Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
File:                     KS7c4J8RKrLT_69MsqOOrxwa-S4.mft (raw, json)
Hash identifier:          mjv/QcX67NXOgF11Zp5BfxMzudPByYWs1avXfBzNL1k=
Subject key identifier:   4E:A7:12:1B:AA:E3:83:5F:F1:FF:AD:0B:A3:84:5D:96:00:B2:45:F7
Authority key identifier: 29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E
Certificate issuer:       /CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
Certificate serial:       01962E2ABF2CA2DD83DFE6FF45001B044526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft
Manifest number:          089C
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: IrngZwNeCRKtAoxB4sjafysXZOU.roa (hash: F88BOJPqoOgD37Dontv64Q9dEIIVW8ruH+Ll3zUdJ5A=)
                          2: KS7c4J8RKrLT_69MsqOOrxwa-S4.crl (hash: K99NlgbGo3QWeaZHX6HLng08kr4zgxqxuS42m33YbUQ=)
                          3: fLPcJ1RIjba-u72cjm954X9WUC8.roa (hash: 5ctmy3KSPkOthc06xHFkUIcKR/lSHvthuixFmuKfgFo=)
                          4: kkAK_iZPZkQ3SU5RdHZU1RDOfeU.roa (hash: W2MujiWrNHHsLvMLkdeEzpSgSuXzmOtIKkDO9DQfbow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bf:2c:a2:dd:83:df:e6:ff:45:00:1b:04:45:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=292edce09f112ab2d3ffaf4cb2a38eaf1c1af92e
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=4ea7121baae3835ff1ffad0ba3845d9600b245f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:58:b8:d9:ff:d1:fb:19:a1:fb:43:d4:6d:b8:
                    1d:d1:ce:8f:c6:7c:60:b9:ed:9b:e3:d1:a1:59:7b:
                    30:20:f2:31:b3:b4:a2:e7:fb:85:f6:4e:83:b0:94:
                    8f:e6:4e:a8:30:5e:e9:10:67:40:2e:23:9b:6a:d4:
                    39:64:36:d5:34:c2:b8:e9:37:a4:8d:6b:42:bf:b0:
                    15:b1:1a:00:2a:56:a1:bb:1a:e2:05:ac:3b:13:c4:
                    5c:50:93:95:b3:6c:cd:cc:ae:f7:83:1c:a3:e0:bf:
                    92:fe:9a:87:21:ec:b3:ef:99:81:cb:63:3a:e4:e6:
                    ba:4b:ec:d7:ed:21:5e:4c:c4:db:43:4d:95:c0:f5:
                    f6:d9:01:09:35:42:f8:bb:92:d3:0f:a1:f2:30:a1:
                    38:c6:cf:02:08:30:c3:1c:7e:6a:d1:82:1b:ef:88:
                    c3:6f:fc:30:97:a1:29:a4:43:d8:f1:b2:0c:10:95:
                    8a:37:2e:ed:9f:66:37:e1:12:2e:82:80:ef:df:79:
                    6b:6e:46:15:a8:9b:66:39:9a:7f:a2:4e:20:22:0f:
                    b8:09:3e:c8:3e:d0:ef:56:73:35:34:cf:f0:3a:2a:
                    5e:97:89:29:08:15:c6:c7:39:a6:d6:50:a5:00:54:
                    8e:53:d2:26:23:3d:32:0b:26:13:b5:ea:fe:cf:d5:
                    94:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A7:12:1B:AA:E3:83:5F:F1:FF:AD:0B:A3:84:5D:96:00:B2:45:F7
            X509v3 Authority Key Identifier:
                keyid:29:2E:DC:E0:9F:11:2A:B2:D3:FF:AF:4C:B2:A3:8E:AF:1C:1A:F9:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS7c4J8RKrLT_69MsqOOrxwa-S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/12274e-316b-4f3c-8e6c-dcfeb3f10c86/1/KS7c4J8RKrLT_69MsqOOrxwa-S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:e5:ea:28:e6:ec:88:63:0e:3a:ee:aa:87:43:44:b5:ac:
         45:32:59:3e:be:9f:5e:05:da:34:65:6b:bc:13:50:a6:7e:dd:
         36:5b:8a:c5:ed:dc:2f:ea:06:60:1e:c6:70:0c:5c:1d:3d:3c:
         de:3c:72:a8:41:db:77:6c:59:fe:7c:31:39:ce:c5:b3:b4:11:
         58:67:35:5f:b3:6a:ec:76:95:0c:46:10:6d:3f:8c:c9:c9:d3:
         5c:55:3b:5f:e5:fd:99:04:82:e2:78:e0:75:5b:9e:ff:e3:44:
         56:28:3d:7f:a0:7e:43:85:a2:d2:54:e1:f3:36:b2:84:2d:a8:
         2b:6b:cc:d5:36:bd:97:d8:70:a5:26:b6:4f:b3:43:d3:6b:04:
         21:a3:7e:90:12:50:ff:91:cd:86:b1:4e:dc:f4:a1:e1:43:8e:
         58:f3:d0:74:d2:8e:10:8c:ec:31:66:77:c6:cc:a3:96:e0:ce:
         f9:a9:f5:b6:fa:c8:75:1f:10:94:03:5d:f5:74:2f:e4:17:8a:
         4c:d9:1e:61:0a:c0:e9:01:7d:9e:42:37:9d:36:74:f6:f4:5d:
         6e:9a:9d:2e:54:0a:e4:46:96:e2:2d:6f:b3:86:e1:55:6f:1f:
         b0:eb:6e:74:a5:df:66:35:a6:26:4d:9a:1f:01:39:40:d1:c8:
         5a:d4:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----