Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
File:                     kjlpG6eScAY69DZNMIYxNl6QEWo.mft (raw, json)
Hash identifier:          M5lhzkGureU/NtAlap5Wp6K7xGXYUcISj7Rv/sqhsNE=
Subject key identifier:   5B:3E:BB:4D:27:8D:18:C5:6A:7F:53:91:EF:0E:BA:94:23:9F:F6:9B
Authority key identifier: 92:39:69:1B:A7:92:70:06:3A:F4:36:4D:30:86:31:36:5E:90:11:6A
Certificate issuer:       /CN=9239691ba79270063af4364d308631365e90116a
Certificate serial:       01962F748B6AC171FBB6CDB8DD11D498D547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft
Manifest number:          0C44
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: kjlpG6eScAY69DZNMIYxNl6QEWo.crl (hash: U8Qbe8skYSUAg8y39a4x/sY0CvyUocW9gL8X1HpgUuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:6a:c1:71:fb:b6:cd:b8:dd:11:d4:98:d5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9239691ba79270063af4364d308631365e90116a
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=5b3ebb4d278d18c56a7f5391ef0eba94239ff69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:bf:8a:39:01:23:49:e1:f5:9f:42:b6:4b:
                    8d:9a:ae:2d:fe:6e:db:62:d7:25:8c:49:5c:49:2d:
                    aa:b7:77:4d:78:6e:44:08:9b:54:3c:21:b0:8d:02:
                    16:2c:39:08:18:66:ec:c3:c5:e1:c8:b5:fb:e0:16:
                    a0:6e:54:b8:3b:08:8a:f5:a1:0d:a7:04:d1:14:17:
                    d0:bc:9a:23:88:f1:a2:be:46:b5:a2:69:62:55:2a:
                    05:f7:a5:5e:e6:d5:33:85:89:56:15:5b:e5:9b:75:
                    cf:2a:12:ff:86:2a:c5:c7:d5:ff:13:3f:22:55:d7:
                    38:fe:e9:da:01:c6:17:50:59:41:05:7a:3c:e0:d9:
                    fd:e0:4d:14:68:29:2b:03:ec:af:aa:e5:29:4a:34:
                    9c:1a:84:e0:e2:28:ad:82:bc:cf:2d:d0:94:a2:79:
                    da:5c:12:93:5c:b1:d9:79:bd:1c:85:5f:9f:d0:4a:
                    ba:eb:13:91:46:be:3a:64:5a:4c:ff:fe:a1:e4:1b:
                    9e:b9:db:cf:c1:6a:92:69:5a:cf:09:0b:2e:6a:45:
                    a1:a2:e8:f6:19:53:23:6c:3d:10:13:3a:76:6d:d1:
                    d9:0f:a9:55:47:85:ec:a1:89:66:c5:f5:dc:92:59:
                    69:bc:20:6b:0f:08:cf:e4:5d:77:98:e1:28:c3:e5:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:BB:4D:27:8D:18:C5:6A:7F:53:91:EF:0E:BA:94:23:9F:F6:9B
            X509v3 Authority Key Identifier:
                keyid:92:39:69:1B:A7:92:70:06:3A:F4:36:4D:30:86:31:36:5E:90:11:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjlpG6eScAY69DZNMIYxNl6QEWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/86bd09-32b0-494c-9755-f1792bd77a53/1/kjlpG6eScAY69DZNMIYxNl6QEWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f0:c7:4c:e1:b3:6d:df:f8:e8:70:ef:89:ae:b2:c0:08:3c:
         fb:b1:c4:11:38:0e:a7:18:66:76:62:d9:50:dd:ca:5e:e0:ea:
         e1:48:f3:aa:fc:2c:ff:6f:86:9a:e4:29:77:63:79:ba:1f:9c:
         6a:91:de:84:b0:b0:f4:45:e4:ab:c9:08:03:30:ee:42:f8:ff:
         bd:86:54:30:fc:c4:c5:41:8c:6f:ff:61:3e:4c:75:19:7a:21:
         f5:1b:a6:9f:63:9d:b2:e0:57:cf:25:bb:e6:37:42:07:dc:1e:
         03:67:da:38:46:55:f4:7e:77:32:0f:0e:2e:18:8c:5d:f6:f7:
         0c:98:5a:98:e3:f0:1b:81:30:07:37:39:ef:39:55:e8:73:9f:
         54:0c:4a:74:3b:ac:f3:0d:68:d7:c2:66:35:2c:ac:01:2d:a3:
         e5:49:4a:f5:04:c3:2c:82:04:b0:7b:48:ab:b7:a2:d2:00:cf:
         24:b1:71:da:2f:63:c3:f5:63:e7:ba:a2:a3:be:92:a3:9b:b3:
         ce:8f:50:21:cf:34:3a:23:fe:dd:61:8a:49:5b:5e:f1:23:3b:
         e7:cb:23:1e:56:7c:46:a4:8d:a1:0d:ab:33:60:a1:97:ff:54:
         a4:9c:53:7e:df:ec:18:87:8f:b5:51:4e:21:42:3a:10:8c:2a:
         d8:91:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----