Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
File:                     KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft (raw, json)
Hash identifier:          Az4N4vjbwT1EeQs4nvG+jrD+lrR7fJirrJIRaucLru0=
Subject key identifier:   2D:0D:EA:AD:BC:53:E1:25:EA:1D:0C:42:51:C7:35:53:A8:AA:EF:3F
Authority key identifier: 29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3
Certificate issuer:       /CN=29184647248b55523999cbb7fe5b20a99fe73be3
Certificate serial:       01962ECFB8E40E2F31096883D13CDCC93B04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl (hash: TUAfQr8JU2ifNKPgpmUWZVMFlo6DnzZhjtMASfSAlU0=)
                          2: vfgX0QM1-x_CfmwOuFEwuDR0qtE.roa (hash: VmApxfvV1fKRc5LBTSdDtZW6mm+Y06ANpvyiPSheTug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:e4:0e:2f:31:09:68:83:d1:3c:dc:c9:3b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29184647248b55523999cbb7fe5b20a99fe73be3
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=2d0deaadbc53e125ea1d0c4251c73553a8aaef3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:1a:21:dc:3d:e2:d6:81:05:5d:9b:df:f5:
                    87:8d:51:8c:7d:7b:1f:27:12:12:2a:cd:29:8f:16:
                    c7:51:a0:93:41:8d:49:e3:fd:dd:bf:7d:ca:e6:2f:
                    70:01:e3:92:5d:c5:40:c4:7e:36:d8:3a:74:83:20:
                    d7:25:bd:77:2c:65:7f:fd:32:69:a9:c1:6a:21:f8:
                    14:fc:41:6b:0a:7a:af:85:e3:5d:73:68:73:22:9d:
                    a2:77:4a:c8:92:d8:0b:22:ea:7c:9d:93:c6:af:0d:
                    ff:4c:9d:20:00:ba:16:2c:03:fa:0e:8f:1e:53:e8:
                    d1:e2:4a:a6:69:81:c7:35:f6:cb:07:cd:11:f4:5a:
                    dd:aa:da:69:61:12:fb:07:9a:28:ca:50:e4:28:b8:
                    6f:b3:54:e4:69:68:48:83:72:11:65:26:2a:70:94:
                    32:13:5a:a0:ca:a2:26:f1:82:ac:78:29:4c:16:ad:
                    38:77:7d:11:80:0a:86:3a:72:fe:07:6b:f2:5a:7b:
                    00:5d:ed:9a:eb:82:91:d7:99:c6:3c:05:2e:c6:5e:
                    9b:13:15:72:f7:ab:a6:df:25:92:6a:f8:6a:a9:14:
                    82:3e:9a:a1:d9:26:0e:21:7e:3e:3e:f0:e0:6a:c5:
                    85:07:01:cc:1a:d8:fe:84:8c:c7:83:a8:49:4f:32:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:EA:AD:BC:53:E1:25:EA:1D:0C:42:51:C7:35:53:A8:AA:EF:3F
            X509v3 Authority Key Identifier:
                keyid:29:18:46:47:24:8B:55:52:39:99:CB:B7:FE:5B:20:A9:9F:E7:3B:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRhGRySLVVI5mcu3_lsgqZ_nO-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/56036b-23d8-4b37-b546-8fc2373fc26e/1/KRhGRySLVVI5mcu3_lsgqZ_nO-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:94:c1:e9:38:46:50:3e:12:f3:fa:97:11:c2:28:3c:b5:
         00:0b:d3:79:58:0d:61:72:a8:de:cd:96:49:89:86:a5:5d:0a:
         c1:6c:58:b8:11:8e:6d:37:c4:a1:d5:34:46:5a:3f:f1:11:14:
         a3:60:3b:c9:d2:d0:ee:12:a0:63:32:7a:d8:49:a3:25:2e:3b:
         99:bc:24:c7:3f:42:1b:be:df:3d:f9:7e:b0:e3:53:24:12:6b:
         93:33:33:22:51:56:aa:5f:39:89:bc:82:79:58:de:bf:e7:9a:
         c1:e9:df:0f:03:11:54:48:a4:dd:f2:59:64:eb:17:ff:d2:94:
         54:50:b9:af:96:f6:4f:1f:11:88:5a:19:0c:81:29:ba:4b:a1:
         42:36:b6:a6:47:20:7c:81:3d:2f:d1:6b:4b:da:de:82:e2:d9:
         a4:b3:42:9f:e6:e1:22:3c:08:df:ba:f5:22:c3:b4:86:64:dd:
         c1:62:14:82:de:c0:32:08:b7:6e:5c:01:e2:04:44:5a:fa:7a:
         b1:87:3c:db:62:49:57:99:a2:3d:13:ad:85:4c:8d:80:20:ab:
         85:42:54:e6:db:19:cd:9d:2e:32:0b:b3:d4:50:7d:05:15:e8:
         d0:0e:fb:76:23:c4:30:9c:87:de:3a:63:df:be:05:19:b7:5b:
         7e:bb:7c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----