Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File:                     kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier:          NNHh1rDxTt4pKFbuV7AhLJg/HySDWwyzTh8t7S7txR0=
Subject key identifier:   16:6A:8B:43:C8:49:F4:14:E3:5A:D0:A0:7C:43:31:40:D4:D1:05:34
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer:       /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial:       01962F072572D34BF76A93761346AEEF8FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number:          0BA7
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: fUtfvzoH+MoVVe4/Qg+5SUS4L8pN5rqx4gksvJK4azU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:25:72:d3:4b:f7:6a:93:76:13:46:ae:ef:8f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=166a8b43c849f414e35ad0a07c433140d4d10534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:e8:36:3b:c0:03:12:ed:35:af:8e:f5:74:
                    b7:b8:cc:cb:4f:3c:b1:70:af:f5:97:9a:e8:07:61:
                    2e:d0:a0:b6:75:f7:2d:7d:1d:5a:d8:50:c4:b9:84:
                    a5:cc:d1:31:34:9a:0c:d1:cf:0e:8f:0e:75:da:0c:
                    2e:26:bc:4d:4e:ab:28:c0:62:d2:38:1b:f0:93:b7:
                    df:34:1e:f3:c4:3b:e1:62:67:1d:83:fa:a5:82:9b:
                    fe:44:d6:fd:c2:94:1e:0e:70:7e:d0:72:29:a2:e3:
                    3b:5e:0b:18:e2:72:c0:18:01:45:5d:fd:84:02:3f:
                    e1:35:a2:29:28:81:50:50:f9:97:13:6e:ca:e6:9f:
                    6e:3d:56:9b:83:0a:67:07:28:85:82:a8:f5:00:7f:
                    90:f6:e1:6f:1c:b0:17:76:0b:54:57:c7:d9:b1:52:
                    5d:0b:b7:1e:31:f9:4e:3b:c9:4c:3d:55:a3:ba:ba:
                    ea:c7:d2:8a:9a:c2:76:5f:5a:0a:e7:6a:5a:98:d8:
                    14:54:87:de:bf:ae:6a:e1:65:52:f5:b7:89:1d:c0:
                    26:1f:ce:ad:b1:81:6a:1c:49:f8:3a:f0:24:32:3d:
                    85:9d:93:b5:e2:a6:23:62:8d:39:5d:42:f0:8a:8b:
                    41:35:53:c2:d9:f6:69:10:e6:55:66:a1:cd:1a:20:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6A:8B:43:C8:49:F4:14:E3:5A:D0:A0:7C:43:31:40:D4:D1:05:34
            X509v3 Authority Key Identifier:
                keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:20:12:4c:41:c7:3f:e1:3e:5b:02:dc:82:da:2d:33:4e:5c:
         89:07:10:e0:9b:8a:9d:1c:e7:85:f3:27:0d:07:8f:7e:f5:14:
         7d:3a:96:71:49:27:2f:ff:14:b0:df:b5:a9:9c:23:d9:7c:96:
         2b:17:8b:14:9f:79:19:c5:81:ac:c7:b8:50:62:d5:2f:d1:65:
         f0:ee:ad:d1:3f:44:ac:e2:65:91:8f:53:6c:a0:e4:64:fa:07:
         fa:69:9f:78:9c:e2:53:8d:90:93:11:63:ce:78:ad:1f:07:b7:
         93:81:00:69:dd:43:cc:24:7a:9b:0f:74:0b:87:ef:49:33:64:
         b6:04:4f:42:af:20:0a:46:ed:77:83:34:e8:5d:ea:0a:e7:83:
         86:df:61:cd:b0:f9:bd:a8:fa:8d:15:39:39:4a:42:23:34:01:
         9f:86:88:e9:2a:5c:a5:b6:c1:87:ca:80:49:df:64:82:aa:6d:
         7f:d7:16:88:52:18:b3:a0:a5:d9:03:de:e2:f1:6f:62:b3:a9:
         34:36:3f:2d:16:de:04:d8:cf:d7:e8:a2:a7:7e:56:4f:65:80:
         16:58:26:ce:be:60:13:60:08:96:db:82:ad:42:21:52:37:49:
         23:b9:fb:99:da:fd:78:b5:12:2b:4d:0e:ca:bd:b2:7b:77:04:
         c3:aa:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----