Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
File:                     kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft (raw, json)
Hash identifier:          cY/C84rfY2uuI0lSymrp+zo0n+TC65uAH1FpuTjA0E8=
Subject key identifier:   22:38:88:E3:93:E2:7F:91:CB:F7:13:97:EF:83:F8:3C:FB:71:16:35
Authority key identifier: 91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD
Certificate issuer:       /CN=917830d941ee090a8e32348f97b8308fd1ce09fd
Certificate serial:       01962F06EC07122A338574586A3C304C3505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft
Manifest number:          0B66
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl (hash: UfdRBet5RYEcXmct/ODqBOsbKDJAlmt4jGf2cowOym8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:07:12:2a:33:85:74:58:6a:3c:30:4c:35:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917830d941ee090a8e32348f97b8308fd1ce09fd
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=223888e393e27f91cbf71397ef83f83cfb711635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:1d:7a:a5:f0:8a:d3:10:7d:0e:54:f2:05:
                    09:5d:fb:28:ee:43:f4:67:18:c6:14:04:2c:01:e3:
                    34:c0:3a:9c:d0:ca:af:95:9f:d2:4c:7c:c8:02:e3:
                    e1:b8:46:cf:69:58:d8:47:8e:df:ee:ef:8c:3b:95:
                    d7:28:9e:21:2b:82:d8:ad:1f:4c:09:3a:c5:20:93:
                    31:3d:45:79:4a:7e:f7:7e:b2:66:62:66:82:fa:a5:
                    30:f5:3b:19:bc:58:1e:99:cf:af:77:5a:8c:a4:69:
                    69:aa:58:1d:3d:54:16:1b:98:b0:ec:8b:ab:a5:00:
                    cd:54:6f:3d:b6:28:82:21:cd:2e:26:a6:70:18:65:
                    1c:a5:8d:bf:97:27:73:99:2d:2c:45:93:4c:57:84:
                    71:1c:ef:a5:76:aa:31:74:43:12:16:f2:74:2e:bb:
                    bc:85:d3:2a:78:f1:b5:28:ab:73:6a:42:46:2c:eb:
                    f0:ad:ff:9b:41:c0:83:36:6c:75:6f:33:46:23:54:
                    62:b8:d6:71:ec:f8:89:34:52:bd:ae:41:48:5c:e0:
                    d4:30:3f:15:7e:78:81:7a:35:e9:47:dd:d3:1c:01:
                    4c:69:a7:13:7f:b3:2d:2e:31:d3:a3:e8:51:96:0d:
                    82:f8:33:31:ed:9c:8d:0a:33:6d:65:9f:18:3e:40:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:88:E3:93:E2:7F:91:CB:F7:13:97:EF:83:F8:3C:FB:71:16:35
            X509v3 Authority Key Identifier:
                keyid:91:78:30:D9:41:EE:09:0A:8E:32:34:8F:97:B8:30:8F:D1:CE:09:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXgw2UHuCQqOMjSPl7gwj9HOCf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ff2fd0-624d-47f8-be9f-d1f1803b1812/1/kXgw2UHuCQqOMjSPl7gwj9HOCf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fc:1d:d2:c7:d6:bc:13:a0:b2:5d:75:f0:63:89:d0:76:db:
         b6:64:fb:ad:a4:1e:cb:e4:3c:ed:ba:3c:32:bb:a5:f2:ed:eb:
         93:7c:25:1f:0b:a8:58:2b:22:9a:4c:86:a1:db:7f:3c:5a:96:
         1d:03:3e:44:75:43:ba:b9:cc:72:ff:a2:d4:db:8b:91:59:d4:
         a5:80:48:a6:6d:48:37:d3:8b:5e:a1:bc:30:20:8f:d2:82:e0:
         9f:50:f5:32:dc:53:60:b7:01:5f:00:46:50:4b:51:65:62:ae:
         e2:49:9a:e7:44:be:f6:ce:c4:77:b0:98:f0:32:4d:fc:e7:2d:
         d1:f8:a7:8a:60:75:99:79:04:04:da:0b:1b:b6:75:a3:a6:b5:
         00:ff:36:77:4d:e0:41:f9:c4:ce:16:6e:ae:39:16:c2:0f:40:
         93:2c:cb:9b:58:df:fc:bd:da:8a:0f:97:1f:fa:73:02:73:fa:
         57:87:7f:73:43:0b:ba:47:ec:a6:2e:98:b3:98:0c:f0:f4:6a:
         7f:75:dd:6b:03:99:a2:f1:b2:88:22:d6:ba:61:f8:d6:42:83:
         13:91:94:03:11:6c:a9:54:d4:5e:46:f1:4f:64:95:12:d1:89:
         a8:1b:e4:c5:97:87:bb:58:1e:04:e2:cb:88:0b:81:2c:95:6a:
         2e:11:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----