Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
File:                     KMvNlssXsh1iT9IXD9DXCBY68j0.mft (raw, json)
Hash identifier:          jYbQmNROprLHkeIIZlzwXXYWMv0egHs4hIg6YRcwTa0=
Subject key identifier:   2E:F4:05:8C:CD:47:FA:63:13:66:1A:B6:A3:BD:17:CC:6B:F2:38:08
Authority key identifier: 28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D
Certificate issuer:       /CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
Certificate serial:       01962E98704B68EEB2C513769AF76248A669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft
Manifest number:          0E12
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: KMvNlssXsh1iT9IXD9DXCBY68j0.crl (hash: GNlnxP35jS9fiwDXjykouAogHXQ0B70qXGCuYIOZkaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:4b:68:ee:b2:c5:13:76:9a:f7:62:48:a6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28cbcd96cb17b21d624fd2170fd0d708163af23d
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=2ef4058ccd47fa6313661ab6a3bd17cc6bf23808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:dc:1d:a9:d2:06:9b:67:81:e4:44:7f:71:
                    50:99:ea:31:46:b6:aa:77:02:0e:40:db:b6:1c:8d:
                    97:bf:77:36:fb:c0:68:d5:8d:a8:82:c0:6c:f6:51:
                    44:7e:1b:62:a2:2c:ba:5e:84:4d:56:ac:0a:84:ad:
                    ca:2b:dc:95:ec:9b:f0:80:cd:53:55:30:3d:b2:e3:
                    fc:5a:28:ba:4b:73:8b:83:f5:59:02:5b:db:6a:92:
                    54:d1:fa:83:a1:91:40:6a:3d:e4:5f:db:6a:2d:a3:
                    01:76:0c:34:25:f6:37:08:44:7e:d0:ae:5d:f0:03:
                    60:30:cb:63:23:b7:6b:20:37:73:e0:4f:cd:96:7b:
                    51:02:8a:6f:f1:6b:db:c8:63:7f:49:b2:3e:8c:35:
                    ec:3f:63:e2:64:32:14:a0:00:af:5e:62:09:b8:9c:
                    52:45:50:35:56:4d:9d:89:2e:50:83:e0:e6:b4:cc:
                    4b:99:ea:7e:88:79:da:c6:71:19:af:12:14:61:1a:
                    00:96:28:e5:26:c1:2f:a5:aa:03:8e:0a:50:c2:5c:
                    31:2f:29:4c:b8:46:dc:d4:05:2e:c3:e1:fb:1b:e1:
                    e6:3e:44:ab:f0:d6:21:0a:96:5b:27:42:72:ee:10:
                    0b:a5:5b:b5:26:1a:65:f3:c0:d2:03:b2:92:8d:15:
                    55:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:05:8C:CD:47:FA:63:13:66:1A:B6:A3:BD:17:CC:6B:F2:38:08
            X509v3 Authority Key Identifier:
                keyid:28:CB:CD:96:CB:17:B2:1D:62:4F:D2:17:0F:D0:D7:08:16:3A:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMvNlssXsh1iT9IXD9DXCBY68j0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6e40ee-7935-41a9-8ee7-f9a69449d5fa/1/KMvNlssXsh1iT9IXD9DXCBY68j0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:35:82:95:6d:0f:6c:d1:ba:fc:2a:f1:33:a7:4c:ba:af:
         dd:58:f6:87:2a:e4:b3:75:57:41:c2:59:dc:b2:f8:07:30:45:
         52:50:90:55:bb:67:cc:95:ac:e7:4b:ac:c5:b2:cc:f0:40:25:
         08:9a:35:f2:a1:51:d8:ce:fd:d0:db:ec:a6:cc:88:3e:6c:b6:
         23:13:fb:be:49:a7:51:a9:66:df:be:f4:09:4c:ce:eb:e8:b1:
         a7:09:f9:00:fa:b5:24:c8:91:0c:42:fa:3b:73:ee:11:4d:4f:
         cd:3a:a5:16:be:11:a6:6c:6a:7b:50:2e:2d:f6:ee:4f:e2:31:
         d3:8f:b8:ed:3d:1f:05:5f:67:59:e5:79:0a:0a:59:7e:94:b9:
         d4:2e:60:9e:33:28:3c:e0:42:a3:59:2c:a6:32:42:35:2b:08:
         93:84:4e:53:21:fc:84:3b:34:ed:45:c0:7e:fa:a8:67:c1:0f:
         2f:f9:a4:f2:97:c7:c5:c0:78:11:45:eb:81:9d:db:47:b8:a9:
         31:cc:d2:2b:25:d7:43:b2:c0:32:b7:c0:f2:24:08:ea:48:e3:
         16:78:f2:7f:04:b1:59:79:8d:7e:f8:a7:15:d3:bc:a9:77:a5:
         aa:74:87:6d:1b:e1:6b:b7:70:6b:28:d0:ef:8f:01:57:ee:40:
         6e:2f:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----