Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
File:                     K2s1AF0wIoBENtctw8nIZc-qoAM.mft (raw, json)
Hash identifier:          r2d1xncdI+tpcOanCioHDa634cR6ZYX15j6ecdOV54M=
Subject key identifier:   13:59:93:1F:6F:E2:36:67:BE:A4:2B:BC:24:DA:C4:75:B1:28:37:E3
Authority key identifier: 2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03
Certificate issuer:       /CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
Certificate serial:       01962F071D734A38D59648E52381790CE3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft
Manifest number:          0A15
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: K2s1AF0wIoBENtctw8nIZc-qoAM.crl (hash: CJApACg/ETF/i8pKIfOuxkY8yxxbqWolCbt6/1uH11Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:73:4a:38:d5:96:48:e5:23:81:79:0c:e3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6b35005d3022804436d72dc3c9c865cfaaa003
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=1359931f6fe23667bea42bbc24dac475b12837e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:90:ad:f0:20:97:d9:7e:3d:e7:9d:dd:c3:
                    17:57:6a:b6:33:e4:60:78:06:b0:3f:66:dc:9e:07:
                    0b:4d:5e:d1:b4:50:e3:d6:88:9c:33:a1:5c:b4:5e:
                    d4:72:15:4f:a8:ba:77:66:17:e1:dc:f4:b9:a5:b5:
                    68:0e:c0:8e:b1:cb:5b:15:04:d7:57:90:c4:2f:89:
                    5c:c2:24:0c:e9:b6:3a:44:02:e3:7e:e6:e5:63:3b:
                    b1:91:f2:8c:93:e9:28:3f:f2:90:91:3e:4d:eb:22:
                    18:57:a0:3e:9b:0a:12:33:14:f1:15:41:19:1b:5b:
                    19:3b:66:3a:a8:66:68:ef:a3:30:ef:08:c7:89:93:
                    d9:f3:1c:09:94:48:2b:c6:06:8f:c7:98:93:0b:d8:
                    6b:d5:0a:33:1f:e6:fa:1f:cd:91:6d:80:71:55:d9:
                    2d:b8:eb:2c:80:5a:26:66:a6:1e:8d:b5:0f:dc:77:
                    69:66:e3:e0:50:7d:a2:37:a5:84:e6:78:2d:13:32:
                    6f:e4:28:ac:41:23:67:a1:92:a9:5f:c1:7d:f8:b5:
                    5b:61:8e:f5:4d:ec:43:e9:0a:19:66:7c:d0:ab:54:
                    6b:5e:eb:49:e6:43:0a:3a:b9:79:5e:6e:4f:67:0a:
                    40:75:43:d8:b5:10:6b:cf:66:3e:37:d6:39:54:f6:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:59:93:1F:6F:E2:36:67:BE:A4:2B:BC:24:DA:C4:75:B1:28:37:E3
            X509v3 Authority Key Identifier:
                keyid:2B:6B:35:00:5D:30:22:80:44:36:D7:2D:C3:C9:C8:65:CF:AA:A0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2s1AF0wIoBENtctw8nIZc-qoAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f4c354-80fb-4c39-a0f8-f18fbf596eba/1/K2s1AF0wIoBENtctw8nIZc-qoAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:2b:89:cc:3e:ac:2b:fc:f3:8c:22:a9:cd:3f:76:99:27:
         d4:65:c5:cd:2f:71:90:03:2a:36:ba:0a:21:91:93:34:64:f9:
         65:f4:62:d0:1e:d5:08:b9:a1:79:cc:ee:5e:eb:7d:68:8a:60:
         3f:9d:8e:a5:b3:29:a0:0b:3f:95:c6:10:56:7d:5a:d9:7c:b2:
         56:26:39:74:c9:10:9b:41:ac:85:44:60:f3:a1:2f:c4:3d:9d:
         84:f4:7f:80:b1:33:e6:18:92:f5:5d:9b:5d:e6:63:31:b1:f1:
         dd:e0:b3:af:6d:58:5b:fc:95:64:34:f3:ae:ae:32:d7:f5:a6:
         cb:0c:56:b3:08:ae:ed:1d:11:cf:db:b1:78:8e:42:1a:1c:72:
         bb:5e:c4:ef:1a:e7:f8:af:5f:f3:34:8e:f0:15:b4:2a:dd:b9:
         eb:a9:2f:a2:1e:b1:43:d4:c8:d3:26:23:da:70:d1:ff:0b:5d:
         21:1c:52:19:81:14:4b:44:f1:1c:21:89:8b:b6:bd:5f:d7:f8:
         34:2d:dd:8e:64:3a:2d:f6:89:b8:d3:b2:9a:76:57:83:a6:d3:
         78:82:97:32:17:f7:e3:57:45:f4:a4:c0:b5:fd:5d:e4:ec:a8:
         f0:1a:38:e2:a0:92:23:fd:b6:f2:f5:24:5b:e3:85:fd:ab:3a:
         ae:ac:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----