Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File:                     K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier:          V66tLRaQVMwhKfxqpNooNIt23uXqk9JnOSlzUyp/tfs=
Subject key identifier:   4D:30:8B:50:F1:82:DB:5E:1C:3B:36:11:31:CC:E8:15:27:DE:15:E0
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer:       /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial:       01962E992C00DB2D33752845FB6AE81961CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: DUlqLYucw6vyJ9R7AfF4p87npyUf9drWiSSeewzGOjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2c:00:db:2d:33:75:28:45:fb:6a:e8:19:61:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=4d308b50f182db5e1c3b361131cce81527de15e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:10:4b:f0:19:64:14:bb:09:29:59:b2:0e:
                    90:23:36:f7:23:60:d0:64:8c:6c:40:34:0a:f4:0e:
                    bf:76:71:b0:3d:d2:f1:4e:9c:18:15:9e:fb:4f:07:
                    9b:a5:2e:ee:39:f4:73:99:90:da:c5:f6:53:9f:e0:
                    2f:af:66:eb:55:95:1c:c3:60:74:aa:39:c7:be:57:
                    34:04:0a:cf:38:88:d2:08:2b:fd:63:ee:e9:0b:6e:
                    34:5e:f3:a6:5c:12:04:5d:ca:73:50:77:3a:96:90:
                    6d:1f:d8:75:5a:08:31:08:ad:a7:b1:42:44:df:17:
                    57:93:1f:52:f3:50:88:82:9f:ee:49:5e:bf:c7:e6:
                    7b:28:ac:83:f3:c6:0d:2d:35:eb:9b:a2:c8:1d:f8:
                    63:dc:f0:62:87:4b:2b:82:cc:4c:aa:d7:d0:9f:8b:
                    00:bb:60:93:95:8b:14:af:12:fa:e5:85:c3:2d:04:
                    fe:00:71:87:ec:b1:55:f0:ae:19:d7:08:05:36:d1:
                    dc:db:0d:8b:43:fd:e9:ad:77:90:05:42:3d:ff:97:
                    d6:5a:cc:73:c5:14:84:dc:cf:8d:85:49:77:1a:bf:
                    59:a7:39:53:71:d5:79:dc:53:66:20:d6:92:e2:66:
                    34:7f:cd:1e:11:d7:82:f4:ca:82:2a:52:07:9d:69:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:30:8B:50:F1:82:DB:5E:1C:3B:36:11:31:CC:E8:15:27:DE:15:E0
            X509v3 Authority Key Identifier:
                keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0a:96:d2:8c:e6:65:f5:fe:89:32:ff:99:71:40:00:da:9d:
         f1:7e:a3:63:94:2e:df:57:89:cf:48:8e:34:be:b7:26:40:88:
         3b:de:bf:92:a6:cb:45:09:a8:8f:63:9c:d9:e2:75:24:cc:38:
         0e:ee:28:70:80:81:8f:c2:1a:9b:64:40:76:bf:88:b7:82:02:
         6a:0f:89:ed:9e:cf:ab:4c:4c:c1:21:67:b0:d2:fe:aa:e3:e9:
         45:66:3a:70:63:7e:f3:24:8d:6d:73:ac:6e:ce:99:c8:37:0a:
         cf:ab:2a:36:5e:74:7f:bc:0e:18:c6:b9:2b:9a:ae:af:2b:32:
         22:b2:cd:95:cc:83:91:57:57:ac:64:0c:bb:68:62:de:ea:8c:
         a9:7c:40:45:89:ff:8f:fe:71:b6:93:fb:49:97:0e:7a:f7:d0:
         68:a7:39:5a:ff:d2:1e:91:4b:87:17:07:ac:09:3c:06:38:02:
         c9:7b:e0:39:32:b2:62:b0:bd:0c:38:31:b2:20:80:2e:39:ab:
         88:01:d7:81:13:79:56:02:2d:c3:13:40:9a:c1:53:91:20:9d:
         59:1d:5e:e5:06:6e:14:0e:6c:63:1e:f8:2c:ae:3b:21:dc:4d:
         75:6a:99:57:68:4a:08:4d:1e:ee:07:f9:7a:41:c0:ca:78:9f:
         8f:bb:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----