Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File:                     kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier:          XzMEPAmBxMSk5s66Z2n5PhAUeRvLi4a7AvXhSqm5ujE=
Subject key identifier:   07:18:27:A9:DD:82:97:3A:86:8D:C2:6E:90:A8:52:6C:11:C4:CE:E8
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer:       /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial:       01962E6197EA858A5F89E8F72FFDEB53A913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=)
                          2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: MMfMWqot70IuyE37p+wulK4IghGsoVZwg+zx9UG3jqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:97:ea:85:8a:5f:89:e8:f7:2f:fd:eb:53:a9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=071827a9dd82973a868dc26e90a8526c11c4cee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:25:e4:ae:ac:26:e7:a1:41:7f:72:b8:8b:35:
                    3f:fe:3f:06:d9:c5:da:cb:19:21:95:06:53:6d:c8:
                    2e:2b:5e:b7:33:b0:61:e0:b5:ca:38:3e:b7:e0:a2:
                    36:ac:a5:ef:c1:10:eb:22:cb:62:5f:96:98:91:cd:
                    2d:f6:a4:0f:25:ff:0a:09:39:bc:ad:c8:30:52:f0:
                    33:7c:00:35:1d:c8:88:d6:de:22:46:7f:ec:98:e8:
                    89:c9:e4:db:3b:70:10:57:bc:d2:dd:32:9c:e5:7c:
                    7a:fb:cb:0e:82:18:f1:5a:b5:ee:a4:65:58:3c:b1:
                    b6:4f:ca:b7:6c:c2:c0:c2:68:c9:db:81:b9:62:08:
                    a5:e5:dc:ac:bf:87:9f:6c:8c:7b:8e:be:5d:13:1a:
                    37:b1:55:22:5c:7c:85:5f:f3:d9:34:c9:48:01:45:
                    f1:91:11:a0:8b:75:83:0e:eb:87:51:2c:76:60:8e:
                    1f:ed:a9:36:03:95:71:dc:50:df:64:2e:a4:59:8c:
                    3c:6d:f9:91:5c:c9:3f:82:3a:9a:d0:c7:28:6d:a7:
                    b5:2a:97:60:33:c3:40:61:3b:f8:5c:5d:f0:2b:d2:
                    f8:91:bf:7f:85:ec:bb:6d:a1:9e:3a:d1:d3:4e:80:
                    d5:14:f2:46:34:3d:a1:04:67:c5:b5:9c:08:ec:86:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:18:27:A9:DD:82:97:3A:86:8D:C2:6E:90:A8:52:6C:11:C4:CE:E8
            X509v3 Authority Key Identifier:
                keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:4a:bd:94:ca:52:f9:49:be:d5:8d:0b:32:ae:05:f7:f0:
         45:cb:57:79:a1:6d:d7:df:9c:dd:22:82:b0:73:c9:45:cf:9f:
         94:34:76:91:13:ab:d7:64:29:4f:70:fd:9c:0a:50:c0:c5:87:
         ea:36:e5:8e:33:60:aa:0e:a0:36:67:18:5f:0a:d5:4b:8e:66:
         61:a1:78:98:c5:33:5f:ae:d3:d9:5b:a5:74:19:19:35:56:25:
         ba:bb:08:c3:10:09:5f:c3:30:b4:ff:6b:52:e5:08:51:4c:8e:
         8a:5a:77:a2:08:d9:23:9b:b2:cd:83:26:2b:5a:92:e0:50:cc:
         b2:45:5b:17:3d:b0:2f:82:06:94:00:6e:ee:c0:97:87:a3:f8:
         41:b1:e2:40:60:34:b3:ed:a3:60:31:c7:36:77:eb:2b:fe:20:
         c5:0b:f8:7c:80:23:48:58:cc:50:4b:e4:44:85:52:77:dc:58:
         f0:e8:15:2f:2c:d8:9a:01:6f:f8:1d:41:69:8d:15:50:35:a6:
         62:f3:0a:28:f5:db:6f:5e:2d:29:2b:d5:1e:61:3a:a2:90:83:
         86:ac:77:f1:93:bf:d1:23:64:a9:7c:a4:89:5b:e1:67:86:14:
         b7:9d:6f:ff:48:f9:4d:a6:62:5b:e3:60:ed:42:15:fd:1a:e3:
         d3:26:c2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----