Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/m1GCqpZq9LmzzDzj7O1T_OsOkV8.mft
File:                     m1GCqpZq9LmzzDzj7O1T_OsOkV8.mft (raw, json)
Hash identifier:          5smzLzklDJZ9/d+v38yTiGkFX2OlEehvrDH2VUbk6q8=
Subject key identifier:   66:98:F7:78:B7:58:40:28:81:25:5A:29:02:1F:9E:24:3A:EA:24:42
Authority key identifier: 9B:51:82:AA:96:6A:F4:B9:B3:CC:3C:E3:EC:ED:53:FC:EB:0E:91:5F
Certificate issuer:       /CN=9b5182aa966af4b9b3cc3ce3eced53fceb0e915f
Certificate serial:       019000F3AE624A434FCE1AAE02F4DA778B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1GCqpZq9LmzzDzj7O1T_OsOkV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/m1GCqpZq9LmzzDzj7O1T_OsOkV8.mft
Manifest number:          0EF3
Signing time:             Mon 10 Jun 2024 07:01:28 +0000
Manifest this update:     Mon 10 Jun 2024 07:01:28 +0000
Manifest next update:     Tue 11 Jun 2024 07:01:28 +0000
Files and hashes:         1: m1GCqpZq9LmzzDzj7O1T_OsOkV8.crl (hash: +ZZs3GiCk4m5MFfMe9kRt4smlEiBwvADm30Jj5KRv1U=)
                          2: uH2O-bh8vRpzChjDXX0U5wk8FCE.roa (hash: 9xE2MB9lD5bNV5oUz9yfVqDaKpfqVsrchQN0y1LPkIg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:00:f3:ae:62:4a:43:4f:ce:1a:ae:02:f4:da:77:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5182aa966af4b9b3cc3ce3eced53fceb0e915f
        Validity
            Not Before: Jun 10 07:01:28 2024 GMT
            Not After : Jun 11 07:01:28 2024 GMT
        Subject: CN=6698f778b758402881255a29021f9e243aea2442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:c0:b3:f5:b4:2e:2f:a1:a2:01:d3:cb:6b:
                    5c:2e:28:21:54:06:74:91:e9:58:f8:2d:21:8d:f4:
                    c4:10:0b:56:da:e7:9d:f3:9f:d1:c8:35:57:43:2e:
                    f6:22:65:b9:88:ff:e2:46:63:ec:9c:75:c7:ff:28:
                    da:9f:fa:b0:39:1d:a7:60:03:14:6c:96:4f:a0:1d:
                    0e:1c:a2:4e:d5:18:dc:28:be:e0:29:db:17:ce:93:
                    a9:24:9f:f6:61:2a:a7:fc:a5:db:8d:58:b1:56:ee:
                    93:52:6f:31:69:d6:25:54:29:9a:c7:a7:72:29:71:
                    ba:9c:6e:1e:d8:ea:73:76:d1:90:70:23:bb:4a:a4:
                    a3:a5:07:d9:8c:3a:1a:65:dc:74:43:b7:fa:ab:53:
                    42:b6:2e:37:76:55:c7:0c:03:7c:ad:eb:ad:8d:db:
                    0b:03:40:90:6f:49:00:82:d1:a6:3a:21:7a:22:9b:
                    af:e2:89:f1:31:87:4d:b1:67:57:6a:be:b6:a1:30:
                    e3:f9:fb:34:61:fd:13:97:0b:61:fc:54:7c:51:19:
                    16:e8:6b:d3:ed:2a:6d:69:a1:ff:ba:74:cb:45:cf:
                    91:2e:76:4e:44:e9:2e:b0:03:4d:2e:17:99:e0:01:
                    44:ea:46:d4:c0:a2:e0:86:98:97:5d:93:a2:82:45:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:F7:78:B7:58:40:28:81:25:5A:29:02:1F:9E:24:3A:EA:24:42
            X509v3 Authority Key Identifier:
                keyid:9B:51:82:AA:96:6A:F4:B9:B3:CC:3C:E3:EC:ED:53:FC:EB:0E:91:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GCqpZq9LmzzDzj7O1T_OsOkV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/m1GCqpZq9LmzzDzj7O1T_OsOkV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1dced4-c45c-4515-a8ad-eb89c5c4d384/1/m1GCqpZq9LmzzDzj7O1T_OsOkV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:16:c0:8d:7d:1e:0d:e5:0b:24:38:d0:e4:23:65:80:a0:ee:
         76:27:29:3f:6a:31:de:e1:3a:0b:13:e7:67:ba:89:24:68:38:
         a5:6d:6a:8e:e1:01:d8:39:c3:29:bb:89:8e:ff:ed:6e:6f:16:
         38:ca:e5:bb:3a:e0:18:cd:9a:cc:ee:40:89:4f:aa:51:46:fd:
         9c:25:66:1a:87:63:63:bf:c3:ca:c4:28:00:4b:09:b7:9b:bd:
         d2:21:5f:4a:4f:46:d4:40:ce:03:8b:96:8e:fd:00:a8:c0:d7:
         fa:dc:69:06:b8:bc:79:96:8a:6e:6e:53:27:69:f1:53:c2:7e:
         75:01:26:c2:a9:fb:a4:c4:21:aa:70:16:36:6d:02:4a:af:32:
         09:39:50:b6:46:d0:0a:c3:43:c8:70:14:92:46:27:ff:28:7c:
         a8:00:86:95:89:a2:8a:18:96:2f:5a:48:7d:c3:20:77:7c:0b:
         61:ac:66:f4:87:1c:ee:0b:04:a7:88:66:03:9f:9d:7b:71:44:
         78:53:02:07:87:d3:37:02:15:2e:b7:72:f2:0b:da:1d:f5:a6:
         d7:c4:72:25:73:46:8f:7b:74:91:4c:bc:b0:46:b8:ef:f5:cf:
         d6:44:b0:67:42:d3:f7:6c:2a:9c:d9:9f:fa:91:00:83:2b:c9:
         b9:6f:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----