Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aa8f-53e0-4012-9388-79ece0238785/1/_qnougu78yNl8EvhqT8aqPVSOBk.mft
File:                     _qnougu78yNl8EvhqT8aqPVSOBk.mft (raw, json)
Hash identifier:          pU7MUOrtPBUVc23ItMy7S+RjAQLF/aPR1Z55cszPYi8=
Subject key identifier:   1B:D4:A0:1C:04:F3:10:87:8F:78:AB:96:33:89:F5:79:80:01:C0:FF
Authority key identifier: FE:A9:E8:BA:0B:BB:F3:23:65:F0:4B:E1:A9:3F:1A:A8:F5:52:38:19
Certificate issuer:       /CN=fea9e8ba0bbbf32365f04be1a93f1aa8f5523819
Certificate serial:       018FBC494F9AAACBCD70DEE18901B8A75FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qnougu78yNl8EvhqT8aqPVSOBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/94aa8f-53e0-4012-9388-79ece0238785/1/_qnougu78yNl8EvhqT8aqPVSOBk.mft
Manifest number:          0544
Signing time:             Mon 27 May 2024 23:01:12 +0000
Manifest this update:     Mon 27 May 2024 23:01:12 +0000
Manifest next update:     Tue 28 May 2024 23:01:12 +0000
Files and hashes:         1: _qnougu78yNl8EvhqT8aqPVSOBk.crl (hash: 1MD7YRtNohFNa7pHHqhfmU0bBtr/lmPhsu+IBAibDTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bc:49:4f:9a:aa:cb:cd:70:de:e1:89:01:b8:a7:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea9e8ba0bbbf32365f04be1a93f1aa8f5523819
        Validity
            Not Before: May 27 23:01:12 2024 GMT
            Not After : May 28 23:01:12 2024 GMT
        Subject: CN=1bd4a01c04f310878f78ab963389f5798001c0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c5:25:8b:15:db:f9:25:60:ac:55:85:fd:49:
                    9d:64:ac:4e:c9:e2:77:08:1a:e3:62:c8:01:4e:c0:
                    a8:fa:b0:8f:e7:5d:52:b9:4e:e7:78:71:1a:47:7b:
                    14:a1:81:42:bc:04:ef:a7:b9:f7:e5:c2:d8:13:0f:
                    b7:07:d4:41:5a:c9:7d:3f:59:3a:62:06:90:a8:e4:
                    2f:c0:02:78:1a:a5:a4:31:70:36:81:85:7a:8d:55:
                    27:a5:09:28:72:83:bf:7a:45:77:a0:2d:5e:6a:4f:
                    de:1d:a4:4d:53:f6:37:e3:8a:46:35:71:4d:86:97:
                    26:b4:3f:d5:fa:41:e4:27:de:ce:f6:8e:62:69:d9:
                    69:f9:ff:cb:92:44:a3:af:05:05:98:ec:f3:11:90:
                    36:38:5e:ef:68:a0:73:c8:07:1a:a3:9c:d8:8f:2c:
                    94:69:c3:8e:19:b7:de:b0:c2:87:4f:d8:60:3d:ca:
                    93:f2:79:f3:e4:bf:41:f9:2a:e2:d3:4a:dd:5c:cc:
                    ea:7d:87:ad:3b:08:53:ef:9a:55:74:ff:5d:b7:fc:
                    af:68:78:3a:d1:7f:78:75:79:cf:0c:cd:7a:4f:49:
                    6d:a2:aa:59:89:50:bb:7b:30:81:4c:fa:a7:08:6a:
                    a2:95:a5:4d:bc:0d:8f:17:08:9b:4c:cf:ab:83:36:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D4:A0:1C:04:F3:10:87:8F:78:AB:96:33:89:F5:79:80:01:C0:FF
            X509v3 Authority Key Identifier:
                keyid:FE:A9:E8:BA:0B:BB:F3:23:65:F0:4B:E1:A9:3F:1A:A8:F5:52:38:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qnougu78yNl8EvhqT8aqPVSOBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aa8f-53e0-4012-9388-79ece0238785/1/_qnougu78yNl8EvhqT8aqPVSOBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aa8f-53e0-4012-9388-79ece0238785/1/_qnougu78yNl8EvhqT8aqPVSOBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ca:f8:01:be:6a:6b:84:53:8d:75:8d:8f:7d:25:05:af:8d:
         44:c5:28:f4:61:36:56:ea:0a:a6:72:77:d3:72:67:03:f0:86:
         21:8a:88:39:9a:9f:a6:db:22:2f:54:17:74:14:36:00:b8:3b:
         47:b7:f5:37:10:64:90:30:d6:df:b3:58:5f:ed:0b:38:c0:23:
         f5:41:d0:4d:98:d4:dd:9b:3f:40:98:d4:47:63:b7:b8:09:98:
         fb:59:78:b1:6a:0f:10:c6:1d:8b:6f:77:dd:f4:fc:39:3a:70:
         6a:fb:36:ee:da:cc:0f:15:60:f4:c1:b1:7c:46:ed:21:f6:7c:
         18:09:85:b4:d8:42:49:51:24:33:a8:4d:43:d4:0d:44:7b:8c:
         91:46:4b:d6:bb:0a:85:65:3c:d4:7c:ef:72:a4:3b:9c:84:4f:
         d3:80:8d:6e:b6:60:9a:05:21:24:c6:cf:94:eb:c4:29:92:01:
         ae:3a:23:e1:60:7d:34:97:33:1d:c0:1a:fc:49:50:eb:d5:02:
         0b:80:6e:67:a8:f9:88:2e:ef:03:b8:71:fd:9e:c9:40:0d:96:
         7c:49:ed:7a:e5:7e:be:7d:ed:f2:05:7f:34:c4:fd:fc:20:6f:
         2d:fa:68:39:62:d3:03:5a:cb:7c:fd:ba:61:5e:6f:6d:6d:b9:
         5c:b5:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----