Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72cf8b-9ae8-401b-9e75-b3f2f24b0108/1/KKA2-mP3WcWcWqIcbo8DC1imMO4.mft
File:                     KKA2-mP3WcWcWqIcbo8DC1imMO4.mft (raw, json)
Hash identifier:          ReFg3XgZQ9krdgr1tkzow/jI3N7IJM2Jc/9Fjh8pSmQ=
Subject key identifier:   67:6D:BD:F5:AA:29:17:33:E7:D8:2D:7C:89:F5:8A:B1:96:EE:3F:9B
Authority key identifier: 28:A0:36:FA:63:F7:59:C5:9C:5A:A2:1C:6E:8F:03:0B:58:A6:30:EE
Certificate issuer:       /CN=28a036fa63f759c59c5aa21c6e8f030b58a630ee
Certificate serial:       0182AECAD0BD22B6AECB40349D5EC05E0A6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KKA2-mP3WcWcWqIcbo8DC1imMO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/72cf8b-9ae8-401b-9e75-b3f2f24b0108/1/KKA2-mP3WcWcWqIcbo8DC1imMO4.mft
Manifest number:          0A67
Signing time:             Thu 18 Aug 2022 02:31:43 +0000
Manifest this update:     Thu 18 Aug 2022 02:31:43 +0000
Manifest next update:     Fri 19 Aug 2022 02:31:43 +0000
Files and hashes:         1: KKA2-mP3WcWcWqIcbo8DC1imMO4.crl (hash: 35VQKGqctw/0uphR0LNaHNNCl7NOPuVUrmkpC7Wq4w0=)
                          2: rsF98CiKjnOM_OkPjd9N1Bes7ss.roa (hash: L8HHEqOWzyC4ZTOxwX+YlzefzaFvOuX5Nzn2clqYatw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ae:ca:d0:bd:22:b6:ae:cb:40:34:9d:5e:c0:5e:0a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28a036fa63f759c59c5aa21c6e8f030b58a630ee
        Validity
            Not Before: Aug 18 02:31:43 2022 GMT
            Not After : Aug 19 02:31:43 2022 GMT
        Subject: CN=676dbdf5aa291733e7d82d7c89f58ab196ee3f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:82:af:60:cf:6f:a9:f6:c5:70:bb:2e:4a:
                    ca:50:b8:e4:63:b0:6f:85:8e:c4:da:1f:22:2f:e1:
                    ab:7e:ba:c8:e3:50:d4:f3:2a:4f:3f:8d:85:85:dc:
                    2a:bd:50:33:1b:e4:bd:ba:61:63:b8:c9:00:2e:e2:
                    d3:6d:d5:33:ff:cf:a4:c3:dc:6e:b4:54:8c:fa:ff:
                    7e:34:92:de:78:b1:dc:36:0a:6c:c4:05:a6:e4:80:
                    a0:de:d1:b1:7b:b1:e2:99:cd:03:07:ca:9d:ad:40:
                    d4:ca:c4:5d:c0:63:82:6b:77:00:93:7c:37:6d:ca:
                    3b:6b:9f:76:bf:e1:0f:17:11:88:9a:6b:8f:36:6b:
                    13:7b:27:66:59:1e:dc:90:ff:e8:7a:c6:ca:f2:b6:
                    a2:5a:c7:eb:04:ce:5e:1a:f3:81:d7:b9:70:33:95:
                    0a:90:b3:c6:7a:10:0a:46:15:36:2d:35:5d:c0:6c:
                    b2:8e:e2:c0:b1:7f:d5:5e:a9:3e:35:52:6a:99:6d:
                    d5:02:44:61:29:81:85:62:29:2d:a4:a5:d0:11:27:
                    06:51:fa:7e:bd:80:95:89:e5:c9:e9:25:e7:f2:3c:
                    1a:f6:d4:61:34:e3:9d:74:4c:18:88:e2:a7:f8:5f:
                    57:8a:fb:fa:f4:f5:f3:90:97:0e:9e:b9:e8:75:f8:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6D:BD:F5:AA:29:17:33:E7:D8:2D:7C:89:F5:8A:B1:96:EE:3F:9B
            X509v3 Authority Key Identifier:
                keyid:28:A0:36:FA:63:F7:59:C5:9C:5A:A2:1C:6E:8F:03:0B:58:A6:30:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKA2-mP3WcWcWqIcbo8DC1imMO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72cf8b-9ae8-401b-9e75-b3f2f24b0108/1/KKA2-mP3WcWcWqIcbo8DC1imMO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72cf8b-9ae8-401b-9e75-b3f2f24b0108/1/KKA2-mP3WcWcWqIcbo8DC1imMO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:80:3b:b1:c5:4d:26:1b:d0:30:8f:29:28:2e:d6:ed:f3:
         5e:bd:cc:2a:ff:94:ed:51:50:60:d1:f7:38:60:eb:a0:a6:17:
         1a:06:f1:69:62:51:8b:ee:ac:d2:a3:1d:93:2f:d3:e1:40:49:
         d6:96:44:3c:47:93:88:ca:c1:f3:aa:87:ed:56:64:d2:1d:05:
         e3:24:83:46:73:b0:0f:7a:85:7b:e9:08:59:07:6d:9c:3d:83:
         cb:b5:25:99:94:38:b1:51:19:a7:11:37:e9:29:dc:0b:f7:b9:
         1b:34:42:f6:6e:68:58:5a:1b:1e:e8:38:67:7b:ac:14:d9:99:
         14:da:f9:ea:ce:78:50:84:77:8a:67:d6:3b:d0:7a:fd:d0:51:
         d1:7e:26:a3:b2:43:43:44:91:8d:53:f0:a2:07:e1:3c:65:d6:
         f2:55:01:3a:d3:83:86:0a:e0:12:09:05:b5:f7:bc:93:0c:52:
         65:2b:3c:e1:f9:fb:08:46:c7:05:1a:43:09:1f:5a:cb:f0:45:
         9d:da:a6:72:48:49:dd:f5:00:8b:cb:5d:b6:55:07:4c:fd:6a:
         b5:3a:a5:4f:c3:d0:4b:b1:b8:b7:6a:26:02:e8:58:6a:b4:60:
         63:06:ba:df:33:af:84:2c:63:d7:80:a2:89:aa:e9:2d:45:06:
         44:09:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org