Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/l0rUi7CdduXsBlkTZYFVnOBiTLM.mft
File:                     l0rUi7CdduXsBlkTZYFVnOBiTLM.mft (raw, json)
Hash identifier:          vMO275yXMdJcZFaWMXaWHV0w6J/1rZ4X+nRgdFRqPdo=
Subject key identifier:   5A:1A:60:DF:2C:0C:3E:B2:86:62:AC:D4:A8:AB:5A:F9:6E:4C:F9:0D
Authority key identifier: 97:4A:D4:8B:B0:9D:76:E5:EC:06:59:13:65:81:55:9C:E0:62:4C:B3
Certificate issuer:       /CN=974ad48bb09d76e5ec0659136581559ce0624cb3
Certificate serial:       018F75E7C8F7AF728E77E6A96B5E756853F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0rUi7CdduXsBlkTZYFVnOBiTLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/l0rUi7CdduXsBlkTZYFVnOBiTLM.mft
Manifest number:          0113
Signing time:             Tue 14 May 2024 07:01:15 +0000
Manifest this update:     Tue 14 May 2024 07:01:15 +0000
Manifest next update:     Wed 15 May 2024 07:01:15 +0000
Files and hashes:         1: l0rUi7CdduXsBlkTZYFVnOBiTLM.crl (hash: Y1Pi3sluFz3IW1fLzNOzqMcUkNHuLpOwTMEc25jF11A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:75:e7:c8:f7:af:72:8e:77:e6:a9:6b:5e:75:68:53:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974ad48bb09d76e5ec0659136581559ce0624cb3
        Validity
            Not Before: May 14 07:01:15 2024 GMT
            Not After : May 15 07:01:15 2024 GMT
        Subject: CN=5a1a60df2c0c3eb28662acd4a8ab5af96e4cf90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9b:35:a6:51:16:67:87:16:da:ad:f3:f2:e1:
                    41:22:85:67:a8:0a:16:4b:d0:82:66:e6:45:2f:d0:
                    48:ce:ca:c6:c1:4d:38:89:97:48:bf:15:b6:6e:11:
                    71:a0:c8:77:74:5f:59:60:dd:55:e7:09:32:6c:c3:
                    52:a6:a6:94:b2:fb:81:d1:12:b7:03:58:34:e4:32:
                    1b:7f:f4:bc:5f:f7:9e:7a:38:4b:3c:e0:05:12:ef:
                    43:e5:af:09:2c:56:56:93:9e:7b:c4:11:2d:4a:cf:
                    ac:54:00:66:82:86:5c:e7:1d:ae:73:46:46:88:f7:
                    77:1e:8c:ba:8c:b1:74:d8:bf:ea:8e:11:f8:62:73:
                    e6:63:d3:79:66:b7:66:32:52:1b:fb:4b:61:82:c2:
                    18:8f:b9:ee:0d:26:a3:eb:e6:14:2b:66:0e:36:4f:
                    e6:5a:a2:3b:a7:d4:02:c4:65:5f:b3:07:79:82:97:
                    e0:6b:65:7c:46:09:5e:84:16:1c:b0:b3:1e:87:f3:
                    0c:64:c5:f3:20:b7:57:33:2c:b2:fb:7e:e5:90:74:
                    99:5e:b5:10:1b:0a:ed:d4:1a:34:28:00:8b:a3:2f:
                    bd:65:f4:d7:00:1d:a6:56:f2:a9:44:bf:60:d6:78:
                    9e:8c:b2:c8:3e:ec:bc:b4:91:d9:4a:8f:4d:d8:b7:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1A:60:DF:2C:0C:3E:B2:86:62:AC:D4:A8:AB:5A:F9:6E:4C:F9:0D
            X509v3 Authority Key Identifier:
                keyid:97:4A:D4:8B:B0:9D:76:E5:EC:06:59:13:65:81:55:9C:E0:62:4C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0rUi7CdduXsBlkTZYFVnOBiTLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/l0rUi7CdduXsBlkTZYFVnOBiTLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fd041-e0c8-445f-a825-a1a63b0c01d1/1/l0rUi7CdduXsBlkTZYFVnOBiTLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7c:85:8e:a9:51:fd:70:9d:c8:17:3a:5a:0d:80:02:67:a2:
         22:8d:1b:23:8c:3f:a8:f0:20:cd:c5:5d:63:10:4e:bd:5d:e9:
         96:ec:f4:8b:a6:9d:75:5d:f5:c5:50:cc:ba:e6:4e:3e:f8:c7:
         1a:1b:28:34:5d:c3:73:d6:66:7b:76:81:23:b0:51:8a:bb:75:
         bb:9a:3f:16:7d:27:5f:6e:e9:77:57:91:2b:7f:7c:95:89:91:
         a3:c9:c1:41:2a:c1:0c:4f:06:b9:39:b4:24:9f:a1:e0:8e:60:
         d8:e0:76:03:b4:75:77:f0:ca:db:9b:2b:12:74:cc:cf:d5:6f:
         11:02:cb:ab:13:26:35:e7:79:b7:6b:5b:34:ba:4b:82:42:f3:
         54:86:c4:ae:d3:ed:ad:7f:57:96:b5:f4:be:6e:4c:ba:13:da:
         a8:41:56:4d:c1:ac:3b:85:8d:6e:e7:aa:ea:9f:f6:98:8f:ea:
         f5:5a:94:a8:31:a4:63:13:d7:9a:92:b8:62:05:06:4c:c0:2a:
         e6:f3:45:ed:86:1b:6d:b5:a2:ec:73:e8:e7:fb:c2:a2:13:d1:
         90:55:20:57:21:14:0d:a1:0c:01:79:b9:5c:2a:26:65:2e:f8:
         8b:c1:b8:5f:b3:8a:49:b8:54:a0:bf:23:a0:ca:30:18:ee:87:
         7c:7f:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----