Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
File:                     KY2bT7TP4nih65-iA1oInEwlaFg.mft (raw, json)
Hash identifier:          n4PNbe1BsP+X93ZwVcypVejq+0Lx3qRsyVYvA6iKPCo=
Subject key identifier:   5F:5E:88:82:1E:DE:16:6B:10:BA:2D:10:5B:9F:3A:D5:15:0F:2E:0C
Authority key identifier: 29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
Certificate issuer:       /CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
Certificate serial:       01962F74B5B247A72CED58DE8A1E9CAF044B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
Manifest number:          0A70
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: KY2bT7TP4nih65-iA1oInEwlaFg.crl (hash: ou+5b0yXTaNYA388zPTnbloOne4iAOsdKXSWCICxhCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b5:b2:47:a7:2c:ed:58:de:8a:1e:9c:af:04:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=5f5e88821ede166b10ba2d105b9f3ad5150f2e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:c8:de:32:3a:e3:1b:e6:ba:9b:f5:21:d5:
                    e5:d3:37:21:cc:57:49:c9:50:97:3f:3b:a1:b5:ba:
                    99:4f:4e:4e:d4:a8:7d:d2:f4:27:9b:de:65:db:0d:
                    03:75:d9:18:c3:80:85:a0:13:e2:b2:d4:d9:3b:85:
                    2c:75:00:10:59:45:72:c3:56:4e:4f:64:8f:3f:7e:
                    ad:8e:77:98:e5:49:a5:30:2c:6f:b7:f2:66:f2:7f:
                    37:52:69:e8:fd:f9:e8:7e:64:8e:03:3b:f3:92:f5:
                    dd:ce:33:30:79:de:17:a5:51:ca:6c:98:52:87:56:
                    3c:a4:1b:f4:27:b0:ef:07:b9:56:70:16:2e:45:a4:
                    89:39:ce:8c:59:c9:40:7f:f6:19:48:ea:38:cf:63:
                    ed:26:98:a5:90:85:5f:75:26:72:cb:a5:de:93:f5:
                    25:04:48:a2:04:a1:71:fd:b0:4c:b5:92:ec:77:15:
                    df:40:58:5c:c7:57:44:b3:ae:b0:cd:04:0f:e7:0f:
                    27:ef:48:10:de:04:14:3d:0e:d6:c7:7c:e5:49:21:
                    d7:5c:32:f1:bc:4d:e9:49:81:22:8d:53:8e:7b:d0:
                    e9:20:ca:fe:84:73:33:a8:77:e1:38:f5:9e:e3:dc:
                    58:c1:d2:15:4d:57:f2:e0:a2:4b:71:b8:de:c4:77:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5E:88:82:1E:DE:16:6B:10:BA:2D:10:5B:9F:3A:D5:15:0F:2E:0C
            X509v3 Authority Key Identifier:
                keyid:29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:05:1b:8a:7b:39:e8:fd:e1:d8:a1:4c:9a:58:d5:5c:c6:73:
         00:f7:76:9b:f7:d1:25:6e:c0:36:59:7d:67:c4:c6:a1:22:70:
         92:43:85:c2:93:f5:86:ea:eb:ed:70:f0:b6:18:2c:9e:14:53:
         72:df:d9:69:b5:bd:82:2a:66:6f:94:75:c9:e6:68:94:5e:ad:
         e5:c4:5b:4f:f2:2b:0f:82:33:7f:39:f6:14:fc:2f:30:91:57:
         ed:08:ed:8f:63:04:d5:aa:e9:ef:18:a0:b6:64:41:09:6a:a4:
         a4:b4:f5:23:32:37:d7:f9:89:18:eb:92:e6:f8:71:11:78:d0:
         88:72:85:fe:e7:5d:95:3b:5c:d6:98:85:a2:57:3e:6d:ce:d1:
         96:6f:d8:a5:3f:86:8c:e9:50:d7:96:e4:eb:18:6a:56:f3:cf:
         e4:2e:ab:d6:e7:b6:28:14:a1:9b:f2:44:62:59:b7:02:53:22:
         32:ee:91:d9:75:00:84:09:a6:6d:8c:41:0b:df:a9:03:77:c0:
         d3:46:29:01:d3:ec:ca:51:63:47:70:3c:23:3c:93:77:16:d0:
         e9:c0:e3:e0:e5:79:4d:c0:92:31:8c:4b:c0:c9:59:8c:25:99:
         23:a4:66:f5:df:e4:b6:e9:3d:cf:af:6d:e6:64:e2:af:95:c4:
         b7:11:95:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLWyR6cs7Vjeih6crwRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OGQ5YjRmYjRjZmUyNzhhMWViOWZhMjAzNWEwODljNGMy
NTY4NTgwHhcNMjUwNDEzMTQwMTM5WhcNMjUwNDE0MTQwMTM5WjAzMTEwLwYDVQQD
Eyg1ZjVlODg4MjFlZGUxNjZiMTBiYTJkMTA1YjlmM2FkNTE1MGYyZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BLI3jI64xvmupv1IdXl0zchzFdJ
yVCXPzuhtbqZT05O1Kh90vQnm95l2w0DddkYw4CFoBPistTZO4UsdQAQWUVyw1ZO
T2SPP36tjneY5UmlMCxvt/Jm8n83Umno/fnofmSOAzvzkvXdzjMwed4XpVHKbJhS
h1Y8pBv0J7DvB7lWcBYuRaSJOc6MWclAf/YZSOo4z2PtJpilkIVfdSZyy6Xek/Ul
BEiiBKFx/bBMtZLsdxXfQFhcx1dEs66wzQQP5w8n70gQ3gQUPQ7Wx3zlSSHXXDLx
vE3pSYEijVOOe9DpIMr+hHMzqHfhOPWe49xYwdIVTVfy4KJLcbjexHdCZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9eiIIe3hZrELotEFufOtUVDy4MMB8GA1UdIwQY
MBaAFCmNm0+0z+J4oeufogNaCJxMJWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1kyYlQ3VFA0bmloNjUtaUExb0luRXdsYUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83Mzc3MDMtYzhjMS00NjgyLWJiMDIt
ZDgwMGJkZDY4NmUzLzEvS1kyYlQ3VFA0bmloNjUtaUExb0luRXdsYUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83Mzc3MDMtYzhjMS00NjgyLWJiMDItZDgwMGJkZDY4NmUz
LzEvS1kyYlQ3VFA0bmloNjUtaUExb0luRXdsYUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAUbins5
6P3h2KFMmljVXMZzAPd2m/fRJW7ANll9Z8TGoSJwkkOFwpP1hurr7XDwthgsnhRT
ct/ZabW9gipmb5R1yeZolF6t5cRbT/IrD4Izfzn2FPwvMJFX7Qjtj2ME1arp7xig
tmRBCWqkpLT1IzI31/mJGOuS5vhxEXjQiHKF/uddlTtc1piFolc+bc7Rlm/YpT+G
jOlQ15bk6xhqVvPP5C6r1ue2KBShm/JEYlm3AlMiMu6R2XUAhAmmbYxBC9+pA3fA
00YpAdPsylFjR3A8IzyTdxbQ6cDj4OV5TcCSMYxLwMlZjCWZI6Rm9d/ktuk9z69t
5mTir5XEtxGVKA==
-----END CERTIFICATE-----