Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File:                     kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier:          fYURKsuDBJPGiv0zqvifbO93y6q6KiLtCDsORVOR+V4=
Subject key identifier:   B5:7F:46:FF:A4:16:7E:F4:59:F7:A8:11:2F:75:22:C7:EA:59:C7:2C
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer:       /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial:       01962F064F6F35A405ED8714CF162B9ECF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number:          0D87
Signing time:             Sun 13 Apr 2025 12:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:04 +0000
Files and hashes:         1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
                          2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: jkxUX8/sK7MOMZWzB41iHh1BMgOJ+gS4mhd+5z4YZtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4f:6f:35:a4:05:ed:87:14:cf:16:2b:9e:cf:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
        Validity
            Not Before: Apr 13 12:01:04 2025 GMT
            Not After : Apr 14 12:01:04 2025 GMT
        Subject: CN=b57f46ffa4167ef459f7a8112f7522c7ea59c72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:89:5a:ed:5a:7b:c3:b1:ee:bc:27:8f:d8:
                    b5:5b:77:bf:a3:3b:03:e3:7c:a6:54:e5:92:e6:db:
                    dc:40:f2:62:06:89:db:7a:e5:0b:90:d1:0a:8e:d8:
                    8d:16:30:29:f2:1a:a3:e6:a8:0d:74:28:bc:0c:a3:
                    75:3a:c4:cb:e8:89:72:ac:d5:f6:85:0b:55:72:c6:
                    99:c5:b0:3d:83:5c:3f:29:84:fa:f8:9c:d2:19:5f:
                    57:cd:73:e0:4c:65:c2:ef:78:2f:65:d6:99:f7:17:
                    57:cb:57:f5:8a:00:f2:02:b2:db:04:ca:d3:8f:98:
                    1b:36:18:77:3f:0e:5d:20:92:c8:7a:c2:e2:50:48:
                    76:4c:cc:fa:7d:49:4b:53:6b:97:61:51:49:59:79:
                    1f:74:52:2c:06:2d:9c:3e:6b:a9:92:52:c0:05:17:
                    ba:19:4f:d9:18:b9:11:7d:f4:db:94:e7:7f:5b:80:
                    96:9f:37:4b:84:14:c4:06:43:ed:17:f7:04:05:db:
                    af:9d:a2:52:fd:4f:ee:78:23:e2:5f:5e:b1:6d:2d:
                    95:ec:96:7e:83:a8:09:1d:35:e1:9d:20:d6:f8:b5:
                    8f:86:3b:d9:f7:01:00:d3:a7:76:d7:95:4d:87:eb:
                    5e:7b:74:ca:84:19:b2:64:74:f4:96:80:31:14:47:
                    30:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7F:46:FF:A4:16:7E:F4:59:F7:A8:11:2F:75:22:C7:EA:59:C7:2C
            X509v3 Authority Key Identifier:
                keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:37:7b:1b:2d:8b:44:07:9d:cf:16:09:5b:64:b0:5c:d0:
         21:fd:0f:f5:ce:98:c5:5c:ff:0c:26:3a:36:7b:b8:90:6a:e4:
         f9:f8:dc:8b:8d:ff:05:ec:0b:9b:d2:e3:7d:41:42:e9:43:79:
         b7:1b:3e:9d:f0:9a:c1:af:3a:2a:4f:0e:ad:5e:c4:8a:2b:0e:
         39:68:82:66:8d:c9:44:12:b8:57:47:62:cd:a6:89:7d:d5:77:
         a2:f2:f6:ff:fe:65:cf:ef:2a:28:6a:59:78:62:ed:37:77:92:
         ad:46:5d:d0:ce:f6:7a:28:0b:6c:25:d0:92:15:72:4d:7a:5d:
         78:c7:a5:72:bf:f7:80:01:4d:6f:25:4a:00:06:df:dd:ca:cb:
         49:4c:a7:08:aa:65:f3:e4:12:a7:6c:e9:07:19:23:ab:5d:65:
         ca:dd:1b:27:01:00:5f:55:e0:2a:e3:e1:47:91:59:9a:ce:08:
         7d:b8:d7:86:dc:f9:10:2c:35:14:7a:0d:4f:05:4d:e9:d3:43:
         55:2c:f2:5b:96:5e:31:21:60:c7:43:28:57:13:79:3d:34:32:
         32:4a:8c:32:38:e5:0d:17:05:d3:83:0a:74:72:44:7f:cc:72:
         6f:0b:3f:6c:cc:4f:d4:e5:56:44:6f:91:9b:2f:1b:bd:43:2e:
         bd:3f:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----