Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File:                     Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier:          8N/y5aPbeqvXzDbiLJHDrle6yteX7VbVn883RjXGY2Q=
Subject key identifier:   9E:06:05:4A:9B:80:CA:F1:25:E7:A4:CB:7E:32:94:79:34:11:2E:F9
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer:       /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial:       01962ECF9DF60EBAF093B67938366267375A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: 5/bg55S/TeOsM9yuNXFFrZOYRD4TJLq6zKYGmKPBeZc=)
                          2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
                          3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9d:f6:0e:ba:f0:93:b6:79:38:36:62:67:37:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=9e06054a9b80caf125e7a4cb7e32947934112ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:d7:d6:9c:f5:c6:f2:11:01:11:b3:e1:53:
                    81:2b:27:15:a2:32:0e:ba:11:c1:fd:be:f7:5e:15:
                    78:6a:1c:3c:5d:60:64:a8:0e:88:4f:d7:17:b2:6a:
                    09:59:f2:81:4e:f0:d5:09:6b:db:b7:c1:12:8a:6f:
                    f6:a2:40:6c:ad:d4:eb:10:5e:36:fd:af:46:7d:cc:
                    b9:a7:1e:74:82:89:12:92:e2:8a:b7:c5:a4:d8:cc:
                    f9:5b:22:71:66:2e:69:dd:28:24:bb:55:42:95:62:
                    e2:c1:bc:70:b0:2a:66:bb:35:f5:3c:e5:7f:47:b5:
                    d9:55:0c:5c:30:71:eb:8c:2e:9b:09:65:1c:02:06:
                    15:93:64:82:48:17:ba:50:2a:82:02:ce:19:8b:d2:
                    a4:3a:fe:a9:16:98:6a:1b:13:3d:d7:d1:6e:f6:a3:
                    6a:3b:ba:8b:6d:e3:18:a1:6d:0d:55:1d:a3:8a:c4:
                    54:f3:90:0f:95:46:e0:7b:dd:0d:50:d6:0b:44:79:
                    97:bd:b3:cc:1f:bd:d6:cf:b9:e2:65:5f:e1:cb:f8:
                    e0:87:25:71:82:ef:98:c6:bf:c0:d3:94:64:03:4c:
                    7d:a1:d3:0c:85:ed:cb:90:f8:48:3b:71:81:5a:54:
                    79:0d:a2:5a:0e:58:5e:9a:b2:72:4f:3e:f6:fd:5f:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:05:4A:9B:80:CA:F1:25:E7:A4:CB:7E:32:94:79:34:11:2E:F9
            X509v3 Authority Key Identifier:
                keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:b1:82:55:f9:8e:ba:ea:f7:c5:71:18:1d:2f:22:1b:cd:
         52:cc:0e:58:6e:a9:a6:91:07:f1:2d:f0:8c:8a:cd:ba:ac:11:
         81:aa:34:f2:96:fd:3d:14:db:e1:a8:3e:75:ef:80:69:8d:fa:
         f4:b4:ea:dd:1f:6c:6b:c3:a7:79:d7:69:a1:9c:8e:a6:3b:77:
         ce:cc:4a:8e:39:0e:01:15:ac:f0:d3:ee:a6:16:49:bb:0d:d5:
         04:70:a9:a2:6b:23:ca:32:46:bf:8a:e4:49:8a:a9:87:82:b7:
         b5:59:ae:5c:68:46:f7:22:08:09:64:93:36:0d:80:56:0e:00:
         d1:bf:01:2d:3d:d9:76:15:26:31:6b:f3:47:28:a1:e2:1d:b6:
         c6:a0:88:b6:bb:69:0b:82:fa:a3:73:62:62:0e:e3:18:a2:f7:
         29:65:02:0b:ab:c2:30:f9:90:44:20:bf:89:50:ca:32:28:d6:
         e3:f1:d8:4b:1b:25:6a:ab:fa:54:87:e4:8a:f7:ff:f7:41:94:
         54:4a:d4:81:a1:33:f5:1c:b0:64:50:ac:ba:1f:28:50:ec:60:
         60:0c:37:fd:f2:e7:f4:e7:54:c9:69:87:d0:17:2d:98:55:fd:
         f3:ff:55:98:54:bc:14:e7:8f:ed:1f:6e:18:39:2d:56:c1:6a:
         44:68:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----