Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
File:                     kjkTU_bh9QJQSgho6_itDevJ2ng.mft (raw, json)
Hash identifier:          hivfM36k1HpO8051L/m/d5RrVp6Oy0n0St2RN11LoQM=
Subject key identifier:   49:85:14:CE:9E:6F:BE:B6:5E:F9:3E:FE:BA:3E:BF:92:BF:AE:B0:8F
Authority key identifier: 92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78
Certificate issuer:       /CN=92391353f6e1f502504a0868ebf8ad0debc9da78
Certificate serial:       01962F7442E3F2486B27CE2B0E047F1ADCA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: Y1qiOsiJl7ctFQ1S5ovQ0dk8hII.roa (hash: DDlUT5t8UxzIl4tHxig5obNkFIGRkEa/vbQ9YVdOq/o=)
                          2: kjkTU_bh9QJQSgho6_itDevJ2ng.crl (hash: buwIMf2BcKDOEtHDsXIeQ7ceKBYaCvo3kIQ3gYVBUhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:42:e3:f2:48:6b:27:ce:2b:0e:04:7f:1a:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92391353f6e1f502504a0868ebf8ad0debc9da78
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=498514ce9e6fbeb65ef93efeba3ebf92bfaeb08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:2c:bd:c2:61:9f:26:a2:45:98:29:97:4c:
                    17:ee:db:9b:25:5a:b6:92:9a:75:46:83:c9:64:20:
                    dd:e3:84:0c:3a:a3:cc:fd:05:bf:9e:c3:ce:1a:77:
                    c6:92:b4:41:e8:9d:be:78:5a:bf:dd:56:2e:e4:2e:
                    d2:3f:44:a9:b8:61:30:00:4e:7a:e1:5b:12:ac:f1:
                    d6:f5:5f:d5:07:db:5a:cd:bc:12:d0:7d:26:fb:03:
                    26:9c:af:6b:f5:3e:0a:ef:e8:ee:35:61:1c:38:c6:
                    95:36:a3:10:9a:f5:be:91:7a:6c:96:71:5a:62:f1:
                    09:5a:49:5e:1d:5d:c2:8b:79:ba:cd:8f:c3:ec:3e:
                    86:5e:92:85:11:7b:fb:66:79:dc:27:22:5e:42:f2:
                    fd:64:a8:2a:31:73:49:bc:77:dc:c1:aa:1e:56:3d:
                    11:2a:19:a6:30:7e:62:59:03:da:14:d4:68:ad:19:
                    94:4d:19:df:c5:b3:ce:2c:ab:4b:23:e6:80:28:a4:
                    7a:0c:62:50:06:b7:61:bc:74:4f:65:50:e2:ce:20:
                    d8:5f:24:ee:89:9e:75:10:c4:4e:54:6a:7f:df:61:
                    87:79:97:fd:87:1b:f5:42:ea:9c:a8:35:7b:62:a3:
                    88:79:1d:8a:cb:51:68:bf:33:a4:e1:d5:6d:c7:c0:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:85:14:CE:9E:6F:BE:B6:5E:F9:3E:FE:BA:3E:BF:92:BF:AE:B0:8F
            X509v3 Authority Key Identifier:
                keyid:92:39:13:53:F6:E1:F5:02:50:4A:08:68:EB:F8:AD:0D:EB:C9:DA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjkTU_bh9QJQSgho6_itDevJ2ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/227670-fe4d-4bd6-bf28-b2545b404eec/1/kjkTU_bh9QJQSgho6_itDevJ2ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:60:cd:a4:2d:e1:b7:90:9c:79:c3:1a:ae:62:f4:aa:62:55:
         b4:a3:a3:eb:71:5f:61:eb:e1:6e:a1:10:bf:53:e3:84:9c:1e:
         06:cd:77:f6:74:d0:bd:62:54:56:a7:29:26:88:cd:a1:df:0e:
         fe:44:af:2f:99:6b:15:09:1f:75:58:ed:24:f8:71:49:64:f1:
         ec:e2:e2:0f:62:39:6f:9d:5a:79:eb:0b:10:db:50:33:f7:0b:
         a0:48:f9:06:89:22:1c:6e:ff:49:ad:89:27:58:c1:cc:56:d6:
         16:a2:74:d2:30:77:fe:78:64:6d:f7:e6:a5:91:b5:ea:8f:bb:
         38:2e:d0:d7:42:e5:7f:3f:26:47:55:5e:dd:7c:47:d5:ce:e2:
         4b:eb:24:d9:0b:f6:b5:48:ce:9d:54:a7:e0:d0:fd:2d:6a:3f:
         2f:8a:8d:96:a1:05:23:34:e3:e6:09:07:92:3c:69:db:6e:76:
         b6:79:b3:9b:ed:50:ad:86:27:2d:34:6a:19:80:21:40:bc:d8:
         c3:ef:29:9a:e1:85:7e:ad:e1:24:98:9f:56:d6:3b:63:91:2f:
         75:c6:4f:30:09:b7:21:e9:42:6e:99:9c:57:22:3c:c7:45:e6:
         71:f7:8c:cf:54:06:e5:58:bf:d2:e2:7c:8b:1f:21:6d:1c:3e:
         c3:55:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----