Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          dgTPa8dMvVBHYmI01qp0deoEcqPW+GtXaLYKZY5RYhc=
Subject key identifier:   87:9C:D5:AC:F0:11:07:69:79:8C:B0:DA:82:78:8B:56:36:A8:85:7A
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       01962FAB1989543784EDD3CD91F75B1EFC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          0204
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: zs27f6IBIKj+7lfqR462IPOxSc4gBkUXTw4uFNQTfwo=)
                          2: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (hash: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:19:89:54:37:84:ed:d3:cd:91:f7:5b:1e:fc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=879cd5acf0110769798cb0da82788b5636a8857a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:aa:2c:72:29:64:32:64:fb:f7:98:57:97:
                    5b:eb:de:e4:54:7f:84:e0:48:2c:c1:8f:9f:e7:90:
                    ec:33:ce:98:50:32:13:17:86:d2:6c:b2:ed:52:9c:
                    73:12:59:c2:81:35:c3:87:4b:0a:7c:61:21:b2:02:
                    07:67:5d:84:5a:ed:cd:e7:de:7f:2c:23:d6:14:bd:
                    34:66:c2:a2:2a:5f:f5:a6:f4:41:7d:1c:83:8d:a3:
                    6a:08:a7:13:0e:df:0e:e2:06:37:4e:5f:18:f2:0f:
                    92:b6:3d:fa:c5:bf:68:fb:c0:29:94:3a:33:28:8a:
                    5a:6f:80:69:66:04:90:80:30:3b:7a:53:a5:7c:70:
                    e1:9b:37:3b:84:9f:38:b3:30:d8:c3:bb:56:cc:c5:
                    77:77:48:e2:07:b4:cc:05:b0:ee:9d:72:c3:fe:b6:
                    47:cc:88:14:53:76:64:16:ec:fb:44:49:04:95:93:
                    b9:02:b5:b6:43:e6:9c:e1:fa:a3:9a:cb:9d:3e:12:
                    bb:6d:e9:81:a5:a5:b9:6e:4d:89:80:02:31:b2:8d:
                    fd:17:4f:c4:56:70:47:09:a3:0f:52:61:f4:e0:e6:
                    2e:00:64:c0:04:11:47:cd:7f:55:c1:05:df:58:c2:
                    2c:98:ad:23:fe:7e:0d:b5:ce:2a:27:76:c7:59:f5:
                    d9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:9C:D5:AC:F0:11:07:69:79:8C:B0:DA:82:78:8B:56:36:A8:85:7A
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:32:6d:d6:ea:c6:d0:89:9d:fe:99:2a:83:e6:07:f2:b1:
         68:d1:87:77:b3:99:5b:f0:1c:95:f0:ce:be:76:c4:e1:fc:58:
         1b:1f:ac:a7:75:4d:17:72:ae:da:3c:5d:f1:40:71:00:f7:3b:
         b7:1a:06:82:36:cb:91:3c:95:fd:b7:42:52:29:09:64:57:84:
         9a:ca:cd:03:19:c4:27:44:2e:98:92:8a:ce:f2:58:58:e9:83:
         a0:b7:64:aa:72:69:5d:ae:8c:8c:a4:dd:1d:6d:47:8c:19:16:
         7d:d1:6c:0f:2d:64:5b:8e:dd:d0:9a:e1:3f:9f:e6:ea:30:8d:
         e5:da:0a:97:36:f8:dc:5e:a9:b1:11:c2:e2:0b:ce:4f:76:7c:
         b5:bc:c3:1c:95:c9:91:31:f3:f0:25:15:e9:fb:57:f1:02:c9:
         5b:57:b6:96:cb:a7:38:1b:de:2e:81:43:1d:52:f7:16:93:5c:
         6c:a8:b1:b9:09:88:25:43:1f:e9:f9:5e:81:97:8c:cc:95:8b:
         2a:c8:89:a1:71:06:e0:2e:13:5a:d8:ca:6f:8f:49:3e:f6:95:
         3a:6b:66:2e:6c:94:a4:c3:e7:fd:f9:60:da:8c:ab:78:05:46:
         36:18:d9:aa:84:4f:36:c0:f4:37:8a:3c:a2:42:f6:1c:5f:cc:
         5d:6a:eb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----