Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
File:                     kkMni6ptm9TkNnEE4aCxhMufstw.mft (raw, json)
Hash identifier:          CoyIA6HD+9hFKmEiuV2BfjFAPHSrlmCAI4Q1w5ezbcQ=
Subject key identifier:   07:78:06:59:56:99:25:D2:03:30:68:A5:BA:7D:6A:8C:95:5A:C0:18
Authority key identifier: 92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC
Certificate issuer:       /CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
Certificate serial:       01962E61C22813557CC0DDC6EE24333DC533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft
Manifest number:          1215
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: ZLIGk0OBNpgWvIEPM3FW64TyV6Q.roa (hash: tIZYbv9uO1ydifZNyOm/4u1qZclQNJ4gcOxn8zCiU24=)
                          2: kkMni6ptm9TkNnEE4aCxhMufstw.crl (hash: AX0oLOqs5C/GQa+N7oXi/tAmU/R6fEimWjzf+drKGAQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:28:13:55:7c:c0:dd:c6:ee:24:33:3d:c5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9243278baa6d9bd4e4367104e1a0b184cb9fb2dc
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=07780659569925d2033068a5ba7d6a8c955ac018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:99:86:c6:e7:2b:c1:00:6e:21:3d:46:09:
                    aa:de:d5:80:fc:96:c3:01:e8:6d:ad:06:95:58:7f:
                    1b:92:85:7d:fc:21:1e:3b:4f:80:f8:91:6d:aa:96:
                    5f:93:6f:e5:02:4a:66:cc:e2:50:4d:b8:15:09:8c:
                    cd:5c:aa:f1:f3:be:e3:c7:60:f1:71:5c:b4:d0:b5:
                    70:8e:8c:f3:de:e9:e8:20:31:a0:cf:58:2a:65:de:
                    1a:15:41:5c:18:76:13:15:78:a6:72:be:99:9f:61:
                    61:2f:d0:9c:36:b3:2c:d4:99:a2:31:83:78:41:3b:
                    f6:2b:09:43:08:b2:65:16:e1:30:60:a3:c3:ac:c2:
                    b1:99:ba:5c:24:eb:d1:06:ba:59:9a:cd:3a:8b:22:
                    b4:17:3a:91:90:fa:7a:bf:e4:74:93:f4:74:f8:17:
                    40:7d:31:80:87:14:60:8e:f7:0f:a2:cf:a6:28:6c:
                    be:ee:74:30:4f:00:b6:6e:da:84:c8:e3:39:9c:47:
                    ac:42:95:8b:77:c5:76:36:35:3a:1a:ee:6a:ea:be:
                    84:61:5b:64:0e:f2:69:4d:ce:0e:b5:20:c5:73:83:
                    4c:10:7f:02:48:f4:3b:40:d9:e6:1c:48:cf:32:6b:
                    64:9a:0e:8e:64:b3:d7:af:7b:76:ba:15:1a:e2:f6:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:06:59:56:99:25:D2:03:30:68:A5:BA:7D:6A:8C:95:5A:C0:18
            X509v3 Authority Key Identifier:
                keyid:92:43:27:8B:AA:6D:9B:D4:E4:36:71:04:E1:A0:B1:84:CB:9F:B2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkMni6ptm9TkNnEE4aCxhMufstw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/30e7cf-b4b8-4272-87ab-4c2fbdd56279/1/kkMni6ptm9TkNnEE4aCxhMufstw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:dd:c4:47:02:85:4a:8f:fa:b4:21:37:a8:40:e1:ed:1c:
         8e:94:8d:12:86:49:08:db:3c:cb:e8:2c:63:cd:9a:65:56:e8:
         ea:e7:bd:f0:fa:a6:d8:cf:b6:36:70:c1:65:33:69:7d:56:97:
         43:74:f1:19:02:6b:42:5f:8f:ca:1b:25:7c:f8:e3:a6:c5:f0:
         53:94:94:35:be:87:09:4f:4d:58:28:c0:5e:31:65:e3:2a:1c:
         80:1e:84:68:a6:64:be:11:b6:76:cb:9f:3a:46:78:45:69:cb:
         9d:bc:01:98:cb:9e:ba:4b:e9:e6:f4:c7:7c:2a:d1:e2:bb:51:
         fb:c1:47:43:77:a8:e7:ce:60:b2:c2:98:a3:d7:3c:dd:a2:41:
         d4:df:2e:cd:bb:25:61:57:9e:09:c1:40:49:46:eb:70:7a:8c:
         f7:0c:0f:2b:96:a0:bf:1d:c1:92:3a:32:d1:5d:e5:29:aa:39:
         27:7a:20:6c:70:e7:98:72:6d:95:27:0b:23:7f:48:9d:82:3f:
         07:61:12:af:79:f2:8d:31:8e:98:19:7d:12:1e:98:72:e1:0c:
         fe:17:08:b5:03:2f:53:02:1d:5a:f0:1d:a9:6a:24:6d:61:b6:
         7c:a2:91:1d:7b:e8:58:dd:fd:3a:21:d3:42:10:2d:3f:21:11:
         e5:1e:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----