Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
File:                     KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft (raw, json)
Hash identifier:          IPzZFG1nfyjGU6jEuGxc/gOB+Y3PlVrFAOPeZNCRvTU=
Subject key identifier:   E4:75:3A:43:01:E1:49:99:D1:6E:D1:43:87:64:38:0C:E9:79:0D:56
Authority key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Certificate issuer:       /CN=285feec87d1959340872f8f79831202f24c80c9e
Certificate serial:       01962DF3A26739AF37FB02F96E5A03269BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl (hash: nk5IgnPEQvWiKCHS5E/J/g+4eipRk8LB/MgjFzSpnEs=)
                          2: dufDt0AmSEl5MX84gmoizwQiTsk.roa (hash: aXEbp58hPoSuyC6IS1AxqUQLOo+BHH3jFCGl+xNSnf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a2:67:39:af:37:fb:02:f9:6e:5a:03:26:9b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285feec87d1959340872f8f79831202f24c80c9e
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=e4753a4301e14999d16ed1438764380ce9790d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:09:6c:1d:04:00:38:ad:58:4c:ee:96:24:
                    c1:db:65:e3:48:ea:e2:ac:0d:2f:b1:09:c3:00:37:
                    f5:ff:5e:00:46:04:f7:3a:68:43:36:c0:28:22:d0:
                    f2:7a:3e:e4:e5:58:b6:97:60:2e:fb:d9:e9:63:ef:
                    37:22:45:d4:dc:b9:a9:1f:d2:76:8a:99:1c:d1:fd:
                    a3:26:11:13:5a:ab:83:08:5b:cc:84:e1:1b:4d:85:
                    93:41:92:e0:4e:4f:67:69:e2:e7:08:c6:f7:27:9b:
                    b0:6a:16:49:aa:cd:de:69:60:c2:97:98:f9:ec:23:
                    75:4c:7b:27:0c:ed:a5:ea:86:94:b7:09:21:38:1e:
                    ef:97:b9:a7:04:9a:8e:14:59:b3:a2:fb:e4:75:8f:
                    20:43:7e:db:7e:ac:f3:20:95:c8:61:ad:a3:b5:10:
                    7e:31:16:16:5f:57:85:dc:b1:c4:3c:c9:2c:3c:ac:
                    25:de:6d:af:4d:e4:32:f1:c1:af:52:9a:09:c3:6a:
                    65:a5:14:bf:83:b2:aa:8e:88:45:c5:25:97:25:ce:
                    64:e9:05:cb:b1:aa:d6:1c:7e:62:b2:ad:d0:ca:d8:
                    a3:0c:72:ad:fc:75:ad:2a:16:7a:e7:70:b0:e3:86:
                    8a:33:22:09:bc:74:5f:f7:a1:20:f8:98:c3:a5:c6:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:3A:43:01:E1:49:99:D1:6E:D1:43:87:64:38:0C:E9:79:0D:56
            X509v3 Authority Key Identifier:
                keyid:28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:c6:96:cc:55:ea:80:4e:07:34:29:6b:1a:51:a1:85:02:
         ad:14:76:b4:63:27:ac:6c:01:81:fb:f9:09:ba:19:27:60:80:
         48:d8:df:0c:76:14:55:99:0a:55:84:a4:30:42:06:81:8e:8c:
         80:3d:ca:d1:49:d0:32:d3:db:7f:de:bd:a4:7a:53:b4:57:47:
         89:3d:b8:13:2b:98:e8:d9:31:72:3a:7c:77:1c:ce:d0:05:cb:
         1b:2f:68:73:74:79:a9:84:c6:d4:5e:90:c0:37:44:70:49:93:
         aa:fd:8c:c6:6b:c1:81:c3:e6:e0:d4:ed:28:a0:c1:33:cd:7c:
         a5:35:44:ee:c2:c5:97:57:05:d6:68:1c:8b:e6:4f:7e:6a:19:
         56:7e:a3:4a:46:5c:f1:63:df:af:87:21:c7:76:31:8e:02:b5:
         06:7c:cb:13:f3:7c:24:be:22:d6:60:e5:66:21:ce:ae:c9:f3:
         61:12:40:6e:8d:f9:47:6d:3d:d4:8d:58:76:05:9a:0b:f3:c6:
         92:77:03:4d:60:b2:d5:4a:e2:0e:45:18:c7:69:65:84:61:13:
         91:53:97:9d:eb:6c:90:d6:82:ed:4b:75:40:e1:3d:ef:19:18:
         c6:31:7e:00:a3:e7:5a:ef:52:20:de:eb:19:f2:94:e5:03:7f:
         01:1b:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----