Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File:                     K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier:          2zrbnMUiVHuxaThfaTSnvxnGYoLibbBVqDFITL7MkfI=
Subject key identifier:   08:40:C5:78:35:B7:17:BC:01:1A:01:C1:F9:BE:3A:4D:A3:C4:09:F5
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer:       /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial:       01962F74D51153EDE27C7D819202067B932A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: DqONGyN4f2QiR_JBPW1YDEERSgY.roa (hash: hcUdhN/Q72hQMfPXTJG/rkvmfnNKO0VTd/wDCAV6Uog=)
                          2: Fwb_ppscuGDYL-jhgbcCpbVGUq8.roa (hash: OMM8N1h+wes9eBnmh2F9RG2txtTXqbxFDNRM3hzsAD8=)
                          3: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: NoQdYldkzRJ4ZKHjxhzMCuPVJuE90fIIhmm1VhHtTx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:11:53:ed:e2:7c:7d:81:92:02:06:7b:93:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=0840c57835b717bc011a01c1f9be3a4da3c409f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:4e:36:ae:1c:66:cd:ab:5a:f7:6f:ce:f1:
                    7e:bf:f2:67:4a:87:0f:73:53:d0:f2:98:0f:c9:e8:
                    50:8b:ab:e6:a3:5f:db:53:6e:85:e3:0d:f6:99:57:
                    af:1e:a4:6f:48:08:12:8f:14:41:8f:12:12:4b:6d:
                    4f:f3:53:7c:fe:40:fd:3e:81:c4:b0:0e:54:40:36:
                    b5:c5:c2:fb:2a:21:19:54:06:f4:44:15:57:41:3c:
                    7b:40:0c:0a:65:c2:71:cd:37:dd:78:f1:f2:b3:a8:
                    48:c5:64:da:62:3e:bb:92:85:7c:28:75:85:3d:c7:
                    4b:ea:46:c1:7f:5b:64:f5:58:b6:a6:f9:ed:c4:28:
                    29:51:74:8a:c5:96:6f:73:0d:87:92:b9:4d:f0:d2:
                    dd:f5:a1:85:44:6f:e7:b2:68:ab:8d:e9:04:b9:95:
                    6e:11:d5:c5:88:25:eb:72:8c:cc:a0:09:0c:8a:fd:
                    95:fe:dc:98:6e:ee:aa:5a:d4:f4:37:9a:b7:53:4f:
                    20:78:20:08:ab:81:a6:e5:d3:00:73:49:d8:9e:67:
                    73:09:48:2a:48:c4:f6:27:5e:53:38:9d:06:01:fc:
                    0e:0c:e8:cf:06:f0:21:54:da:cf:47:73:cf:c1:7a:
                    ce:5c:e0:77:63:b2:11:bd:05:b3:98:05:fa:99:c9:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:40:C5:78:35:B7:17:BC:01:1A:01:C1:F9:BE:3A:4D:A3:C4:09:F5
            X509v3 Authority Key Identifier:
                keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:b4:2d:8c:48:f5:ed:f6:d5:a0:a9:21:b3:41:eb:01:c5:
         c5:eb:92:e5:93:71:9c:27:19:d4:5a:d1:5f:47:83:3e:d8:e4:
         2d:9d:2e:7a:53:7d:ef:82:ba:71:ca:d2:04:9b:7d:91:f1:10:
         f6:ed:13:b2:a1:63:43:f8:80:25:d3:2b:5c:50:aa:f8:48:a7:
         42:d2:1d:c7:a0:15:86:e5:8b:e8:38:f0:47:58:b4:a7:af:43:
         4d:40:5f:05:89:0a:83:ea:4a:cf:ec:80:ce:b9:cb:10:9d:7d:
         ff:03:59:7e:c2:5f:87:15:8b:73:2a:6d:6d:aa:29:6a:df:76:
         51:ab:41:d3:97:71:d0:8f:45:28:7b:7c:d8:cb:d3:8a:67:a3:
         ee:0b:d4:3a:41:0e:12:55:b7:d4:5a:d2:3f:ac:8c:31:66:49:
         b1:0b:41:aa:9b:56:ff:aa:b9:e1:e7:11:9d:85:06:2c:f6:06:
         52:9c:d6:72:0d:05:91:95:8d:8f:db:32:18:86:59:3e:a7:b1:
         2d:04:2b:0f:53:51:1f:21:f4:d0:36:50:31:36:6d:64:d1:90:
         af:25:d0:ce:fb:d6:a9:93:d4:a7:88:64:2a:d1:46:ea:02:48:
         cd:38:c4:89:c1:8e:87:01:3e:9c:0d:89:73:ca:20:d6:47:7e:
         bf:23:4d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----