Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File:                     kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier:          kA+BO1PCgaw5lY2XnwYkT5wFkpDfsszm0y+Z6cNlTz4=
Subject key identifier:   C1:A5:81:84:50:D5:B4:12:F7:A4:F9:A4:02:20:41:41:C2:2F:35:6B
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer:       /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial:       01962DF40A9FDAB993E9F56909718CF9B3FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number:          03C4
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: dQrOOHrMN/vWbcATcvs8JnEbrDhz7xT/LIJ4D1s4cEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0a:9f:da:b9:93:e9:f5:69:09:71:8c:f9:b3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=c1a5818450d5b412f7a4f9a402204141c22f356b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:1a:a7:d9:f4:ee:ef:3f:22:9d:4c:54:16:
                    48:eb:9e:5f:62:32:9e:83:0a:df:0f:78:1e:6d:f1:
                    cb:10:df:72:07:29:3c:5f:b3:f1:66:5e:23:cc:6b:
                    e8:b9:51:f9:74:da:91:2f:cc:dc:bf:69:59:eb:eb:
                    6c:26:a7:f3:7a:4a:e2:b8:76:be:db:cf:21:83:85:
                    f8:c0:01:74:4d:19:d5:af:d2:c0:34:eb:37:5e:dc:
                    8f:56:3b:77:86:3d:15:6c:33:9a:df:e8:d0:a7:95:
                    bb:a8:51:08:e4:cf:e3:e3:0a:99:f3:25:99:26:be:
                    bf:a4:53:be:f7:c1:80:25:d4:71:11:c5:bd:14:97:
                    3b:e6:7a:7c:9c:63:7e:9f:86:d3:ac:ac:bf:3f:82:
                    c7:2b:73:1d:28:77:e3:37:05:06:12:1c:0b:ad:c3:
                    54:a6:b8:f1:bc:42:7d:9c:d2:9b:88:30:66:60:4a:
                    0a:2e:27:2d:87:e8:be:72:52:4c:96:f0:7c:87:5e:
                    fc:05:f6:17:7b:c7:f9:d7:7a:aa:98:7a:3a:77:fd:
                    fb:7e:9a:9a:19:58:0b:45:91:f4:f5:d8:57:be:22:
                    35:c1:1d:ee:f9:66:55:ec:95:09:aa:92:08:43:56:
                    ef:03:a2:df:f9:90:55:48:ad:61:ef:7c:2b:56:c3:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A5:81:84:50:D5:B4:12:F7:A4:F9:A4:02:20:41:41:C2:2F:35:6B
            X509v3 Authority Key Identifier:
                keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:95:e0:0c:d8:50:1e:d8:bf:14:8b:eb:01:b1:4b:6f:99:
         f5:8c:9c:7f:1c:04:96:ed:13:73:dd:8b:8a:0f:97:15:1f:ec:
         e7:b5:c7:6f:a3:4c:a9:7e:a5:de:38:3f:d3:68:16:11:d4:00:
         71:ef:39:b4:19:90:b7:ac:1d:24:1f:b0:8e:26:fb:2d:ca:00:
         4b:71:1a:3f:15:39:72:93:31:32:cf:eb:ed:95:ed:68:31:e6:
         af:68:43:4c:2b:b3:3e:e2:dd:18:95:f9:61:df:39:9a:ff:ea:
         bf:2b:0a:f4:0b:48:cb:9d:26:03:1c:ca:c8:6b:57:3e:3c:56:
         b4:24:1b:e6:39:24:dd:4a:63:90:77:64:d0:cb:4f:99:af:90:
         aa:7e:c9:4e:2c:8b:d9:bc:5d:cb:f0:86:35:2f:42:d2:13:39:
         ab:c7:e3:bd:9c:e0:f9:be:05:df:b3:c1:ad:e4:a2:91:21:c6:
         64:37:4a:3e:e6:0c:d5:f5:74:01:f0:89:3a:9c:20:f0:73:84:
         7f:5b:b5:44:65:84:be:33:a9:99:f0:03:71:88:2a:fd:f8:ca:
         01:b9:92:06:e3:01:31:55:84:f1:6f:d6:ef:cb:21:e0:6a:ac:
         51:77:94:bf:39:cc:21:ee:c4:1e:a6:d2:ce:c7:f1:a3:fa:ab:
         56:31:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----