Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.mft
File:                     z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.mft (raw, json)
Hash identifier:          Df3a5+67lYYmp9d4MNixTn7tGiWa1l1ehQJCx4rZnR0=
Subject key identifier:   1B:DB:91:C7:18:7E:BB:83:35:15:79:66:1B:3C:15:A9:F5:B0:C4:4B
Authority key identifier: CF:BA:97:0D:B1:87:D1:8E:19:A9:1E:64:F0:0B:0D:31:60:86:0D:B5
Certificate issuer:       /CN=cfba970db187d18e19a91e64f00b0d3160860db5
Certificate serial:       018F381BAA932B9D2D542FE4E0E8B7D48B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.mft
Manifest number:          08BB
Signing time:             Thu 02 May 2024 07:01:28 +0000
Manifest this update:     Thu 02 May 2024 07:01:28 +0000
Manifest next update:     Fri 03 May 2024 07:01:28 +0000
Files and hashes:         1: 69VG30nDzmDHL9f_LFj9sWEvzqo.roa (hash: n7HBTW0upAptW9t5aCREcc58S0CfSOKu5N4uxUk5wcM=)
                          2: NuQfEqp5Nx3sFpeiPjcSRJHEgEg.roa (hash: jrrkRArBxSujzPns4EuKP5tAFxH/foJEdZBzvlyGaD4=)
                          3: z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.crl (hash: BYxzpxeU8ETvK1B72pu0xZEaVD7xI5s5I2To81zEO1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1b:aa:93:2b:9d:2d:54:2f:e4:e0:e8:b7:d4:8b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfba970db187d18e19a91e64f00b0d3160860db5
        Validity
            Not Before: May  2 07:01:28 2024 GMT
            Not After : May  3 07:01:28 2024 GMT
        Subject: CN=1bdb91c7187ebb83351579661b3c15a9f5b0c44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:82:5a:ae:b9:45:ad:0e:29:a1:58:40:24:
                    e3:61:6c:a9:0c:67:92:08:1f:a3:04:a3:45:2b:ce:
                    9e:ee:5b:23:8c:3a:a2:a9:aa:55:fb:8d:ef:16:a8:
                    f3:b6:bf:45:c3:f7:c5:19:9e:38:f1:16:30:7b:44:
                    f4:0a:04:ca:2d:ae:8f:da:96:1d:25:22:ad:17:16:
                    ad:31:f1:a2:3e:22:18:f6:19:89:4c:b9:8c:a5:55:
                    06:10:de:91:8d:dd:dc:25:3b:74:c6:f4:b2:5b:9b:
                    ca:53:db:f9:71:b8:e7:4f:77:15:5a:56:07:c8:fc:
                    6a:bc:b6:b4:eb:74:00:b5:b5:77:86:12:0e:6f:f1:
                    e0:22:e2:00:06:ad:6c:48:86:8b:cc:1f:78:73:5c:
                    55:02:f1:62:69:79:c6:c2:37:66:bb:32:6c:ac:7e:
                    87:d3:a6:a3:e5:2f:25:cf:4f:37:c1:f5:83:c5:8e:
                    16:9e:3f:a8:f9:20:86:51:66:8d:80:b1:d2:21:73:
                    83:89:00:3c:57:4f:c5:a0:d0:4b:d2:45:96:99:2b:
                    7c:f0:05:97:1e:44:29:67:0c:99:77:48:b5:24:7c:
                    ff:9f:da:4d:be:a6:a4:30:61:0d:e2:3a:73:f9:44:
                    94:af:0b:3b:6f:74:17:0d:73:bc:1b:07:17:1d:f2:
                    f4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:91:C7:18:7E:BB:83:35:15:79:66:1B:3C:15:A9:F5:B0:C4:4B
            X509v3 Authority Key Identifier:
                keyid:CF:BA:97:0D:B1:87:D1:8E:19:A9:1E:64:F0:0B:0D:31:60:86:0D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/829b02-d326-4c83-93f4-8cc231555e51/1/z7qXDbGH0Y4ZqR5k8AsNMWCGDbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:dd:27:67:4f:81:39:ae:c3:f9:4e:8f:76:ea:ab:9a:a4:
         36:b7:4c:a0:a8:e7:82:9c:29:a6:0c:83:de:f8:98:4d:42:5e:
         23:e9:f1:e4:30:dc:cb:21:ca:4b:a6:01:01:8e:c0:c4:61:75:
         9b:0b:ac:41:6a:ae:97:22:c2:3b:73:e0:9d:a8:c1:78:b8:f2:
         66:06:2f:3f:02:f4:fa:1c:4c:f1:3a:6b:98:d2:c0:8d:eb:c4:
         f9:99:e3:32:91:db:74:6f:48:06:fa:54:3d:0f:ab:92:32:be:
         07:26:35:54:ce:5d:87:e5:7e:90:26:2b:52:85:b8:da:0c:e5:
         3e:d4:74:f2:ef:2b:02:5b:56:ea:94:cd:24:cc:88:01:c4:39:
         57:ee:20:ba:4c:04:56:f2:a7:fc:bb:7c:1a:50:c0:19:38:75:
         3b:33:31:94:06:3f:a2:31:d4:24:4e:e0:40:db:b7:dd:f4:5f:
         24:4b:00:30:01:fe:b6:18:08:e0:6d:54:97:e1:10:b4:db:ea:
         23:da:51:b5:02:7f:3c:93:c1:f9:a8:d7:b2:06:d8:a9:16:8e:
         fe:1e:b4:cc:06:4b:a1:96:b6:f0:b2:d9:68:c3:8a:ed:75:e9:
         b5:f5:fc:73:2b:a4:b6:22:9b:45:ae:ea:05:3b:c9:9a:e2:e6:
         88:9d:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----