Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File:                     KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier:          xxYO2HyZWwRoynvZGjKx9qLesjF6Hniv0UrHtTI1SCk=
Subject key identifier:   B1:52:CF:51:17:94:A5:F0:95:28:FD:12:80:5F:F3:3D:35:34:49:59
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer:       /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial:       01962E2B389ABA5059C887AAFEF1576427E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number:          0EE3
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: 7YhoVgG/rJWCJThC9OdUHfpk4j9ff+hjUKRHQ9vNJfs=)
                          2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:38:9a:ba:50:59:c8:87:aa:fe:f1:57:64:27:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=b152cf511794a5f09528fd12805ff33d35344959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c3:b0:c5:09:ea:e6:f9:d9:b9:15:e7:ff:76:
                    cf:cb:5a:01:a5:ac:05:cd:5d:fb:32:7c:f3:38:57:
                    23:2f:d2:4c:f3:24:f6:f0:39:06:f3:8c:2f:cc:d0:
                    04:c3:b7:13:06:47:dc:2d:ed:fc:06:10:da:c3:8e:
                    b2:f3:ad:fb:b5:17:47:08:f0:20:09:6a:46:dc:5b:
                    7f:c1:fe:bc:8f:49:4d:74:b2:c4:12:3e:63:1d:fc:
                    a1:ca:06:52:fd:9b:cd:77:07:0e:b3:25:c3:00:9f:
                    43:25:34:e0:8d:bc:a4:80:79:da:f8:80:c0:20:7f:
                    7a:cd:b3:ed:ff:7d:a7:e4:bb:c9:a5:c8:0a:bf:dd:
                    8f:43:45:41:8f:73:38:78:47:19:02:54:09:37:db:
                    1c:d8:88:2f:15:ec:b8:09:7b:bf:f3:72:5e:14:b4:
                    13:b4:8b:17:89:03:1f:ce:18:92:44:82:63:0a:e8:
                    79:a5:4c:59:c6:14:26:56:a9:4b:16:a8:65:34:4a:
                    28:5e:e1:29:f5:b2:0b:91:d3:1e:84:cd:9a:f5:21:
                    57:74:6c:62:61:42:6a:5d:f3:6f:ac:db:21:68:c4:
                    9c:4c:0d:3c:f2:7e:d6:e0:0e:a0:ff:6c:db:69:e5:
                    ee:dc:a4:76:3d:e4:72:26:80:c0:ac:8d:e6:54:63:
                    81:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:CF:51:17:94:A5:F0:95:28:FD:12:80:5F:F3:3D:35:34:49:59
            X509v3 Authority Key Identifier:
                keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:15:5c:95:2c:96:a0:8b:04:6d:2a:af:1d:52:5f:49:4f:8c:
         3d:13:93:7c:d4:3c:88:98:2e:e3:e5:0a:26:79:1d:ef:86:20:
         3c:8a:82:e9:a5:20:f0:1a:d5:d0:ce:5f:5e:39:03:f2:2e:a1:
         6d:9d:5e:74:0b:c4:42:fb:17:4e:d1:84:e9:93:d0:0d:98:2e:
         a6:03:4a:6a:c1:9e:0c:31:4e:00:ef:c3:34:5d:27:c4:cb:c1:
         7a:c3:3c:0d:96:63:8a:c4:96:0c:8e:d0:65:8d:ea:90:9b:67:
         bf:dd:23:bf:42:e6:24:db:e5:f9:fd:3b:5e:3b:53:8c:af:1d:
         8e:5c:f1:60:d8:60:0e:4e:8d:0a:6a:bd:b0:39:4f:88:6b:4f:
         a1:94:3f:4b:29:0e:7b:28:3a:25:4f:93:b7:86:0f:97:f3:a0:
         ee:fd:8f:99:f3:77:e7:20:97:c9:ff:e2:03:45:86:ac:7d:65:
         80:e4:0c:bf:bc:3b:4d:71:0e:3a:f8:2f:7f:34:b0:be:4f:2a:
         7e:a9:a5:a4:63:a9:a0:15:db:b4:15:4b:f9:f6:47:be:8c:11:
         68:d0:6d:79:ae:75:2e:c9:ff:cd:d8:ab:94:6f:7a:83:2d:a6:
         28:56:99:bf:73:df:fb:39:d7:bf:dc:65:17:c2:59:7e:b0:69:
         52:b7:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----