Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File:                     Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier:          6iQQZJE40yBx5KwTRe7/fcuSu//epA4VEaRWPGcDego=
Subject key identifier:   6C:23:FA:41:B0:79:E1:9F:9D:27:CB:DC:B9:1F:56:94:D4:50:CE:82
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer:       /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial:       01962F74BCE9D83494CB1EE6D3557FCD68FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: 0Vp1x60Wso07evMUoMIITZC3tQV/hIkmAJudJvkGLG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:e9:d8:34:94:cb:1e:e6:d3:55:7f:cd:68:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=6c23fa41b079e19f9d27cbdcb91f5694d450ce82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:e2:97:71:d5:bb:c3:a2:b9:34:40:0f:a3:
                    de:4b:f6:9d:21:6e:7f:c1:80:a2:83:b2:6c:07:03:
                    3b:dc:cd:09:1e:d3:80:81:a7:b9:f7:00:6a:b3:3f:
                    3a:10:8b:a0:fb:03:c2:70:85:af:71:46:55:7b:9e:
                    1e:fe:9d:3e:bd:92:cf:1c:a0:94:2f:a2:4d:b9:c1:
                    01:e0:04:2c:cb:ab:3c:f9:db:3b:c0:52:21:bb:41:
                    c3:76:cc:e9:cf:28:85:9c:e5:1c:39:f1:6e:dc:5f:
                    8a:25:b5:24:63:3c:38:df:73:0c:80:f2:b1:8b:90:
                    9c:79:81:05:c8:08:0a:27:1e:76:be:9c:c0:26:c3:
                    ef:96:1d:92:c0:89:89:9c:00:6e:7a:be:87:51:b7:
                    d4:f2:8a:19:af:e2:12:5b:b3:ce:f0:f0:0c:3b:d3:
                    51:3d:1a:42:f2:e9:12:db:af:0a:a2:67:63:2b:1d:
                    09:ce:3a:4a:dd:26:c5:a9:77:52:49:d7:e3:f2:d0:
                    90:ca:89:6e:db:de:66:5a:84:82:a3:fd:99:5d:01:
                    d7:ef:d5:3e:76:76:e0:3a:83:60:9c:64:38:5b:57:
                    76:f9:2b:69:55:6a:1b:f8:f2:55:11:49:b7:6e:ce:
                    32:e1:5b:b4:4e:b3:77:08:6c:c6:cf:56:31:c3:02:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:23:FA:41:B0:79:E1:9F:9D:27:CB:DC:B9:1F:56:94:D4:50:CE:82
            X509v3 Authority Key Identifier:
                keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:c2:37:19:f0:51:37:a3:6d:71:67:0d:3d:15:2c:88:50:
         61:9b:a7:5c:ac:d2:ab:c9:53:ac:22:23:bf:2d:a3:d6:9a:0d:
         2b:9a:e1:66:8f:f5:db:e7:18:14:23:98:21:9c:9e:61:8d:7d:
         3b:c5:cd:5b:f9:3f:95:8a:b2:a4:95:d4:1b:9a:fa:38:c8:a5:
         81:cb:9c:9b:b3:74:b7:81:e2:d9:8d:a4:23:38:59:4f:69:84:
         e0:f3:7d:7c:9a:a2:64:e3:8a:b4:b2:e8:9d:5d:63:16:7a:4e:
         9e:ef:12:c4:b7:1c:43:4b:1f:96:8a:5f:a4:00:7e:19:01:35:
         19:0a:ce:84:3e:20:b0:43:60:a9:2f:87:60:0a:0e:cb:1a:60:
         ac:9b:14:90:46:1a:d0:c9:17:93:a7:c0:92:14:65:6f:a2:c7:
         dc:57:e5:48:4d:24:f5:4a:b2:c7:e7:62:b4:09:d2:5d:72:84:
         b2:55:de:8b:ce:76:4b:54:c9:d5:49:7a:60:a7:c6:db:cd:d6:
         d4:ed:74:91:b3:5a:41:07:70:c4:05:25:c7:fc:07:85:b2:00:
         f2:f0:17:4e:d3:29:89:31:25:3c:d3:d6:15:c1:5c:1b:4b:12:
         ee:b9:de:93:81:20:db:93:e6:31:1d:0e:ef:ce:fb:2a:1a:ee:
         19:dd:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----