Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
File:                     Kc_ykaA7rauF42R6ojUPE8XyZmE.mft (raw, json)
Hash identifier:          koUD7TO5ycYJ225l5tvcRLI/zobgACa50j7avoUIMbM=
Subject key identifier:   AC:CC:3C:A0:27:57:36:46:B3:41:D1:1C:CE:45:D9:DA:45:42:84:02
Authority key identifier: 29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
Certificate issuer:       /CN=29cff291a03badab85e3647aa2350f13c5f26661
Certificate serial:       018F28A9B83176A27149857B5D562BA5AF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft
Manifest number:          08B5
Signing time:             Mon 29 Apr 2024 07:02:42 +0000
Manifest this update:     Mon 29 Apr 2024 07:02:42 +0000
Manifest next update:     Tue 30 Apr 2024 07:02:42 +0000
Files and hashes:         1: Kc_ykaA7rauF42R6ojUPE8XyZmE.crl (hash: WJjlJJLHbXL4CVrCPQsAGXaBe18GeoYXoJDUPV+COBs=)
                          2: hAbDwQMe7AG_oAVNR_K1jf0SonQ.roa (hash: V6PTvmXBIziZIqlaCcdK8R9S3RQBNBNJYz0Bso0O5Zs=)
                          3: kdTLY1XbqNPRf_QNPkX6CvmmI6o.roa (hash: qCqQOQZXzu8ejM+/5QA8UQFdplXH2ShWmWJnT/PtPyk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:28:a9:b8:31:76:a2:71:49:85:7b:5d:56:2b:a5:af:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29cff291a03badab85e3647aa2350f13c5f26661
        Validity
            Not Before: Apr 29 07:02:42 2024 GMT
            Not After : Apr 30 07:02:42 2024 GMT
        Subject: CN=accc3ca027573646b341d11cce45d9da45428402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:85:bc:59:a3:49:a6:e9:07:d2:a6:9a:f8:
                    bf:e7:54:54:ac:38:28:16:21:e9:2a:83:ed:d5:ed:
                    63:2d:79:30:ae:ff:2e:8d:f2:71:17:51:51:20:3a:
                    39:d0:78:78:7b:7b:02:7e:2b:de:9a:ea:7d:85:87:
                    00:91:1a:e5:e4:02:49:d2:a3:ce:cd:9d:ac:99:0c:
                    9c:2d:93:21:6d:1d:4e:f5:43:dc:9c:8c:72:c7:b5:
                    4e:58:a2:79:94:05:d5:2a:48:39:8c:da:78:3d:44:
                    5a:b4:6b:92:58:a8:9e:a7:4c:66:8d:53:e8:04:90:
                    1b:42:4b:35:9e:e7:07:8b:00:c6:42:ca:cc:c3:fc:
                    15:98:9c:9a:14:b4:85:4a:ed:55:f8:b8:be:13:de:
                    4c:69:e1:cd:55:ce:03:51:aa:fb:c8:79:68:af:18:
                    53:5e:ff:1f:ed:df:de:e9:86:98:79:f9:e2:27:81:
                    a4:a5:b5:1f:9e:a4:c5:67:83:3a:e6:0d:67:24:6f:
                    74:89:59:58:40:ab:ec:d6:57:8f:7a:14:b4:58:f9:
                    9d:97:b4:8a:30:b6:69:b0:46:c2:9f:4b:f9:20:de:
                    a6:68:ba:e5:52:59:20:4c:47:53:a9:d1:4c:bd:59:
                    d9:a0:93:b6:ca:57:86:48:23:51:0b:52:ac:d7:1d:
                    57:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CC:3C:A0:27:57:36:46:B3:41:D1:1C:CE:45:D9:DA:45:42:84:02
            X509v3 Authority Key Identifier:
                keyid:29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:a1:f4:ee:5e:5c:e4:4f:07:86:8f:81:6e:57:e8:d2:bd:
         c7:68:8d:31:bb:49:d5:a6:8a:73:d8:59:74:8f:cc:72:5c:44:
         17:11:72:c6:fc:b5:82:55:32:4e:9b:88:9d:a1:e2:6f:4a:d5:
         ed:42:40:f1:91:b5:27:be:ff:38:6e:d9:99:fb:43:e4:8d:50:
         1a:f5:99:42:da:29:9a:04:ea:e6:ea:58:fe:7a:e3:95:3c:f8:
         9e:dd:ae:81:c5:b3:db:9b:9c:e7:18:51:97:3c:17:75:21:c9:
         99:fe:a5:87:53:a9:f3:5d:6b:92:0d:96:19:0a:21:8d:7e:eb:
         a9:14:27:bd:b5:fa:4b:6b:7d:39:05:81:13:43:fd:04:10:9a:
         a0:57:74:09:28:ef:a0:10:fb:2c:2d:0d:85:cb:28:4b:39:00:
         59:be:57:dc:41:b1:87:dd:6e:a5:b7:0b:98:1e:9b:11:28:ed:
         9c:82:a5:8a:75:54:44:42:d2:91:60:a7:5f:75:15:4a:95:7b:
         b3:92:b3:82:da:08:c0:e1:08:5c:c5:b2:ff:a9:27:8c:a7:cb:
         26:23:96:54:45:35:ed:89:f1:66:bc:28:a9:fa:75:e8:2d:13:
         ff:a6:67:c2:5a:49:a8:f0:07:14:2d:59:8b:cd:7e:94:cb:28:
         64:a1:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----