Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File:                     KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier:          T3eGl341JTA8BXfRvb7rRfILD7EKyqWNzFrPIJkOcXQ=
Subject key identifier:   7E:80:32:7F:AE:E5:16:B7:AF:0C:75:1D:4A:88:FD:D7:83:4F:8C:83
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer:       /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial:       01962F06EB2AD09F9D713E583E56B3244286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: ouwx0gZpxcR5tADCzr5eDwMM9Ik27EZYgWZJ85W817k=)
                          2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:eb:2a:d0:9f:9d:71:3e:58:3e:56:b3:24:42:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=7e80327faee516b7af0c751d4a88fdd7834f8c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:a9:8b:2e:cc:80:7a:16:9d:75:b6:3a:8f:
                    18:62:00:ba:30:b7:71:36:2f:c0:13:ed:2e:f3:89:
                    c4:18:63:81:7e:f7:8c:18:76:5b:a0:25:7e:11:63:
                    72:fc:2a:23:8c:2b:4b:ed:3f:49:1f:b4:a4:4a:57:
                    fb:8b:78:5d:b7:f8:3d:9c:2f:05:51:f0:be:ae:54:
                    99:22:f5:b0:75:eb:10:33:51:dc:47:1f:32:f5:6a:
                    82:d4:f9:56:a2:31:62:4c:fd:4a:46:a9:53:6e:4d:
                    7e:db:69:5a:53:21:11:99:5d:ef:5f:b5:7f:66:c4:
                    ef:9b:23:c1:89:a7:fe:6d:29:9c:73:df:97:c5:27:
                    69:5a:f9:aa:53:49:aa:3d:69:30:b9:41:fa:ac:6c:
                    3d:23:63:f7:ec:9c:6e:f7:c2:54:f2:6a:db:80:ab:
                    0e:99:0c:ba:b0:1d:ac:46:a2:3d:cf:3a:56:a8:75:
                    29:f6:a8:7d:04:59:58:62:f6:6d:c4:f1:c7:85:ce:
                    de:d1:40:34:f9:4f:f6:f4:2c:2d:81:00:13:8e:ca:
                    5e:e8:bf:5b:00:14:f6:cf:33:25:dd:38:cb:5e:ee:
                    31:20:ee:50:ea:80:bc:3d:42:f1:d6:57:d3:98:8f:
                    87:07:ab:45:1b:b3:46:28:7a:be:d3:59:73:2c:a7:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:80:32:7F:AE:E5:16:B7:AF:0C:75:1D:4A:88:FD:D7:83:4F:8C:83
            X509v3 Authority Key Identifier:
                keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2f:0b:c8:17:cb:f4:ab:71:10:bd:65:f3:12:70:c0:32:0f:
         e2:47:1c:a1:a0:5f:e7:af:e2:b8:96:63:02:2c:17:9d:8c:57:
         3c:f1:e6:11:e7:86:b5:aa:e3:de:aa:51:73:1e:ec:45:b6:84:
         b3:e0:ee:ea:c5:c7:63:b3:e7:1f:9c:92:45:ef:19:8c:44:f4:
         7d:51:2f:62:93:78:3e:9d:a1:56:0f:55:b4:6e:15:4e:77:97:
         14:85:98:1f:12:c6:c7:05:2a:21:00:34:a1:29:9e:e8:1a:bf:
         c0:89:a7:d0:7e:f5:84:3e:2b:df:f4:84:6c:17:ac:64:ec:2f:
         d4:e4:50:39:a9:6a:8a:9c:00:15:bb:6b:1b:47:33:72:1c:e9:
         6d:a9:89:29:9c:e0:22:07:2c:b0:02:20:69:29:64:8c:3a:02:
         f3:98:b6:fe:34:bf:5a:dd:6e:c7:32:d6:2e:59:9d:6f:ef:14:
         09:67:9f:d2:8c:68:6d:62:e4:0c:d0:c1:3a:87:06:7c:42:06:
         f1:1d:7f:bc:3e:3a:c4:78:5a:2e:08:dc:bb:77:e8:f8:35:5d:
         d7:43:84:76:bb:70:91:bc:03:b2:59:19:6d:77:27:60:63:a0:
         4c:60:78:c7:0e:bd:8a:2b:67:a3:34:00:d1:38:a3:1d:27:39:
         d8:fa:5b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBusq0J+dcT5YPlazJEKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDkzNzMxZWZjY2M3NGFkNWMyNzM4NzRiOTM2MGY3YWE2
ODk0NjUwHhcNMjUwNDEzMTIwMTQ0WhcNMjUwNDE0MTIwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZTgwMzI3ZmFlZTUxNmI3YWYwYzc1MWQ0YTg4ZmRkNzgzNGY4YzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvypiy7MgHoWnXW2Oo8YYgC6MLdx
Ni/AE+0u84nEGGOBfveMGHZboCV+EWNy/CojjCtL7T9JH7SkSlf7i3hdt/g9nC8F
UfC+rlSZIvWwdesQM1HcRx8y9WqC1PlWojFiTP1KRqlTbk1+22laUyERmV3vX7V/
ZsTvmyPBiaf+bSmcc9+XxSdpWvmqU0mqPWkwuUH6rGw9I2P37Jxu98JU8mrbgKsO
mQy6sB2sRqI9zzpWqHUp9qh9BFlYYvZtxPHHhc7e0UA0+U/29CwtgQATjspe6L9b
ABT2zzMl3TjLXu4xIO5Q6oC8PULx1lfTmI+HB6tFG7NGKHq+01lzLKcHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6AMn+u5Ra3rwx1HUqI/deDT4yDMB8GA1UdIwQY
MBaAFClJNzHvzMdK1cJzh0uTYPeqaJRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGIt
MGNkOGE2OTcyOWI3LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGItMGNkOGE2OTcyOWI3
LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASS8LyBfL
9KtxEL1l8xJwwDIP4kccoaBf56/iuJZjAiwXnYxXPPHmEeeGtarj3qpRcx7sRbaE
s+Du6sXHY7PnH5ySRe8ZjET0fVEvYpN4Pp2hVg9VtG4VTneXFIWYHxLGxwUqIQA0
oSme6Bq/wImn0H71hD4r3/SEbBesZOwv1ORQOalqipwAFbtrG0czchzpbamJKZzg
IgcssAIgaSlkjDoC85i2/jS/Wt1uxzLWLlmdb+8UCWef0oxobWLkDNDBOocGfEIG
8R1/vD46xHhaLgjcu3fo+DVd10OEdrtwkbwDslkZbXcnYGOgTGB4xw69iitnozQA
0TijHSc52PpbMA==
-----END CERTIFICATE-----