Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File:                     kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier:          ETnVSY2iU8DRAnQP4hte3tx9jLl0nrnrFJEFVDgPeoY=
Subject key identifier:   36:FA:EC:EB:26:32:6D:21:45:63:BB:C0:F6:83:18:BE:0F:AF:73:E6
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer:       /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial:       01962E98E394C6CC4E1D02C085DF595C8319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number:          06AA
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: bWNh5nuc+d5O1TQimJXIsRy8rM+Qz977ZcoD/t+Aa8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e3:94:c6:cc:4e:1d:02:c0:85:df:59:5c:83:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=36faeceb26326d214563bbc0f68318be0faf73e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:ae:09:cd:5d:3e:a7:a4:18:66:5f:d9:c7:
                    4f:cd:ca:a1:46:cb:3a:cf:f1:0c:e6:01:33:b4:13:
                    e5:74:d7:b2:63:5d:7d:64:fa:dd:0f:25:ec:f9:29:
                    b3:ac:5c:e9:42:c2:a8:70:9b:06:32:66:59:40:42:
                    fb:da:87:10:01:2a:c8:83:4a:fe:d8:94:2b:43:3e:
                    96:9d:42:ce:04:e5:92:42:cb:bb:22:00:a7:af:60:
                    b0:78:a0:2c:ca:ae:3c:0e:62:ef:6a:f7:64:c1:3b:
                    07:6f:b2:40:f2:67:11:be:c1:f4:46:7f:e2:7c:7d:
                    13:5f:44:48:20:4d:67:b9:20:31:1e:14:3d:38:ea:
                    39:7d:46:71:ec:3e:ab:90:e6:49:48:99:3f:56:04:
                    df:2f:85:c0:68:43:58:29:b8:e8:e3:d3:9f:03:2c:
                    3d:4f:1d:7c:c0:51:85:e7:54:b2:4e:bb:d6:d9:4d:
                    77:8d:a7:32:49:50:d8:da:d4:2e:6b:64:d7:92:f2:
                    39:e6:dc:de:50:1e:3e:46:ff:6d:ec:c1:2e:64:2a:
                    a1:59:ff:cf:fe:9b:2b:91:33:2b:f2:d6:ce:82:69:
                    74:60:5a:ae:0d:0a:63:42:00:2e:55:31:5a:6b:86:
                    78:f7:ae:45:7a:0a:e1:6c:05:22:5a:aa:7e:1c:34:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FA:EC:EB:26:32:6D:21:45:63:BB:C0:F6:83:18:BE:0F:AF:73:E6
            X509v3 Authority Key Identifier:
                keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:c3:f6:c2:da:27:f2:c9:d8:b9:8e:c5:c5:91:d1:0d:d5:
         5c:55:0f:35:16:84:40:ab:42:2e:d7:ff:e3:4a:bc:98:09:40:
         01:a2:dc:2b:4a:41:73:13:c4:ae:a7:91:23:00:10:90:6b:af:
         38:6b:a5:c8:7a:4f:39:f8:76:ff:8d:66:0f:9b:cd:e5:ab:09:
         bc:7d:a2:f4:48:4e:a1:6c:02:50:92:c2:ca:ea:ef:26:45:13:
         dc:07:cb:0d:7d:22:da:38:8f:06:9e:c8:19:b7:46:4d:71:f2:
         ff:53:03:ae:6b:32:ed:94:c7:3b:ce:84:50:14:8d:32:82:2a:
         40:d0:c6:32:d2:46:06:e3:e5:bc:30:09:e4:2e:d7:9a:c1:79:
         f5:28:10:08:33:02:24:44:43:fe:f0:9e:fb:b5:57:9e:96:d4:
         88:25:2b:1d:7a:3d:56:c2:4a:0e:a7:3e:1a:d6:47:c2:5d:d6:
         9b:ed:5d:27:70:eb:77:a4:e0:62:00:f2:5c:4a:cf:2e:c0:d4:
         5c:14:19:51:b9:b5:7e:19:33:a0:c6:75:73:b6:93:45:de:47:
         b0:7c:3c:81:6f:46:00:ef:fa:35:66:83:a1:84:05:32:3f:40:
         6b:9b:33:8f:56:9a:7b:84:44:e9:f8:9f:e6:c8:24:f1:3a:4d:
         ac:32:69:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOOUxsxOHQLAhd9ZXIMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDRiNjI5ODhiZWZiZDkxODNmNmViZjZlYjJkMTk0Y2Iy
OGU2ZTMwHhcNMjUwNDEzMTAwMTMzWhcNMjUwNDE0MTAwMTMzWjAzMTEwLwYDVQQD
EygzNmZhZWNlYjI2MzI2ZDIxNDU2M2JiYzBmNjgzMThiZTBmYWY3M2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5euCc1dPqekGGZf2cdPzcqhRss6
z/EM5gEztBPldNeyY119ZPrdDyXs+SmzrFzpQsKocJsGMmZZQEL72ocQASrIg0r+
2JQrQz6WnULOBOWSQsu7IgCnr2CweKAsyq48DmLvavdkwTsHb7JA8mcRvsH0Rn/i
fH0TX0RIIE1nuSAxHhQ9OOo5fUZx7D6rkOZJSJk/VgTfL4XAaENYKbjo49OfAyw9
Tx18wFGF51SyTrvW2U13jacySVDY2tQua2TXkvI55tzeUB4+Rv9t7MEuZCqhWf/P
/psrkTMr8tbOgml0YFquDQpjQgAuVTFaa4Z4965FegrhbAUiWqp+HDTpJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb67OsmMm0hRWO7wPaDGL4Pr3PmMB8GA1UdIwQY
MBaAFJFEtimIvvvZGD9uv26y0ZTLKObjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMt
OTkwYmEwYzA2MzI2LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMtOTkwYmEwYzA2MzI2
LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZn3D9sLa
J/LJ2LmOxcWR0Q3VXFUPNRaEQKtCLtf/40q8mAlAAaLcK0pBcxPErqeRIwAQkGuv
OGulyHpPOfh2/41mD5vN5asJvH2i9EhOoWwCUJLCyurvJkUT3AfLDX0i2jiPBp7I
GbdGTXHy/1MDrmsy7ZTHO86EUBSNMoIqQNDGMtJGBuPlvDAJ5C7XmsF59SgQCDMC
JERD/vCe+7VXnpbUiCUrHXo9VsJKDqc+GtZHwl3Wm+1dJ3Drd6TgYgDyXErPLsDU
XBQZUbm1fhkzoMZ1c7aTRd5HsHw8gW9GAO/6NWaDoYQFMj9Aa5szj1aae4RE6fif
5sgk8TpNrDJpTg==
-----END CERTIFICATE-----