Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
File:                     KoC1_zdQaKdJAhDrxsryKCLKDQo.mft (raw, json)
Hash identifier:          i+hHrh+lwwW14yWNhdTKmRMRWpGWdusBNJqZOuMBvig=
Subject key identifier:   2C:BD:1E:B1:57:F2:A5:D1:09:73:C6:DD:44:44:50:27:0D:CC:29:78
Authority key identifier: 2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A
Certificate issuer:       /CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
Certificate serial:       01962F06F3F41030677040951ACC8B12D4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:46 +0000
Files and hashes:         1: KoC1_zdQaKdJAhDrxsryKCLKDQo.crl (hash: yLwIAxq7f0VNRqlrDiUYdJUWu6mpC0SIw4yTOLhHmFw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f3:f4:10:30:67:70:40:95:1a:cc:8b:12:d4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a80b5ff375068a7490210ebc6caf22822ca0d0a
        Validity
            Not Before: Apr 13 12:01:46 2025 GMT
            Not After : Apr 14 12:01:46 2025 GMT
        Subject: CN=2cbd1eb157f2a5d10973c6dd444450270dcc2978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:92:7d:c4:5b:ec:8e:ad:f4:c6:86:ef:d0:
                    bf:bb:4a:f3:25:e3:69:1f:3a:60:39:c4:34:d6:db:
                    53:e3:09:55:fd:b6:c4:ab:72:c3:64:68:43:24:83:
                    05:ca:9d:59:c5:8f:be:82:23:ba:89:22:fe:e9:b2:
                    ee:71:fa:43:df:38:67:79:3b:04:f8:a5:78:19:ce:
                    5c:66:ed:52:65:a6:38:27:ef:76:a0:1e:fe:23:95:
                    41:40:69:cb:36:11:71:d2:b2:43:06:00:97:d8:aa:
                    fe:0d:f3:3a:92:61:4b:58:da:84:36:5b:44:55:83:
                    72:b9:10:8b:bb:d7:ed:75:07:fb:e3:52:8e:14:06:
                    ef:c1:e9:be:38:2c:40:39:cb:97:23:95:03:ea:f4:
                    04:34:f2:07:dc:00:6b:92:bd:9f:e1:70:c7:ae:70:
                    05:53:aa:9e:79:41:ab:45:17:be:83:b5:4b:07:30:
                    93:cb:04:ae:d4:35:22:0f:aa:c0:f4:85:8a:23:a3:
                    7d:eb:30:16:54:0a:24:d8:73:ec:aa:28:26:2a:83:
                    25:a0:11:b4:14:05:58:95:68:12:26:a3:31:82:66:
                    4a:b2:97:6c:1f:af:f0:f5:88:50:61:80:e6:16:45:
                    be:cd:37:d5:99:47:f7:6a:71:03:cf:01:0e:cb:b6:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:1E:B1:57:F2:A5:D1:09:73:C6:DD:44:44:50:27:0D:CC:29:78
            X509v3 Authority Key Identifier:
                keyid:2A:80:B5:FF:37:50:68:A7:49:02:10:EB:C6:CA:F2:28:22:CA:0D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoC1_zdQaKdJAhDrxsryKCLKDQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/af2f3c-eac2-4e35-8ec4-0ddc50486787/1/KoC1_zdQaKdJAhDrxsryKCLKDQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:f1:7f:25:85:16:6b:6d:2b:fb:39:3a:8f:2f:6d:a1:18:
         ad:5e:b6:65:2d:39:b2:ef:88:86:39:9a:c3:86:29:2b:1d:60:
         3b:92:3a:be:c7:93:7e:64:36:b5:b7:04:6d:74:03:11:f8:57:
         fb:f4:82:5a:44:58:1f:e0:25:66:d2:28:97:c7:2e:10:2c:c8:
         cb:de:80:51:9b:80:f7:f9:6e:4b:5a:d9:78:11:ee:66:78:f8:
         b4:de:0b:d6:bc:3a:9c:36:37:32:d5:fd:da:2b:58:95:92:c2:
         48:6e:b3:69:70:4a:30:2a:13:4f:e0:84:89:d4:af:77:70:ab:
         03:5d:6f:0a:82:fa:c3:0a:a5:fa:11:ba:36:ff:04:6e:54:fe:
         24:e1:d1:0c:ff:e8:97:f6:b6:00:7b:f8:95:58:b5:72:25:0a:
         44:5c:83:61:0f:6e:4c:e7:0b:94:a1:df:d2:df:d4:7d:5c:8d:
         25:0d:47:49:18:ca:56:14:21:aa:32:1c:1a:7b:93:cd:e9:8d:
         8f:61:7b:5e:f1:c9:ec:78:c1:4a:96:41:a9:00:bb:c0:b5:57:
         31:18:99:7f:bf:b1:2b:dd:f6:62:58:68:d8:b0:b8:6a:d9:ed:
         14:5f:98:0a:0b:f6:ae:fe:c9:3f:68:13:5e:c7:54:3a:2d:db:
         8c:6e:f1:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvP0EDBncECVGsyLEtTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhODBiNWZmMzc1MDY4YTc0OTAyMTBlYmM2Y2FmMjI4MjJj
YTBkMGEwHhcNMjUwNDEzMTIwMTQ2WhcNMjUwNDE0MTIwMTQ2WjAzMTEwLwYDVQQD
EygyY2JkMWViMTU3ZjJhNWQxMDk3M2M2ZGQ0NDQ0NTAyNzBkY2MyOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhiSfcRb7I6t9MaG79C/u0rzJeNp
HzpgOcQ01ttT4wlV/bbEq3LDZGhDJIMFyp1ZxY++giO6iSL+6bLucfpD3zhneTsE
+KV4Gc5cZu1SZaY4J+92oB7+I5VBQGnLNhFx0rJDBgCX2Kr+DfM6kmFLWNqENltE
VYNyuRCLu9ftdQf741KOFAbvwem+OCxAOcuXI5UD6vQENPIH3ABrkr2f4XDHrnAF
U6qeeUGrRRe+g7VLBzCTywSu1DUiD6rA9IWKI6N96zAWVAok2HPsqigmKoMloBG0
FAVYlWgSJqMxgmZKspdsH6/w9YhQYYDmFkW+zTfVmUf3anEDzwEOy7ZKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy9HrFX8qXRCXPG3UREUCcNzCl4MB8GA1UdIwQY
MBaAFCqAtf83UGinSQIQ68bK8igiyg0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQt
MGRkYzUwNDg2Nzg3LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hZjJmM2MtZWFjMi00ZTM1LThlYzQtMGRkYzUwNDg2Nzg3
LzEvS29DMV96ZFFhS2RKQWhEcnhzcnlLQ0xLRFFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfbxfyWF
FmttK/s5Oo8vbaEYrV62ZS05su+Ihjmaw4YpKx1gO5I6vseTfmQ2tbcEbXQDEfhX
+/SCWkRYH+AlZtIol8cuECzIy96AUZuA9/luS1rZeBHuZnj4tN4L1rw6nDY3MtX9
2itYlZLCSG6zaXBKMCoTT+CEidSvd3CrA11vCoL6wwql+hG6Nv8EblT+JOHRDP/o
l/a2AHv4lVi1ciUKRFyDYQ9uTOcLlKHf0t/UfVyNJQ1HSRjKVhQhqjIcGnuTzemN
j2F7XvHJ7HjBSpZBqQC7wLVXMRiZf7+xK932Ylho2LC4atntFF+YCgv2rv7JP2gT
XsdUOi3bjG7xew==
-----END CERTIFICATE-----