Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          LRLtRbWnA6fb6lQMd8cdk6S+aJmWW1lXBG2CcjjqAh0=
Subject key identifier:   64:64:9E:71:CC:96:61:A3:91:0E:46:E3:D3:73:AC:41:BF:3D:E7:7C
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       01962F3D66921B01085C885763E868BCE0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1500
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          2: Is9JTB3qpYCXgaYmijlcB5JL6E0.roa (hash: 5cCcN4nvSzdk5qJCAY98zRx7wOt+NOoIVD5IiJyh0Uk=)
                          3: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          4: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          5: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: +QNzLFZaWuDlxwWwo+M2wfSEZyTQLk3lcMzppH+Rfmw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:66:92:1b:01:08:5c:88:57:63:e8:68:bc:e0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=64649e71cc9661a3910e46e3d373ac41bf3de77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bc:09:4f:7f:dc:fc:fe:c6:57:3b:b5:a4:b2:
                    c3:98:e4:ec:31:0e:b8:31:ee:08:02:53:60:9e:53:
                    6f:f6:f1:0a:bc:1b:16:ff:ca:c4:2e:6a:42:17:b8:
                    a9:c1:b8:82:8a:93:f7:40:d5:71:ab:85:3d:7a:aa:
                    63:f8:c8:42:72:f4:95:a9:e2:57:6c:8b:ed:13:c7:
                    9a:e9:e9:95:1e:ec:3d:47:94:0c:95:c2:82:fe:73:
                    10:96:1d:f9:a5:d1:d3:ba:8d:2a:a4:d0:09:2b:72:
                    46:a0:6d:c2:e6:a7:de:b3:8c:1f:fa:d6:a5:2a:3e:
                    06:c5:dc:90:5f:94:9e:d9:f8:00:9c:02:21:78:fd:
                    51:99:29:25:10:dd:00:84:5d:d2:67:65:ce:6a:21:
                    01:86:b6:b7:03:86:c1:2f:ac:cb:f2:dd:88:bc:27:
                    d4:8d:26:c1:bb:57:69:5c:31:51:9f:be:da:84:47:
                    f8:d6:8a:f7:78:d5:9f:12:32:56:7d:1b:e2:bc:ad:
                    2e:0a:0a:88:06:39:f2:ae:16:a8:67:b9:61:2b:2c:
                    00:5b:9a:7c:40:b8:66:76:e6:fa:0e:d9:57:2c:d2:
                    2b:dd:84:8f:44:fa:72:6c:7c:6f:4a:a0:fb:2c:b6:
                    df:c8:50:68:46:37:d4:8d:e7:be:89:ac:17:7b:47:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:9E:71:CC:96:61:A3:91:0E:46:E3:D3:73:AC:41:BF:3D:E7:7C
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1c:b6:3d:6e:ea:ec:0e:a8:c9:70:db:a4:e2:2c:83:be:c4:
         04:1f:94:52:7f:97:97:d9:c5:7f:b8:e2:3f:2d:9e:c9:bb:ce:
         95:71:f8:29:82:b1:8d:eb:8a:60:47:ed:49:1b:34:bc:d3:96:
         05:d2:7f:9d:e2:d0:d0:1a:34:38:c7:ba:b5:d6:8d:62:cf:5b:
         10:ba:9e:32:41:25:08:a9:2e:a4:dc:50:23:a5:31:41:5a:a5:
         7d:ce:d5:09:b7:d6:90:03:4f:2d:34:77:6b:7e:9c:81:cb:06:
         e6:64:0b:62:34:7a:cb:c0:1c:7a:e5:59:80:52:1f:6e:63:20:
         e2:63:9a:76:65:d3:f5:69:23:ab:3a:2d:a6:47:42:0b:a2:16:
         4a:82:98:8c:ef:bd:83:0c:9d:f4:64:53:f2:8c:fd:15:08:66:
         ce:c4:7a:9e:6f:1f:cb:73:cc:f0:67:53:c5:b3:ab:fd:9d:52:
         4e:6f:bb:5d:d3:8e:cf:86:67:29:96:00:cd:ee:a0:85:1c:b9:
         d9:b1:2a:74:22:43:01:80:22:8f:90:06:e4:bb:a3:e6:e7:ec:
         db:7c:52:36:aa:70:03:ab:c6:59:77:00:83:9e:47:2d:d6:66:
         88:ad:fd:5f:10:63:10:54:3d:eb:c5:a5:38:59:17:c5:4c:7c:
         61:c4:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----