Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File:                     knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier:          AMwLUEXJr+2VyVScufILZCet0PALONSotSJM7lCidwg=
Subject key identifier:   AA:3E:7F:B3:9D:69:5F:9F:13:03:5A:3A:4B:0B:97:85:65:37:B1:FC
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer:       /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial:       01962E9989A75922B10230EDBC06C8B23359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number:          12BA
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: 88JG8MYmTNDMA/p8QhdslXhHty4/lQDo48EhrdWBygg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:89:a7:59:22:b1:02:30:ed:bc:06:c8:b2:33:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=aa3e7fb39d695f9f13035a3a4b0b97856537b1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:d0:b3:e8:61:0a:94:c7:62:e5:e0:9c:7e:
                    fc:be:84:ac:9c:2e:1b:f6:4b:bf:f2:ae:fd:e6:a5:
                    e8:ce:fb:92:32:20:b4:3e:f1:47:45:ee:f7:2e:81:
                    27:ec:31:67:e1:c3:3f:72:0f:63:7c:cb:a8:33:4e:
                    f8:0c:5b:ca:d5:0d:8c:cb:85:18:0d:cc:4a:eb:62:
                    38:27:30:37:54:45:e9:d4:39:de:2f:9e:b1:e5:11:
                    a7:55:b6:98:bc:0f:89:3f:17:8a:84:0e:a3:52:dc:
                    f1:b8:5b:41:87:81:2c:10:cd:66:dc:7b:59:ca:eb:
                    de:98:1d:71:c5:19:92:46:d4:01:7b:92:15:67:24:
                    f2:c8:3e:eb:d0:0e:bc:2a:8d:53:31:fe:d0:4b:d9:
                    47:8d:d0:f7:a1:d8:4a:79:e4:b4:33:37:6b:12:9f:
                    6b:22:91:df:2b:d7:b2:ef:18:06:f7:e1:04:cb:02:
                    57:8a:4e:5e:9c:4c:93:37:c4:58:e9:5f:cc:f0:c2:
                    a8:67:93:01:cb:11:cc:d4:20:b1:e2:d7:5a:54:1e:
                    f9:19:74:d4:dd:cf:63:5d:43:72:77:74:83:64:c6:
                    92:25:bc:b3:b3:5e:ef:db:7a:73:61:95:89:ba:6c:
                    13:e3:ae:ca:c7:bf:b3:28:7b:43:36:1e:1d:0a:be:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3E:7F:B3:9D:69:5F:9F:13:03:5A:3A:4B:0B:97:85:65:37:B1:FC
            X509v3 Authority Key Identifier:
                keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:23:65:c7:41:bc:49:3a:11:17:4e:8a:fc:de:69:b8:ed:a7:
         ab:d1:21:7c:2a:e9:01:e7:15:25:fe:64:78:ce:e6:b9:05:8c:
         59:13:89:66:fa:6b:9a:9a:4a:96:af:3b:d5:9d:b7:0c:a9:8b:
         78:3f:26:41:0e:3c:ec:81:46:51:46:b2:47:ef:73:cb:bc:a8:
         35:7b:20:24:f6:4f:2a:bb:6c:72:f1:18:e6:af:1d:c8:ef:f6:
         32:38:f2:45:e5:0e:45:ad:92:0e:f0:e8:38:95:02:cb:14:8f:
         19:04:b5:83:c2:82:e0:b2:93:33:03:b5:45:6f:21:06:9a:2a:
         48:5e:a1:c5:46:10:0b:02:f7:7a:bc:2f:cf:7e:c3:4a:da:2d:
         d4:39:49:a4:70:17:f9:50:97:94:4f:43:49:40:1a:9f:18:97:
         58:16:c2:10:9b:23:29:66:3e:9a:39:b5:26:37:b1:5b:01:3c:
         8d:8b:e0:d7:63:e6:85:ac:14:03:e5:8c:c9:aa:4a:3b:1c:f0:
         71:4e:80:ac:1d:d0:30:27:2e:8c:a1:dd:cf:f2:88:60:62:d4:
         43:5a:0b:c6:7b:6c:5c:3e:12:cb:a1:95:fd:b1:4e:9b:15:1c:
         f2:e1:8c:fd:91:d1:5d:95:29:7a:39:40:da:ed:dc:59:8d:64:
         b7:15:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----