Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File:                     kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier:          0CAi8bws9GEiGXb43g6qUkvyPJeLTGHF7Jo2aj7Ik/A=
Subject key identifier:   2E:A0:D4:08:2D:E5:26:FF:C7:9F:B6:D4:CC:A8:90:51:4A:36:CD:1E
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer:       /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial:       01962F3D94198840311E2B324FAFD85A9232
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number:          03AF
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: 5DahVri7JOTKL3Zg3yqlTznPyt+izTkW2TsF75cA7Uw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:19:88:40:31:1e:2b:32:4f:af:d8:5a:92:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=2ea0d4082de526ffc79fb6d4cca890514a36cd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:ad:2d:07:1f:88:83:8b:17:f5:a9:3d:14:
                    ed:7d:41:6a:4a:63:16:11:06:65:a6:fb:7d:41:75:
                    e4:28:c6:d0:71:f4:60:d2:62:0d:94:64:17:a9:0f:
                    35:7b:0c:d6:c7:ac:89:5d:e5:c6:3b:b5:b9:f0:4a:
                    9c:0f:4d:bf:7b:af:0d:0d:4b:6c:ed:ab:69:de:d3:
                    d0:f4:3e:58:ac:43:78:84:43:7e:3e:da:45:88:95:
                    c8:54:ac:7e:5a:a6:fe:0b:db:97:cf:b8:10:65:3a:
                    90:32:e2:75:64:0e:c1:ce:95:0b:2c:5b:c8:64:9c:
                    23:aa:5f:ce:d1:e6:2d:2f:34:6e:60:1e:ca:3a:0e:
                    6d:47:2b:90:fd:c3:13:4e:d4:56:1f:af:5f:8e:2a:
                    76:70:25:b6:78:c9:8c:73:2c:56:af:4c:fc:dc:e4:
                    89:a0:50:3d:a6:5d:dc:da:b6:6f:65:f5:0c:c2:48:
                    0a:8c:68:18:7f:cd:56:d5:90:54:d0:e0:5a:df:8e:
                    1c:25:b2:d5:4f:50:4d:6f:60:d6:a6:df:ff:e7:9a:
                    09:4a:06:8c:48:b0:0e:e2:bf:9a:43:42:5d:00:aa:
                    90:c6:57:5b:a5:3e:ab:ad:27:3c:b4:7f:25:43:33:
                    98:23:3c:ba:19:18:43:a7:2f:13:fd:43:d6:67:11:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A0:D4:08:2D:E5:26:FF:C7:9F:B6:D4:CC:A8:90:51:4A:36:CD:1E
            X509v3 Authority Key Identifier:
                keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:31:8c:2d:a7:9d:5b:8f:e3:89:c7:61:e2:53:d3:59:94:
         25:52:cc:70:5c:02:c1:c1:be:f8:c5:af:3b:88:47:49:4a:9e:
         29:79:81:74:1c:47:07:55:61:ed:18:c1:78:68:22:5b:16:e7:
         84:b5:45:03:ca:25:1f:c1:dd:04:27:55:c9:bf:d1:b5:9e:2a:
         f6:f3:87:04:f8:71:b3:57:3b:7d:59:02:96:d5:cc:6b:3d:7a:
         66:39:ae:b7:7a:2c:90:5b:3b:0b:5b:99:8b:c4:b3:47:36:bf:
         1c:33:25:50:e5:a8:fb:f4:17:1f:be:f1:59:c7:43:71:99:3a:
         c4:33:18:d5:93:87:22:d3:11:22:f0:40:1e:2c:be:7f:a1:dd:
         e0:c8:67:d3:29:c0:46:19:94:98:6b:4b:7f:80:7e:2a:b2:cc:
         aa:2e:45:8a:e8:24:4d:73:c6:04:20:9d:60:ac:e9:cb:1d:e0:
         f9:43:c4:6a:c7:d3:f7:e7:b8:6a:38:d8:ed:ad:4a:3a:ce:40:
         79:55:29:2a:cd:a8:8e:c5:8d:df:5f:60:05:fa:ef:52:1b:ad:
         ee:7b:b1:a6:44:5b:d4:5a:b8:75:97:f5:60:b5:d8:79:32:8d:
         c2:d2:c5:d0:4a:d7:9a:6a:1d:6e:7b:60:e0:74:e4:9f:31:84:
         0c:be:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----