Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
File:                     KIVYUqS80b8eyBPzwTsPHzcvOXE.mft (raw, json)
Hash identifier:          gp7rbuV11O1ZtHQeDP545tKYnrbieVYF3d0pbLbDyd8=
Subject key identifier:   D2:9F:57:7A:2E:CD:73:D0:DA:43:FD:82:F7:FC:D2:60:81:AF:63:AB
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Certificate issuer:       /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial:       0195E15A3188420801FF28E061B2260C836C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
Manifest number:          14DD
Signing time:             Sat 29 Mar 2025 10:02:19 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:19 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:19 +0000
Files and hashes:         1: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (hash: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=)
                          2: KIVYUqS80b8eyBPzwTsPHzcvOXE.crl (hash: gTM6ieJAh0JIfD9EksliODGU+9wLF2Ep6htue7PkNfg=)
                          3: PQE-MW_ft7NOulI3nuA3Ttqd9zM.roa (hash: tS26IQNDjX0XuEf3rRKTOSs366e2zvh7MCyAP+zqiiA=)
                          4: S87F6thVxwCZscy_VovEDJcB8HM.roa (hash: E4K0X+XV1CxBX46EYMwd+oDIHEvCmqQAB6iKbCet77s=)
                          5: VTDj_r3bXLmjYM4IT8BX3iK7e9U.roa (hash: ekN4wi00dh7ioFcXBha/Y6Vr/ITetrwuauLICkt3Dpw=)
                          6: aer8a26VEmmy2Cy7_8hze3JY1ak.roa (hash: 7q3S2TY/+jxhv9AP9xHCanK4ZXfND8pGXb4R0LjZhXM=)
                          7: kgTLGOsUBsYOKbWXNc3cqPzwgb4.roa (hash: ST4s4BtTU2rODHYfq5kax5E8/vHW7595/W9otyGkb80=)
                          8: pL_tDJmTdtKmoEEnGB3Z5Sqfoww.roa (hash: H1JfkznIuDny5RXJezYE6vZGSTmymf6VReWBmSqQlss=)
                          9: r35yid910YnMRVJ0dohWLbFg9fA.roa (hash: R0fRzKPoSAK4VI2tCDaL9PTR+axXctfnY3qc7wzVVJQ=)
                          10: zP8qZCQuiGnyynXqFEworI-l4Kk.roa (hash: 8v3+9BYp2qaRN+mDEqf3MiLHJ2vk/UAqK532lYFyFAk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:5a:31:88:42:08:01:ff:28:e0:61:b2:26:0c:83:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
        Validity
            Not Before: Mar 29 10:02:19 2025 GMT
            Not After : Mar 30 10:02:19 2025 GMT
        Subject: CN=d29f577a2ecd73d0da43fd82f7fcd26081af63ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:8a:11:73:21:a0:a5:aa:19:a7:40:02:ca:
                    40:e6:42:0f:01:67:0a:c2:5c:83:2b:48:e2:37:12:
                    97:c1:02:ff:a4:c1:12:f6:54:be:81:17:54:74:d1:
                    3b:c3:11:ff:f4:71:ae:41:5e:b4:51:93:92:30:4d:
                    ee:b7:f8:54:3c:0b:71:7d:98:3d:c6:77:c8:11:1f:
                    eb:9b:f1:28:0b:18:e4:b9:42:74:23:39:4b:d5:61:
                    08:38:29:2e:72:e2:4c:cd:22:02:67:18:b9:a8:dc:
                    d0:af:12:36:c5:c9:63:72:37:4d:12:bd:ed:70:37:
                    9b:40:bf:f9:71:1f:6b:93:4d:33:8c:e9:52:fe:12:
                    a4:1a:f4:3b:27:e2:91:64:b3:5f:e9:bc:90:2b:07:
                    00:1d:98:8a:53:d6:2b:3f:fa:8f:e4:d9:b3:f0:91:
                    f6:f0:f6:d8:60:70:da:3e:a6:b5:9e:08:69:fc:f9:
                    0e:fe:bc:79:f7:f1:02:35:5c:2a:5f:8d:d1:8a:fb:
                    f4:10:df:83:20:18:ce:35:2e:f2:c4:a4:2e:3d:29:
                    21:97:4d:16:34:72:76:ed:78:09:59:ad:d7:10:2f:
                    10:65:5d:9f:39:53:f0:18:9a:d3:6d:5b:08:cf:af:
                    37:cf:11:02:97:9e:1b:a7:d1:38:1d:0f:81:e1:06:
                    fc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9F:57:7A:2E:CD:73:D0:DA:43:FD:82:F7:FC:D2:60:81:AF:63:AB
            X509v3 Authority Key Identifier:
                keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:64:e3:ef:1b:08:a4:30:ce:41:16:62:0e:f9:98:a8:5a:b2:
         a1:04:76:1a:c8:71:a9:2a:d6:32:d1:bf:c9:85:71:43:4f:75:
         04:7e:a9:0c:60:3d:2c:c7:96:ff:b7:d0:7d:59:55:e5:6d:bc:
         56:ea:4d:21:f0:9f:4d:8c:0d:10:03:a6:ea:0a:ce:79:c1:ed:
         4a:64:cf:30:b3:e3:89:94:62:61:a5:0d:46:98:97:ff:e7:a2:
         e9:b6:4a:1a:7b:4d:d2:4c:d2:35:ed:8d:ec:ae:44:29:bb:bb:
         25:1f:a8:58:7f:3c:d8:fa:cd:5d:71:74:60:2a:0d:dd:c4:5e:
         75:17:fe:c4:6e:1d:6e:0d:15:37:bc:a8:93:0d:bb:52:49:49:
         cc:68:1a:ab:fd:a7:aa:75:3e:31:4e:40:b6:02:09:74:44:c9:
         11:98:1f:8b:38:8b:ba:58:0b:22:ad:e4:40:0c:35:6c:cd:99:
         bc:d1:31:c9:a3:5b:20:2c:df:de:60:26:78:e6:5a:c5:0e:22:
         05:ae:83:c6:46:0e:d3:f8:0f:f0:31:e7:9d:47:6b:d0:ca:14:
         11:78:cf:f8:44:66:a9:ef:5a:e6:e2:7f:44:b9:f8:12:c5:4b:
         85:7a:36:41:1b:3d:52:b3:92:25:47:1a:3c:01:6d:f7:ff:f2:
         da:8b:0d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWjGIQggB/yjgYbImDINsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy
ZjM5NzEwHhcNMjUwMzI5MTAwMjE5WhcNMjUwMzMwMTAwMjE5WjAzMTEwLwYDVQQD
EyhkMjlmNTc3YTJlY2Q3M2QwZGE0M2ZkODJmN2ZjZDI2MDgxYWY2M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/KKEXMhoKWqGadAAspA5kIPAWcK
wlyDK0jiNxKXwQL/pMES9lS+gRdUdNE7wxH/9HGuQV60UZOSME3ut/hUPAtxfZg9
xnfIER/rm/EoCxjkuUJ0IzlL1WEIOCkucuJMzSICZxi5qNzQrxI2xcljcjdNEr3t
cDebQL/5cR9rk00zjOlS/hKkGvQ7J+KRZLNf6byQKwcAHZiKU9YrP/qP5Nmz8JH2
8PbYYHDaPqa1nghp/PkO/rx59/ECNVwqX43Rivv0EN+DIBjONS7yxKQuPSkhl00W
NHJ27XgJWa3XEC8QZV2fOVPwGJrTbVsIz683zxECl54bp9E4HQ+B4Qb8UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKfV3ouzXPQ2kP9gvf80mCBr2OrMB8GA1UdIwQY
MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt
NzA0NDYzZWJhZDM2LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2
LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWTj7xsI
pDDOQRZiDvmYqFqyoQR2GshxqSrWMtG/yYVxQ091BH6pDGA9LMeW/7fQfVlV5W28
VupNIfCfTYwNEAOm6grOecHtSmTPMLPjiZRiYaUNRpiX/+ei6bZKGntN0kzSNe2N
7K5EKbu7JR+oWH882PrNXXF0YCoN3cRedRf+xG4dbg0VN7yokw27UklJzGgaq/2n
qnU+MU5AtgIJdETJEZgfiziLulgLIq3kQAw1bM2ZvNExyaNbICzf3mAmeOZaxQ4i
Ba6DxkYO0/gP8DHnnUdr0MoUEXjP+ERmqe9a5uJ/RLn4EsVLhXo2QRs9UrOSJUca
PAFt9//y2osN1w==
-----END CERTIFICATE-----