE:4B:24:68:37:70:F8:00:F4:E2:6C:0F:6C:C9:F0:F6:58:0E
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer:       /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial:       01962ECF870BFAB89C497C94E8B31CD2ED35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: gZ4kkp4qSoTi5IAdDgcrvUPGW1j9SwZSzarpI9JbjSw=)
                          2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:87:0b:fa:b8:9c:49:7c:94:e8:b3:1c:d2:ed:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=3215be4b24683770f800f4e26c0f6cc9f0f6580e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:6b:13:11:63:16:3e:b1:7a:c7:c4:ce:79:
                    c6:c2:bc:db:84:cc:3d:51:4a:ec:af:9b:9a:68:ab:
                    cf:fa:6c:e0:ba:1f:a4:9e:20:f8:ce:01:47:97:27:
                    6b:ad:89:be:20:ca:a5:5e:f0:68:db:45:64:90:4d:
                    37:92:33:7d:53:f7:aa:73:0e:46:eb:51:4a:80:0a:
                    67:f5:62:24:23:78:f3:c4:52:72:db:81:6c:e4:cd:
                    c2:f2:19:fd:c8:87:76:ed:46:d1:41:78:9f:4b:b4:
                    99:46:b2:0b:e0:3f:22:56:27:fd:e0:82:c4:9c:08:
                    af:6d:34:e9:ba:67:49:e2:3d:69:44:1a:6d:67:11:
                    c9:d2:4f:8e:3e:8e:06:d8:d5:30:51:75:de:06:7e:
                    dc:2b:d6:44:01:70:73:5f:16:5f:0c:37:27:0a:1f:
                    5d:f8:86:cc:65:8f:17:04:45:9d:62:3f:4d:d8:66:
                    df:a5:5c:be:26:9d:1f:ac:7b:54:65:ff:51:dc:aa:
                    55:7b:7a:fd:f1:5d:c9:e4:08:2d:33:74:38:60:02:
                    33:a6:81:a5:f9:dc:0d:f4:57:69:f2:88:a5:f9:a4:
                    cf:65:35:b1:98:26:1e:a1:e9:3b:6a:1f:20:6d:2f:
                    a9:78:5e:00:79:76:d7:d3:aa:88:da:6f:25:b4:18:
                    f3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:15:BE:4B:24:68:37:70:F8:00:F4:E2:6C:0F:6C:C9:F0:F6:58:0E
            X509v3 Authority Key Identifier:
                keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:f1:13:12:30:34:b1:f2:b7:b3:b0:d9:3b:ae:a3:19:f6:
         8b:03:8e:a4:22:09:e8:dc:12:c7:ba:be:3a:47:70:6a:93:f9:
         6d:92:99:63:e1:ac:db:23:3f:33:31:9d:7e:ee:e4:e3:96:12:
         94:b2:a3:b3:cd:ca:b6:30:b9:56:ca:0a:19:db:18:3e:7d:ca:
         9c:39:88:3d:21:3f:dd:6b:fd:24:95:a8:6c:42:45:6f:65:ff:
         76:f4:54:e0:a4:cf:3e:e8:65:6d:fc:fb:95:ef:1a:26:d4:c2:
         7f:7e:f8:ce:e7:bd:8e:d8:26:f9:fe:4b:4f:ea:24:95:2a:1a:
         02:ea:86:94:4d:db:84:b2:d8:06:a9:ad:9b:56:2e:c4:77:31:
         19:2e:f0:85:42:d9:bf:2f:c9:c6:a4:d9:6d:e9:ae:98:a1:ec:
         66:31:bb:e7:6b:7b:13:70:e3:f2:9c:17:dd:95:54:f3:16:07:
         bd:47:33:51:2b:46:c0:7c:f1:51:13:6f:e6:f8:1b:5b:49:56:
         f8:4e:44:0e:f7:c4:8d:ee:92:b6:6f:53:a4:de:1b:36:94:0c:
         01:b9:01:b0:b1:af:6a:46:ee:ee:6f:19:e8:c0:48:6a:da:4e:
         3e:5f:7b:20:88:ee:c2:9a:f8:51:e2:32:86:d5:49:4b:87:65:
         de:ba:35:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----