Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
File:                     kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft (raw, json)
Hash identifier:          j+RV1vK0Kqn2UjrOrEe0TabtkIyrYKF0m4pFU3vQSfY=
Subject key identifier:   CC:3A:44:52:C4:A8:1A:EC:8C:50:E8:A3:6A:D2:7B:50:3D:32:6C:DB
Authority key identifier: 91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5
Certificate issuer:       /CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
Certificate serial:       01962F3DCC496C951476F87A03E96D57E7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
Manifest number:          102C
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl (hash: WM6etLv+329gtT5IJUgjB2LaMYeIwQtJDSHK+M9gldk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:49:6c:95:14:76:f8:7a:03:e9:6d:57:e7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=cc3a4452c4a81aec8c50e8a36ad27b503d326cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:37:5e:4a:61:39:b2:ab:07:c0:dc:7c:43:
                    bf:16:48:e4:c9:d7:d8:87:b4:24:e9:1b:97:77:89:
                    e3:ba:f2:9d:99:68:18:1e:76:65:f7:f6:38:0d:c3:
                    ab:d1:6a:d2:06:00:67:c8:9e:6b:f7:d2:9d:f9:08:
                    46:18:71:2a:3b:40:ff:ed:29:be:ba:17:22:cb:e0:
                    00:47:f7:f2:6a:55:0a:7c:8c:8b:f2:39:18:24:0e:
                    99:43:e2:d1:c7:85:15:a9:4c:5d:98:97:27:59:56:
                    c1:86:89:bb:3e:21:9f:af:7d:6a:d2:c0:c1:a9:94:
                    7a:a1:e0:0e:7f:27:11:68:67:4e:26:06:fb:28:dc:
                    d9:98:fc:2e:b8:90:44:27:50:7f:27:6b:77:54:88:
                    4b:97:bb:e3:08:c6:52:87:3e:7c:c9:75:7d:97:ef:
                    24:74:8f:25:43:f0:e1:19:a9:33:c6:42:3e:5c:1a:
                    4b:f6:d3:86:53:6c:80:94:8a:20:6f:04:2e:6a:86:
                    81:d6:60:49:0f:81:02:62:79:5b:a7:40:0b:ae:3a:
                    14:62:c6:a7:c3:99:e6:45:01:a2:4d:3c:5e:ec:d8:
                    ca:6c:04:cf:c0:2b:6d:93:9e:e5:dd:4f:67:09:92:
                    37:69:fa:f4:d4:02:cd:ec:cc:3c:6a:74:85:f7:2d:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3A:44:52:C4:A8:1A:EC:8C:50:E8:A3:6A:D2:7B:50:3D:32:6C:DB
            X509v3 Authority Key Identifier:
                keyid:91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f2:c9:6b:c6:4f:fa:18:fb:97:25:8f:d3:46:90:2c:01:60:
         5a:b6:86:2a:62:b0:28:1f:aa:0d:29:62:9f:5a:16:49:fa:9a:
         26:19:6b:4c:ea:96:31:a6:74:9d:5e:66:d0:73:32:75:d9:11:
         7d:77:9c:d9:85:8f:52:d8:c6:37:25:0c:58:d3:83:9c:93:b6:
         83:e8:8c:de:59:fc:da:f4:5e:18:67:cb:0c:2d:85:bd:42:b0:
         ce:83:10:3a:03:9e:59:bb:7a:71:cd:dc:36:c9:66:2c:07:04:
         be:d4:81:01:7a:76:17:fa:e5:31:38:fd:2f:f5:4f:2e:15:be:
         3f:c4:7d:13:44:f5:f2:ae:8d:22:04:a8:25:68:61:19:cd:e4:
         6e:c7:69:f3:4d:88:c1:0e:7b:a2:37:3b:8d:e2:b9:47:43:19:
         c1:95:89:60:02:7d:2c:ea:d5:9b:8a:ea:34:bc:48:aa:9c:07:
         8e:e1:73:b4:4d:2e:f2:63:20:d1:2b:e4:c7:a8:af:b8:4c:9b:
         a3:be:d1:2d:49:00:83:bf:24:a0:a7:b6:7a:d7:af:2b:8c:ea:
         dd:89:89:8d:8c:fc:c4:9f:47:17:87:0a:74:f8:5c:e1:a8:86:
         cc:80:7c:90:43:d9:f3:55:ce:11:d8:fa:14:5d:ae:76:94:4d:
         90:e3:cd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----