Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
File:                     KmU0qslEKjlNE5oagwPcBJWcHaA.mft (raw, json)
Hash identifier:          d0mAAhp8WDILiVMvXO3tSh1v1Ptkf4xUyn+fOs+k+QQ=
Subject key identifier:   D3:8D:36:A4:A5:38:C7:46:64:63:AA:3C:FA:D1:5C:DE:2A:94:AC:2F
Authority key identifier: 2A:65:34:AA:C9:44:2A:39:4D:13:9A:1A:83:03:DC:04:95:9C:1D:A0
Certificate issuer:       /CN=2a6534aac9442a394d139a1a8303dc04959c1da0
Certificate serial:       01962E98DF489B0116012812ABF26842C772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KmU0qslEKjlNE5oagwPcBJWcHaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft
Manifest number:          0DFE
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: KmU0qslEKjlNE5oagwPcBJWcHaA.crl (hash: HWOlA6akr0/A40+p6E9ke+SWqBtHyg/WwWtFlLVDrDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:df:48:9b:01:16:01:28:12:ab:f2:68:42:c7:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6534aac9442a394d139a1a8303dc04959c1da0
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=d38d36a4a538c7466463aa3cfad15cde2a94ac2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:13:63:6b:2f:c5:10:72:39:84:98:43:05:
                    f5:2b:19:76:0b:da:3c:8d:03:62:59:ff:09:24:9d:
                    4f:5f:bd:d2:59:8d:47:79:5e:9c:e7:30:a7:e6:18:
                    b8:5b:f7:c2:e7:e7:e2:57:f5:be:f9:7e:47:2b:d1:
                    4c:13:48:1f:2f:9f:99:e0:60:ad:c9:fd:88:96:83:
                    61:d0:c5:a3:b5:ec:8f:a0:63:f3:41:47:58:05:28:
                    5a:79:96:0b:1e:3a:fd:a8:b4:aa:f6:68:72:6a:37:
                    71:08:22:ce:90:ce:4d:e4:be:f9:16:4e:3c:bc:bb:
                    46:84:8b:30:fa:46:16:3c:48:5c:57:40:0f:ce:82:
                    aa:ca:39:9b:d2:b3:16:5b:16:29:20:ce:d2:6a:65:
                    c1:70:5c:9c:80:0b:b2:d8:17:29:27:fe:bc:80:22:
                    25:e2:2c:ae:39:94:76:16:74:d9:cd:a2:82:03:9f:
                    ac:a7:f1:df:56:c5:6d:08:a1:b8:9c:74:34:60:9d:
                    4a:13:02:e1:e4:aa:1f:44:93:e4:79:ec:f7:5c:06:
                    17:dc:45:e6:63:6d:3d:3a:bd:cd:61:52:4b:11:a8:
                    d2:17:67:f5:21:ac:ff:e6:64:42:dd:92:4b:cf:ba:
                    75:9f:71:87:7f:a9:48:06:1d:26:54:15:6a:de:0d:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8D:36:A4:A5:38:C7:46:64:63:AA:3C:FA:D1:5C:DE:2A:94:AC:2F
            X509v3 Authority Key Identifier:
                keyid:2A:65:34:AA:C9:44:2A:39:4D:13:9A:1A:83:03:DC:04:95:9C:1D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KmU0qslEKjlNE5oagwPcBJWcHaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d2388f-f8a9-4485-937f-840fd5352dc0/1/KmU0qslEKjlNE5oagwPcBJWcHaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:74:3f:cd:33:86:70:26:8b:b3:53:7e:88:85:02:4f:36:
         e7:30:04:48:33:7f:53:1b:19:e7:87:42:5a:fe:41:bf:2e:92:
         92:68:c9:8d:78:c6:ad:c5:03:55:c7:07:6f:a3:57:36:9a:4a:
         97:c0:e7:86:44:06:44:86:df:bd:27:d0:2f:89:91:4c:cf:6b:
         a5:a0:0c:66:e9:26:d4:49:60:e5:5a:46:5e:ed:58:21:a7:1f:
         1b:fe:64:8a:09:d2:f7:d9:d0:79:b4:85:cf:8a:f0:91:2e:ad:
         53:d8:6a:b1:b5:c7:d6:53:2c:d4:24:4e:f9:d6:46:06:39:3e:
         ea:0b:48:6b:5e:22:85:cd:9e:65:c3:62:25:7e:92:90:92:48:
         9a:28:8c:c5:af:ac:75:d6:de:62:41:b8:33:4d:95:0f:10:c5:
         61:a5:fd:ad:2a:06:44:fd:89:66:d4:9c:1f:a4:1b:54:1a:83:
         88:e6:59:6f:b0:e9:17:ee:4f:00:55:dc:15:7d:6b:81:cf:61:
         d1:ae:56:ff:4c:de:90:14:e0:ff:7e:c1:9c:fa:18:3f:8c:b7:
         c3:24:eb:7c:7a:b0:ab:f5:80:83:ad:24:73:ca:43:f5:c7:52:
         ab:8e:49:c3:19:74:a1:56:63:e5:80:39:37:be:76:44:e4:9c:
         9d:15:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----