Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
File:                     CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json)
Hash identifier:          wszI3Z7SaLePK3PPEQgkQTLNYm8PFEt3vKyduPwLOEU=
Subject key identifier:   23:A4:F1:58:6C:E7:DE:3F:F2:58:63:15:77:F9:A0:4B:E5:5F:D7:BA
Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F
Certificate issuer:       /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
Certificate serial:       01962E9941B254B80E8C7BF896CE5C81CCA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft
Manifest number:          02F9
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: uN4t14cBvvTd3Fuu5sPBm3OHI+amTz3t17G9Lk+6Xqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:41:b2:54:b8:0e:8c:7b:f8:96:ce:5c:81:cc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=23a4f1586ce7de3ff258631577f9a04be55fd7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:fa:ae:cf:91:84:75:30:77:2e:cf:2e:03:
                    e7:10:e1:18:cc:23:f3:0e:af:8d:0a:2d:49:99:8f:
                    1e:df:17:0c:54:67:c1:30:18:af:b9:fe:2e:a9:19:
                    40:12:95:ed:55:20:04:fa:fb:90:45:36:87:fc:b1:
                    6f:00:45:5d:1b:a6:b4:c4:bc:8a:d7:f1:5a:8e:da:
                    1a:fb:40:95:11:37:d7:e0:d9:b5:42:71:e4:3e:f1:
                    aa:49:70:2e:50:52:45:16:b6:95:09:cd:d9:5d:04:
                    dd:74:83:49:5c:81:7e:fd:a1:95:25:4c:00:7f:97:
                    30:27:03:45:1f:74:e8:af:f3:08:35:a9:44:a3:a2:
                    cc:3a:6c:eb:e0:89:80:4d:66:5d:3d:41:2f:31:91:
                    e4:58:59:18:d2:8b:b8:5d:b7:30:bf:b7:e5:30:bb:
                    67:f4:ac:e0:60:49:ee:7f:44:77:e7:5a:39:35:cc:
                    41:ae:32:14:8d:51:be:1f:82:ae:6e:5b:79:5e:11:
                    06:9c:dd:5b:d6:2a:57:85:7c:5a:67:f2:a5:3d:60:
                    59:19:c1:c1:f9:d0:c6:09:3f:83:3a:6a:ef:12:7e:
                    aa:1e:66:f7:e6:6b:2f:b1:0f:5c:e8:70:c8:b6:3c:
                    34:3a:ae:0e:da:f1:ef:68:40:18:2a:4d:f9:2e:b6:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A4:F1:58:6C:E7:DE:3F:F2:58:63:15:77:F9:A0:4B:E5:5F:D7:BA
            X509v3 Authority Key Identifier:
                keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f3:db:17:7c:6e:7c:75:12:e1:55:ba:d6:85:2b:9f:8e:1e:
         41:8e:01:21:1d:cc:59:78:70:d4:ac:b1:c4:57:3f:b2:df:67:
         6a:2f:f9:ea:7c:bd:88:df:86:93:4f:9e:f0:9c:d1:08:08:1b:
         46:66:ad:0f:a9:00:8e:d1:61:f4:a3:d6:6a:6e:6f:69:2b:cf:
         a3:1a:10:6c:3d:ea:f9:9e:1e:43:88:1a:61:98:3a:37:e7:f0:
         86:93:c7:49:67:ea:33:ad:77:d9:e2:d6:58:d1:d9:ba:8c:d9:
         b3:c0:49:81:7f:92:7d:f3:44:24:c3:c1:e6:58:17:73:95:70:
         ff:3f:03:7d:4c:d4:8a:62:26:58:be:f3:20:7b:c4:82:dd:4c:
         7e:fb:4b:f8:4c:3e:36:4e:92:c4:f8:85:65:dc:f4:2d:e3:05:
         08:e4:c5:ce:62:91:8e:87:b7:3d:7d:ee:24:ed:54:06:74:c3:
         3f:49:8e:a5:9f:36:26:7a:90:aa:bc:98:3b:4f:34:de:e2:4b:
         b6:8b:48:8d:3a:1d:0c:50:02:75:0a:d9:74:d3:93:4e:32:71:
         cc:e3:90:71:05:c4:ac:ba:b7:92:71:be:aa:5b:96:58:35:19:
         73:13:83:73:14:fd:88:5c:9d:28:f8:60:84:20:94:7a:77:1d:
         2e:2c:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----