Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File:                     KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier:          rgCc5DD13o2XZ1CkoBKs9S7CS6UHcaKnbz8Q5nu0XV0=
Subject key identifier:   57:D3:D8:2A:9D:56:19:49:2F:A8:17:71:F7:76:6C:43:FC:13:E6:07
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       01962F0680D4B434DC183252351B0D85624A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number:          0A4A
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 4lHY4uWeqHmvoaNymD_moDG2Lyw.roa (hash: JlxlEX1JbWtrSymgf6LUCml6ssBX/gAxppMm1dFFwtA=)
                          2: JAuA883iG3ecktuhBvPjwiYE2gs.roa (hash: 2XmurE8d9+/OzcrvAO2f2ROqPHe6N2R65dp7AYrb+WA=)
                          3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: Zj2JnTXKG1Gq20WAf/eZDwbs7G+kENnZbYVNBumPcSU=)
                          4: W3b2c3aWBkGLPIRx0_mmFrVFSVU.roa (hash: Rq6QPKASLV/oR+YlvSOZH+p9bkYj2tEbh35TLa/W+TE=)
                          5: cu9GyWa_Lwnd02KODnjE_h5McWk.roa (hash: 44QiQ8pIvo7mzZfC+ZjzIe/89Qsc6m4rb8gND25Z0Gw=)
                          6: xyRoD48_RddLMyzaWVm2RVSdNnw.roa (hash: 9GofeWtQdMUnPq68/CDpAq5ljzoKlzyYm0VUKW07EJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:80:d4:b4:34:dc:18:32:52:35:1b:0d:85:62:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=57d3d82a9d5619492fa81771f7766c43fc13e607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:00:18:73:ec:76:1e:c9:b4:9a:a2:ac:af:
                    04:4f:11:42:fe:7d:72:0f:32:0c:9f:79:bf:98:74:
                    40:96:6f:1a:5b:aa:6b:04:fa:8c:15:0d:3c:c7:e1:
                    ad:9e:cb:40:e8:43:0f:78:19:fc:52:aa:ec:c6:83:
                    d7:fc:b6:12:4c:cb:dd:8e:aa:6a:1e:11:e1:b4:8b:
                    7b:1a:ab:d6:ff:d0:de:16:7f:73:28:17:1a:40:c1:
                    61:6f:62:2f:9f:b2:a3:c1:7f:40:83:83:6d:8a:c3:
                    ea:e2:0b:2f:b1:29:96:79:7e:e2:56:d8:04:8d:cb:
                    07:9e:37:61:64:66:45:08:27:9f:e4:7a:9c:9d:1c:
                    ae:09:11:9b:bd:66:8c:17:0c:b8:bf:30:56:ab:16:
                    6b:a4:c0:2a:45:62:3f:aa:93:0b:9f:49:36:4c:1e:
                    56:08:80:64:b1:6d:25:4c:8b:6a:dd:c4:aa:05:7f:
                    e7:1f:2b:50:d8:95:5a:b1:7d:71:42:eb:23:7f:53:
                    46:0c:e7:22:82:ba:41:ca:c6:a8:b9:64:bb:ea:8b:
                    8d:bc:6a:7d:3f:2e:28:b5:a0:10:78:f5:12:d6:cc:
                    7f:bf:f8:bf:66:72:8a:6c:c6:5b:75:43:c4:2b:5a:
                    f8:9d:da:ec:0c:63:38:ea:7e:9d:8d:1b:2a:dc:85:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:D8:2A:9D:56:19:49:2F:A8:17:71:F7:76:6C:43:FC:13:E6:07
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:4c:bb:30:ed:82:6c:1b:e7:00:32:cf:ba:e2:9d:68:03:
         b7:83:d9:85:28:ed:3e:1a:21:0e:9b:42:c4:7f:cd:55:e1:95:
         4b:0f:75:5c:78:0d:c5:99:60:6f:cb:3c:19:a7:7b:a1:be:ce:
         54:15:40:3d:11:37:58:02:bc:9d:2d:94:12:27:95:36:e9:f7:
         0f:44:c6:f3:eb:f6:27:ba:c2:ef:f2:73:77:79:a3:cf:91:2d:
         32:4e:fe:f9:2c:b2:eb:bd:5d:39:05:fb:53:df:64:6b:00:8c:
         7c:c0:33:c7:76:76:13:0c:a7:af:40:93:49:ce:08:df:12:ca:
         90:a8:a9:70:57:9f:eb:8a:bd:2a:bc:d3:5e:76:6b:f5:b5:f9:
         4b:27:68:01:b3:66:b6:57:2a:26:0c:25:34:00:19:f0:00:93:
         9b:25:29:aa:6e:d4:06:7e:11:27:5b:21:2b:81:28:fd:46:d4:
         0e:00:b0:a7:46:c8:c9:66:71:1c:54:b6:b4:d0:c4:21:3e:66:
         be:01:81:39:d9:27:0a:cb:0a:24:18:8b:19:d0:b4:fc:71:5b:
         f7:15:a7:f5:51:98:a8:7a:81:4d:4f:f2:cf:0b:c8:cb:e3:75:
         db:41:57:4e:eb:d2:27:c2:4e:59:c6:d2:c9:a2:92:45:ae:29:
         26:20:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----