Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
File:                     kYaHyFQkQhcMxR71MW05Y2CXCNw.mft (raw, json)
Hash identifier:          pMzzlkykKq/95Mzgtl874VHog7w61thF66oNvU5pRYI=
Subject key identifier:   0D:D5:75:49:01:06:7E:15:52:13:57:BB:12:87:BD:C1:49:F6:2B:93
Authority key identifier: 91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC
Certificate issuer:       /CN=918687c8542442170cc51ef5316d3963609708dc
Certificate serial:       01962E98C544BD5EBFC6D1D276C71665E97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft
Manifest number:          10F6
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: kYaHyFQkQhcMxR71MW05Y2CXCNw.crl (hash: /nVxBhBpCo5QZ5sz3OhXTftVYeHBN5FGnKfdC1TSCZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:44:bd:5e:bf:c6:d1:d2:76:c7:16:65:e9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918687c8542442170cc51ef5316d3963609708dc
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=0dd5754901067e15521357bb1287bdc149f62b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:7d:b1:5a:b9:43:03:99:e5:0c:65:eb:9f:
                    14:e8:7f:4e:ad:c7:a7:f0:d9:a3:dd:df:db:09:db:
                    ff:9c:84:94:47:53:98:4e:68:b0:24:e0:e7:95:64:
                    03:c8:26:56:7f:ed:17:84:24:53:68:d8:11:64:41:
                    e8:7f:9b:73:6f:6e:81:7d:ba:f4:34:ab:4a:21:52:
                    6f:4e:6a:61:b3:ab:73:d0:7d:66:cc:cc:50:4b:e3:
                    b3:98:cf:4b:15:a4:87:ba:d7:cb:52:4d:14:0c:5f:
                    bb:09:26:b7:e2:de:6d:c7:db:0a:26:c1:53:0e:1f:
                    7a:8d:7a:03:fd:8e:bd:f1:84:d9:ef:01:fd:ba:a2:
                    a6:b7:37:af:40:fa:26:12:66:f9:b4:3c:95:2f:7e:
                    c6:dd:8e:42:38:45:f3:cd:e7:9e:94:09:91:21:13:
                    5e:28:9c:fa:de:fb:0f:ba:11:9f:0c:be:d8:ac:0e:
                    d9:cb:7e:7f:68:fe:f1:9b:34:ab:c5:73:26:3b:5c:
                    fe:79:ac:49:43:ae:bc:e6:51:b1:48:e8:63:0d:dd:
                    7b:34:29:51:9c:aa:a2:a0:e9:de:b1:72:d9:80:2b:
                    46:82:57:68:43:eb:e6:7d:91:e2:af:de:af:45:9c:
                    31:24:a4:02:d6:fd:d1:bc:29:63:ab:8b:d8:00:84:
                    99:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D5:75:49:01:06:7E:15:52:13:57:BB:12:87:BD:C1:49:F6:2B:93
            X509v3 Authority Key Identifier:
                keyid:91:86:87:C8:54:24:42:17:0C:C5:1E:F5:31:6D:39:63:60:97:08:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYaHyFQkQhcMxR71MW05Y2CXCNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83226a-4291-4f03-9be3-89e39ac1ed81/1/kYaHyFQkQhcMxR71MW05Y2CXCNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:ad:21:20:c4:b0:61:f7:bc:45:29:e1:d9:16:f3:87:3d:
         74:2d:63:c0:36:c9:d7:29:9b:f8:92:b0:d1:3c:17:58:e0:2a:
         4f:f7:fc:50:97:3b:76:73:da:16:d5:75:bd:3a:f5:52:26:64:
         f6:d0:12:43:16:cf:b0:37:c5:28:9e:7c:e9:0b:23:a4:1e:60:
         d7:59:5c:23:30:ec:52:ca:b0:b2:9f:38:72:26:a7:d0:13:5c:
         db:cf:a4:cb:29:ac:0f:99:c7:41:fb:b8:36:4d:bd:52:d2:07:
         1e:6d:5b:06:b7:93:ad:53:b8:9b:b6:b8:2f:92:69:76:d2:f4:
         00:40:fb:38:82:ea:85:e1:47:12:6b:d7:75:5e:b5:c5:af:13:
         ce:17:e0:de:70:f4:ce:ea:16:c0:08:ba:02:67:b7:25:df:56:
         76:0e:9d:bd:fd:6a:ff:19:8c:59:ec:90:d2:be:5f:f2:e5:22:
         eb:3b:7a:18:d6:0f:94:eb:96:9c:9c:9a:05:61:ac:03:1a:c2:
         1f:7b:6b:ae:de:78:2d:08:92:d9:b1:6e:65:0b:94:14:0f:24:
         b3:b4:ad:2a:1d:a3:aa:05:2c:27:71:08:55:12:ee:c6:d2:6c:
         a8:15:64:f0:ad:ba:90:97:7c:b6:ab:86:d1:e4:72:0c:62:d5:
         13:70:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----