Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft
File:                     ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft (raw, json)
Hash identifier:          eivU4pMA0GK4JiJWuEIDuoEmtvjJQrjByJ+uAyACs60=
Subject key identifier:   A7:67:93:E5:D6:B7:47:31:D1:9D:45:BC:9F:BB:8A:72:62:08:B2:A4
Authority key identifier: 92:CD:C2:2C:A6:ED:84:2B:FF:DC:39:24:83:59:02:B0:8B:EB:54:DE
Certificate issuer:       /CN=92cdc22ca6ed842bffdc3924835902b08beb54de
Certificate serial:       0186EA6DC608C9679E775E7554FD74D0C091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ks3CLKbthCv_3Dkkg1kCsIvrVN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft
Manifest number:          0CD1
Signing time:             Thu 16 Mar 2023 12:38:27 +0000
Manifest this update:     Thu 16 Mar 2023 12:38:27 +0000
Manifest next update:     Fri 17 Mar 2023 12:38:27 +0000
Files and hashes:         1: ks3CLKbthCv_3Dkkg1kCsIvrVN4.crl (hash: LcAcaNfgywOYY738pO51FP64rZQ5CifukHhbH9JMdJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ea:6d:c6:08:c9:67:9e:77:5e:75:54:fd:74:d0:c0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92cdc22ca6ed842bffdc3924835902b08beb54de
        Validity
            Not Before: Mar 16 12:38:27 2023 GMT
            Not After : Mar 17 12:38:27 2023 GMT
        Subject: CN=a76793e5d6b74731d19d45bc9fbb8a726208b2a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:2d:4d:47:5c:1c:c9:b6:73:05:61:4a:8f:
                    ee:fe:a2:7b:22:ff:1d:c5:5b:b5:65:f0:63:a1:f2:
                    cf:d5:c5:7b:2e:72:3a:99:93:62:25:e4:02:97:b6:
                    d0:68:ff:36:6a:5c:a5:40:53:16:af:2b:e6:36:a1:
                    4d:2d:62:6e:0b:83:9a:1d:c1:4e:45:31:88:93:f0:
                    32:3b:dc:a6:c7:69:3a:01:4d:f4:61:03:ea:2e:9e:
                    02:30:46:a2:90:80:4f:e4:84:5a:25:da:bb:40:1f:
                    22:e6:2e:7f:73:41:99:b5:43:26:06:0f:71:e9:ef:
                    9f:1d:26:38:43:8c:5f:ce:8d:cb:f8:58:6e:00:9f:
                    a6:93:dc:45:81:63:7b:87:8b:59:e2:14:85:38:fd:
                    bb:5c:94:e1:09:70:68:18:2a:15:f9:fc:20:11:b7:
                    62:96:a0:ba:64:38:b0:62:21:3c:7d:c0:83:68:a3:
                    8f:a9:b3:06:01:26:6f:50:f3:a1:5f:5c:b1:a0:66:
                    bf:3c:2f:9d:e2:2b:85:27:eb:75:de:a4:f5:9e:61:
                    b8:c2:d8:48:ea:4a:c0:a6:96:ed:23:7a:d8:29:7b:
                    c9:97:04:b2:4b:14:11:51:e2:b4:8a:2b:27:6e:e9:
                    00:ad:52:95:c5:3b:8e:61:c8:04:2e:9f:ec:f0:1e:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:67:93:E5:D6:B7:47:31:D1:9D:45:BC:9F:BB:8A:72:62:08:B2:A4
            X509v3 Authority Key Identifier:
                keyid:92:CD:C2:2C:A6:ED:84:2B:FF:DC:39:24:83:59:02:B0:8B:EB:54:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks3CLKbthCv_3Dkkg1kCsIvrVN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fb2246-0449-4be2-8938-ba2f94908266/1/ks3CLKbthCv_3Dkkg1kCsIvrVN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1c:5a:a1:eb:10:72:7d:ab:f3:c2:f4:89:a4:a8:1b:6b:c1:
         5a:ee:e3:2e:cb:47:df:f5:6f:2b:e1:81:33:9d:b2:a0:a1:9a:
         50:27:52:a0:b9:e3:37:69:5a:c1:2a:fc:ac:08:d1:ba:45:cf:
         d7:ea:c2:35:71:55:fd:c5:e1:b9:57:3c:97:1b:ca:5b:ea:4c:
         be:6b:ef:52:89:8f:8e:70:38:1e:b1:4e:ce:67:d2:b6:d9:82:
         d6:0f:9d:27:cd:c3:bb:85:c6:3f:26:75:7d:17:af:d6:7c:9a:
         e6:be:c7:e8:85:de:64:70:1a:11:6d:93:c0:4c:e9:6a:3d:59:
         b8:fc:c5:8c:b8:eb:3e:1c:23:cb:35:3b:63:43:81:b3:18:74:
         5c:f8:c4:3c:8c:2e:83:41:57:c8:d4:0d:b8:84:ba:cd:72:4d:
         6b:33:9a:b8:69:46:c5:a8:18:11:42:3e:d4:de:64:2f:d9:11:
         8e:45:a1:86:f7:a0:5a:16:e6:7c:db:71:b9:0e:bf:2c:b8:17:
         4f:77:15:2b:39:5b:ae:a3:df:72:5f:a7:89:3e:29:2c:61:6a:
         82:8d:bf:82:44:67:01:b4:3b:d2:ce:a9:26:dc:17:4b:e7:6d:
         19:99:a2:ab:9b:a7:4c:38:32:b7:8e:b9:69:88:8c:fd:e9:57:
         7c:e0:76:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----