Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File:                     KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier:          56MO480xt7OYdBzdSeKHcWeBZ6kd6IVNy3CyUkCMfsY=
Subject key identifier:   F5:00:99:37:45:7D:44:CB:8A:BA:58:2A:2A:5D:2F:17:A1:76:47:4A
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer:       /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial:       01962E995B08134E892D0822608C4FB48679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number:          0403
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: Q2GPmhIQ5HTMLZzZViKcpX0mFyqbH69brmfJA5cVUUg=)
                          2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5b:08:13:4e:89:2d:08:22:60:8c:4f:b4:86:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=f5009937457d44cb8aba582a2a5d2f17a176474a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:7d:03:c8:97:a7:27:dc:83:13:01:87:04:
                    6c:6a:1f:7a:ac:3c:bb:36:e9:58:2b:8d:f8:d3:8c:
                    c7:5f:9c:75:71:a2:66:86:d8:bc:56:f1:86:d8:c8:
                    ae:e6:d6:0e:82:ff:ce:cd:be:0b:2d:a5:f5:40:6d:
                    46:8e:7b:39:91:a6:f0:03:09:44:80:89:3d:7f:c3:
                    46:0d:25:23:79:43:1f:f7:d7:15:72:59:a7:7d:9b:
                    70:71:4b:8b:0a:97:87:6f:d1:c9:66:8e:2f:b2:9d:
                    9c:07:17:8a:1e:d7:63:dd:96:61:67:ad:e4:69:5c:
                    9a:70:e0:77:9a:bc:0f:d6:ee:be:a5:84:44:86:30:
                    7e:0d:2c:8b:3a:cb:08:34:a1:d3:54:6e:bd:2b:e7:
                    03:7e:3b:3d:40:66:e4:64:b6:e2:64:be:4c:07:ab:
                    f0:23:a7:0d:fb:2a:5d:f2:11:0e:ed:5e:2b:81:2b:
                    8e:34:53:97:46:1b:9d:f0:b5:3f:a0:bb:72:4d:f9:
                    29:6f:69:4b:cb:99:5b:ca:f1:e6:93:96:1f:76:ec:
                    2c:12:58:f7:ed:29:ef:9f:16:a1:97:64:71:ae:a9:
                    f7:62:4d:35:13:23:d7:9d:08:2f:6e:60:3a:39:70:
                    9e:95:44:b6:94:f9:5b:97:57:98:f3:b3:53:28:21:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:99:37:45:7D:44:CB:8A:BA:58:2A:2A:5D:2F:17:A1:76:47:4A
            X509v3 Authority Key Identifier:
                keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:f7:fe:7a:13:3e:4e:8a:35:1c:6e:0f:41:0a:01:d4:c0:
         03:b9:38:09:3f:2c:5b:7d:2e:28:ae:87:c7:00:26:e4:84:44:
         be:31:51:4a:98:31:73:dc:18:68:9f:cf:13:e8:28:d5:84:18:
         53:93:06:f8:ab:bc:79:f4:4e:c2:87:f3:a1:d4:eb:f9:e7:91:
         a2:47:f2:5c:7e:a3:5e:52:e1:98:cb:af:dd:fc:af:cc:a6:0e:
         af:eb:a3:f2:9b:c8:5b:62:41:5b:24:43:dc:e0:f2:71:8f:0b:
         7e:4d:66:5a:9b:c4:c5:08:30:58:dc:fb:10:84:70:5d:be:ad:
         3b:82:14:e8:17:c1:82:5d:b6:11:7d:b4:94:cb:b8:a5:6f:62:
         9d:3b:2f:bb:76:37:e8:6a:a2:e7:b4:77:cc:25:f9:68:9d:c9:
         44:73:7f:ea:c3:a5:ca:ff:e0:29:85:a1:d1:e8:1e:53:2d:81:
         66:58:a2:f0:11:56:bd:5f:28:f9:a6:f2:b2:d5:57:eb:2d:44:
         a8:6a:b6:cd:57:99:95:38:66:71:ed:34:5e:3d:3e:cc:2f:eb:
         7d:76:d9:61:95:83:0e:2d:3e:e8:af:64:19:5d:c9:77:af:8b:
         73:a9:18:af:97:5e:03:72:d6:46:5b:dd:9d:07:b8:02:50:d6:
         9b:b2:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----