Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File:                     kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier:          c3Q78htXQb1buoZx9yXJHGsfuCQYuhJVR8CrDc75hNE=
Subject key identifier:   83:3F:2E:E7:6C:42:ED:B1:19:78:2C:32:C3:36:3C:0F:5B:85:D6:48
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer:       /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial:       01962E987E2B62501199749AA38A6A234A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number:          0E46
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: AmwdlfPdwA6bUT09B06azb2BMWv2VdESlVitkdgRC6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:2b:62:50:11:99:74:9a:a3:8a:6a:23:4a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=833f2ee76c42edb119782c32c3363c0f5b85d648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:b5:35:82:17:c8:07:26:6e:8c:d9:01:1d:
                    8d:23:22:f4:34:f9:3d:c5:a0:4a:1a:b1:1a:22:97:
                    76:47:93:d0:22:cc:3e:f4:db:da:7b:5d:85:6f:9c:
                    36:21:04:b5:0d:2e:9c:41:02:21:43:00:65:4f:90:
                    29:bb:7c:4d:72:39:ad:6e:26:05:f2:2d:4a:50:29:
                    36:11:6b:00:bb:af:a9:df:df:e1:95:02:1c:36:66:
                    8c:61:ff:6f:01:ba:24:b7:6e:6b:1d:e0:1a:ca:64:
                    00:35:ec:49:f2:cb:2c:1f:eb:c8:9b:3b:19:4d:22:
                    f0:3c:20:ab:a5:34:cf:c5:79:9d:bc:8c:10:e4:43:
                    d7:d1:b2:a0:6a:fe:5f:25:9e:96:ed:c6:37:ab:bb:
                    0e:d6:dd:90:29:41:8b:97:44:32:8c:1c:a5:e4:32:
                    a0:73:40:89:d5:ca:ac:a5:17:32:7e:40:a1:7d:4f:
                    4b:ad:d3:a3:ff:b8:fc:4f:ff:1b:85:c1:f1:cd:f2:
                    80:8c:c7:d6:bd:cd:31:f9:3a:cd:e2:dc:17:1f:e8:
                    8c:70:f5:3e:54:74:dd:aa:d2:f1:77:d4:d8:d6:37:
                    08:63:b2:7f:32:e4:b4:61:e6:88:c5:39:03:e7:c1:
                    4f:06:9a:ae:05:0f:e7:15:23:de:c7:e4:fb:84:ed:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3F:2E:E7:6C:42:ED:B1:19:78:2C:32:C3:36:3C:0F:5B:85:D6:48
            X509v3 Authority Key Identifier:
                keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:a1:20:39:bc:2c:d4:aa:4e:2a:67:68:f1:e2:10:17:b4:
         77:3a:32:1c:f2:68:bf:fe:19:95:48:33:45:4d:cb:f6:0e:b8:
         9f:10:e1:40:be:d1:cc:84:7e:77:bc:5c:6d:90:fd:9d:1c:6f:
         25:d4:da:b1:d0:dc:73:7f:a9:98:22:31:00:42:d5:76:30:1c:
         c6:c3:47:5b:b9:9e:77:84:42:b4:ac:da:23:92:2e:bf:d6:f9:
         f2:20:8d:2f:3d:5a:cd:e7:ca:09:10:e7:be:1a:3a:ed:02:50:
         e8:a3:f6:04:db:20:d0:e0:23:90:93:4c:8a:b2:20:1c:3a:5d:
         ea:70:2a:1a:4f:c8:e3:3f:14:a4:ac:39:9c:0b:b5:8d:50:9a:
         57:72:de:31:b1:37:9f:15:39:60:63:43:07:45:7e:a8:9d:75:
         ea:a2:37:00:28:07:18:3a:6a:03:03:93:05:aa:d6:3f:7e:7c:
         7b:9e:88:5e:59:12:3b:2b:52:68:1a:d0:68:37:72:b8:bd:77:
         e9:f5:f4:ee:45:c5:59:5a:29:a8:96:c0:08:69:9c:a4:fd:c9:
         10:c5:27:6d:bf:aa:ca:f1:6e:cc:63:a2:af:4d:ab:f6:7b:59:
         04:e3:a7:a6:b2:99:66:50:88:c3:65:3d:11:69:dc:8e:f5:e7:
         bf:54:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----