Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
File:                     klbr9muA8IE1hY0UTO1veFg09fQ.mft (raw, json)
Hash identifier:          VGLPV8glg+uhcz+t7zR0Grh8GwkR8sdHVjC7V5OE6AQ=
Subject key identifier:   65:02:B7:9B:B9:11:7C:E2:71:83:05:F5:5A:32:32:36:EF:7C:39:FA
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Certificate issuer:       /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial:       01962ECF4DEACBC013C22D459A38D5322F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 11:00:59 +0000
Files and hashes:         1: 0cwv1kps50n5fxH17jZ6DrIm1N0.roa (hash: undM2lyLTll3NMITFEXa/JcW5GP1KelrAOfh7Rau6zQ=)
                          2: DFcDai4MmMP-4I9ZmvHSmiuuiVo.roa (hash: P1EgClV7bkG9omjLGc5Uu3/ShqO9L3Dji7Yyz/EuHLk=)
                          3: V_xEHpefO5u5KSTu-XYSWan-kRo.roa (hash: jYILx7U+IDJR4gLw2si3w1xLilgSY3Xi257sg6Z15eA=)
                          4: Z26jB8MmkVPCobutKSYkZRRffSw.roa (hash: jtYR3qZJ5WEi/+pEZva2m9kUb9g5HMevovBDi8SuUfU=)
                          5: e1u7bA6PuDBeHm9U9nKjSLDhACw.roa (hash: DvBt+9eFN/dfM+tx+F5jn+yDWZNZsODtMhC5M+LFI08=)
                          6: klbr9muA8IE1hY0UTO1veFg09fQ.crl (hash: GDXO1N8dWpanZDhBx04ypWN9dk+pO9Z18tox0V97ct0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4d:ea:cb:c0:13:c2:2d:45:9a:38:d5:32:2f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
        Validity
            Not Before: Apr 13 11:00:59 2025 GMT
            Not After : Apr 14 11:00:59 2025 GMT
        Subject: CN=6502b79bb9117ce2718305f55a323236ef7c39fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:b8:d7:c1:dd:46:c1:91:60:51:87:05:c5:
                    bc:60:68:05:a6:aa:e6:4a:bd:9f:2c:a8:7c:48:54:
                    8d:4d:3e:83:24:20:c6:8d:8a:a8:2b:37:2c:10:01:
                    78:bc:bc:c9:2d:c0:64:64:fc:26:22:28:55:78:27:
                    a2:a0:e0:6e:28:4e:71:2b:15:48:7f:ba:07:a8:a9:
                    02:85:86:09:75:30:e1:3e:32:57:51:9b:2e:77:6f:
                    d1:de:71:c9:f4:e3:5d:65:3d:3f:53:96:f8:0d:c9:
                    14:bc:67:6a:e3:8c:f1:9f:ec:a5:a6:6f:db:c5:b7:
                    df:e3:ad:22:ba:21:7d:a1:e0:33:cc:01:13:28:3f:
                    c5:00:af:65:a7:0a:49:ac:cf:73:6a:13:e2:39:16:
                    4a:16:43:e9:4c:bf:c5:48:b0:e5:2d:19:7a:69:fe:
                    bc:a9:e7:f0:b9:82:b9:40:dc:ad:96:d3:4b:1f:37:
                    e0:0b:23:e2:af:c3:e4:68:be:7b:c3:4c:c4:9b:ea:
                    83:2b:c3:05:d4:4f:4c:f1:fb:aa:d6:32:34:c2:82:
                    2a:50:fc:db:f4:de:87:72:f9:75:f3:0f:a9:8d:e3:
                    1c:db:9f:27:eb:d7:f6:3c:6e:28:ba:fb:15:6d:ce:
                    ae:49:1f:a5:c7:a7:68:34:e3:93:28:45:dd:58:3f:
                    38:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:02:B7:9B:B9:11:7C:E2:71:83:05:F5:5A:32:32:36:EF:7C:39:FA
            X509v3 Authority Key Identifier:
                keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:c9:26:21:d4:17:ce:c4:94:a8:f2:27:b2:5f:9e:fc:e7:
         74:21:86:d5:ed:e0:32:4e:80:74:cd:51:c0:0f:aa:57:b5:49:
         47:db:d4:45:7e:42:2c:30:96:3a:7e:29:34:60:45:28:54:a6:
         21:15:47:17:ab:be:0b:1b:e8:22:5d:e9:05:3f:9d:6d:4f:70:
         02:47:fb:ff:55:9f:5e:75:eb:2b:cc:a5:79:fd:92:3d:48:47:
         27:dc:af:35:4d:55:54:be:fe:fe:a9:11:6a:d5:d7:76:b8:8c:
         8d:1b:3e:5d:4d:9b:44:ea:89:b7:22:db:fd:45:64:70:c5:f3:
         be:46:fa:42:ef:e9:bb:ee:de:00:cc:22:a6:28:ca:71:4e:42:
         04:f0:e9:61:17:e8:d8:0e:59:cb:c2:34:db:85:aa:b0:0d:f6:
         e0:5c:65:ce:41:f1:8d:74:54:43:95:74:ce:0e:ce:47:7c:2c:
         df:96:9f:e4:65:2c:b3:57:e3:ba:f4:60:20:04:37:01:19:2f:
         fc:76:bb:56:3b:d7:94:3a:08:17:84:93:30:f4:a1:36:46:32:
         ad:da:7a:8a:7e:cc:14:be:88:fc:3b:3f:20:30:58:a1:a2:9b:
         32:55:7d:59:f7:53:86:e3:9d:a4:74:d1:0e:14:1e:e9:bb:07:
         3f:e6:f5:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz03qy8ATwi1FmjjVMi9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZlYmY2NmI4MGYwODEzNTg1OGQxNDRjZWQ2Zjc4NTgz
NGY1ZjQwHhcNMjUwNDEzMTEwMDU5WhcNMjUwNDE0MTEwMDU5WjAzMTEwLwYDVQQD
Eyg2NTAyYjc5YmI5MTE3Y2UyNzE4MzA1ZjU1YTMyMzIzNmVmN2MzOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskW418HdRsGRYFGHBcW8YGgFpqrm
Sr2fLKh8SFSNTT6DJCDGjYqoKzcsEAF4vLzJLcBkZPwmIihVeCeioOBuKE5xKxVI
f7oHqKkChYYJdTDhPjJXUZsud2/R3nHJ9ONdZT0/U5b4DckUvGdq44zxn+ylpm/b
xbff460iuiF9oeAzzAETKD/FAK9lpwpJrM9zahPiORZKFkPpTL/FSLDlLRl6af68
qefwuYK5QNytltNLHzfgCyPir8PkaL57w0zEm+qDK8MF1E9M8fuq1jI0woIqUPzb
9N6Hcvl18w+pjeMc258n69f2PG4ouvsVbc6uSR+lx6doNOOTKEXdWD84kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUCt5u5EXzicYMF9VoyMjbvfDn6MB8GA1UdIwQY
MBaAFJJW6/ZrgPCBNYWNFEztb3hYNPX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2Ut
NWRhOGQ2NzdkODQ3LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9iNzE3YzUtYTY0Yi00NDc1LWJlM2UtNWRhOGQ2NzdkODQ3
LzEva2xicjltdUE4SUUxaFkwVVRPMXZlRmcwOWZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7bJJiHU
F87ElKjyJ7JfnvzndCGG1e3gMk6AdM1RwA+qV7VJR9vURX5CLDCWOn4pNGBFKFSm
IRVHF6u+CxvoIl3pBT+dbU9wAkf7/1WfXnXrK8ylef2SPUhHJ9yvNU1VVL7+/qkR
atXXdriMjRs+XU2bROqJtyLb/UVkcMXzvkb6Qu/pu+7eAMwipijKcU5CBPDpYRfo
2A5Zy8I024WqsA324FxlzkHxjXRUQ5V0zg7OR3ws35af5GUss1fjuvRgIAQ3ARkv
/Ha7VjvXlDoIF4STMPShNkYyrdp6in7MFL6I/Ds/IDBYoaKbMlV9WfdThuOdpHTR
DhQe6bsHP+b15w==
-----END CERTIFICATE-----