Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
File:                     ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft (raw, json)
Hash identifier:          dimTe4WlOv0GZqx9l/tbfDe0SaL3ZQIPSRS4micJM+k=
Subject key identifier:   E6:2C:10:2F:D1:92:75:9D:59:34:05:FB:71:8D:A8:42:E6:6D:08:F9
Authority key identifier: 93:2F:B8:2B:8D:02:90:B1:CA:58:CC:7F:1B:ED:63:E4:E4:37:A0:CB
Certificate issuer:       /CN=932fb82b8d0290b1ca58cc7f1bed63e4e437a0cb
Certificate serial:       01962F3D6CFC4A597AFB4AB3422BE9146C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky-4K40CkLHKWMx_G-1j5OQ3oMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft
Manifest number:          0CD4
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: ky-4K40CkLHKWMx_G-1j5OQ3oMs.crl (hash: 59BbzAa3z0Lz3VupPtESIDD6hVo00a/9Ifws5SAhGmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:fc:4a:59:7a:fb:4a:b3:42:2b:e9:14:6c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932fb82b8d0290b1ca58cc7f1bed63e4e437a0cb
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=e62c102fd192759d593405fb718da842e66d08f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:ea:bb:dd:c3:01:4e:1c:c9:20:c8:ae:7b:
                    3b:dc:64:6f:5f:18:5d:06:d4:8c:fa:9f:83:00:a9:
                    e2:4d:e2:c7:2a:69:d2:fe:e8:f3:c0:19:76:d9:d6:
                    6f:cd:46:55:28:77:15:3c:e1:75:40:2a:e3:9d:9b:
                    e4:8e:81:ae:8e:a2:66:c3:03:66:6a:b7:a7:2e:63:
                    2f:4d:4b:41:fc:3b:81:80:89:f3:17:2c:14:50:e0:
                    b5:8b:11:9a:81:b6:de:19:6d:fb:d9:82:67:f8:25:
                    eb:66:7e:1b:bc:25:51:f7:02:1c:bc:8b:cd:87:52:
                    b4:a9:46:b3:d2:6a:9b:ef:ae:ab:d9:98:62:cf:cd:
                    40:85:14:40:6d:f7:4b:2d:c8:16:e9:53:94:83:3b:
                    6f:1e:4c:ae:0b:34:cc:cc:da:d2:e4:38:30:63:66:
                    c5:b2:25:c2:bd:ee:05:31:e5:da:b3:15:fd:7f:fb:
                    ce:6f:5a:e1:45:81:23:36:7a:70:78:1f:56:12:9a:
                    2f:6c:c6:77:cf:3a:09:73:36:6a:c7:98:7b:4f:6a:
                    4a:ec:24:e6:8a:63:34:19:c7:e6:69:11:ea:73:b2:
                    04:4b:90:c9:f3:c7:f3:dc:f9:2f:ea:96:fe:e1:e8:
                    f9:27:56:db:88:7f:42:7c:a3:28:b4:5e:80:8c:3f:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2C:10:2F:D1:92:75:9D:59:34:05:FB:71:8D:A8:42:E6:6D:08:F9
            X509v3 Authority Key Identifier:
                keyid:93:2F:B8:2B:8D:02:90:B1:CA:58:CC:7F:1B:ED:63:E4:E4:37:A0:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky-4K40CkLHKWMx_G-1j5OQ3oMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d3b3ab-53a1-48ff-a344-82d33f4bac45/1/ky-4K40CkLHKWMx_G-1j5OQ3oMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:15:82:f4:d1:15:30:40:dc:32:2f:36:61:24:75:42:a8:
         5d:86:72:ba:04:10:7d:4a:db:93:09:45:99:0e:23:fb:4f:8e:
         d9:42:b4:7c:2f:1b:0a:a1:01:05:14:5f:ed:db:3d:26:71:51:
         de:aa:80:0a:29:de:52:64:bd:9d:d6:0a:26:ba:b1:30:1b:0e:
         66:f2:8c:1d:b7:33:18:6d:a2:66:01:ef:22:c0:4f:ec:a2:62:
         a9:30:c0:78:7c:71:d3:10:ae:91:c7:eb:e7:98:76:be:f8:4e:
         26:bf:ea:ad:fd:ad:09:8b:29:48:9c:66:b1:a4:71:46:9c:0b:
         f3:b0:3f:d0:91:a0:ae:83:c5:3e:3f:c9:ef:dc:16:57:a2:52:
         79:45:f1:f6:d0:30:5a:e0:05:88:71:69:79:1f:f1:af:64:b4:
         92:55:b9:cc:c3:7d:62:02:a5:37:7c:97:94:0e:af:57:af:d0:
         f8:e2:10:ef:52:b3:b7:9b:1e:2e:86:55:4a:ce:e8:3d:d9:e5:
         d4:69:d0:e8:14:a9:59:fd:da:65:66:25:cf:02:5a:f6:bf:aa:
         83:30:22:80:fd:5a:c9:93:5f:67:c8:5e:c8:3d:49:ba:c7:70:
         de:2f:8d:8d:b7:6b:35:f3:45:ff:44:ea:46:c2:81:ac:ac:19:
         fb:74:27:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----