Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.mft
File:                     2X7Bz-q-aRLAl7CsOYQUu5mPuWU.mft (raw, json)
Hash identifier:          60OR5jcItvg3VQQF3zJAreW22Ao6dz7ul+7sQxIS9/8=
Subject key identifier:   03:66:77:D8:71:85:65:9E:82:96:0D:C9:82:B6:78:AB:60:72:78:84
Authority key identifier: D9:7E:C1:CF:EA:BE:69:12:C0:97:B0:AC:39:84:14:BB:99:8F:B9:65
Certificate issuer:       /CN=d97ec1cfeabe6912c097b0ac398414bb998fb965
Certificate serial:       018F0D9FA0D0F99476F83659FD5670F8850D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.mft
Manifest number:          0389
Signing time:             Wed 24 Apr 2024 01:01:56 +0000
Manifest this update:     Wed 24 Apr 2024 01:01:56 +0000
Manifest next update:     Thu 25 Apr 2024 01:01:56 +0000
Files and hashes:         1: 2X7Bz-q-aRLAl7CsOYQUu5mPuWU.crl (hash: 4xv56PXYJW9ytf9p98jXnVSBWr3BeqXlGofiPTi45Bk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0d:9f:a0:d0:f9:94:76:f8:36:59:fd:56:70:f8:85:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d97ec1cfeabe6912c097b0ac398414bb998fb965
        Validity
            Not Before: Apr 24 01:01:56 2024 GMT
            Not After : Apr 25 01:01:56 2024 GMT
        Subject: CN=036677d87185659e82960dc982b678ab60727884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d7:95:04:5a:05:df:f6:87:56:77:f5:ef:b4:
                    7a:8f:e6:0f:44:82:cc:3b:f6:ab:08:4a:29:4b:87:
                    ab:b2:3a:b2:07:24:28:53:d0:5a:59:b2:86:71:b9:
                    b2:bf:6b:f2:50:4b:35:50:98:9c:6f:d1:1e:6b:39:
                    07:3c:98:00:b4:3b:d1:c6:e4:be:bf:cd:f7:97:f6:
                    66:28:b3:9d:fa:96:69:ad:65:90:a8:14:92:f2:7d:
                    b1:bb:e7:23:82:90:60:03:b2:4a:78:f8:8a:94:16:
                    d5:cf:b8:43:91:2e:5e:b8:d0:44:f2:60:f3:0a:9b:
                    ca:c7:7d:fb:af:96:85:8e:03:77:29:ef:6c:52:38:
                    b3:1a:fa:55:9d:8e:70:1d:ac:3c:93:dc:c2:e2:e9:
                    bb:fd:48:b3:79:f8:8d:3d:47:4d:41:45:ec:44:0d:
                    b7:55:d9:40:06:59:82:df:e5:20:e3:ca:27:dc:99:
                    c6:62:ac:25:f4:4a:ab:b1:50:aa:eb:72:b7:2e:67:
                    4f:8c:1d:a0:f7:7e:d0:8c:e4:d0:3d:01:75:77:15:
                    0b:67:f0:89:b5:0e:fb:e9:3b:7c:28:45:be:a9:cd:
                    4a:9a:08:9d:f4:20:9e:f5:0f:3b:28:43:92:f3:85:
                    8b:56:58:ca:08:cf:54:1e:dd:3a:f9:71:0b:36:3f:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:77:D8:71:85:65:9E:82:96:0D:C9:82:B6:78:AB:60:72:78:84
            X509v3 Authority Key Identifier:
                keyid:D9:7E:C1:CF:EA:BE:69:12:C0:97:B0:AC:39:84:14:BB:99:8F:B9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/07b3b0-7b5d-4f96-94cf-b7a553b13237/1/2X7Bz-q-aRLAl7CsOYQUu5mPuWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ec:c1:0c:22:8d:a3:ae:0b:fb:be:a3:8a:5b:21:9b:88:ba:
         4e:a6:dc:0b:01:9d:e7:9a:48:5c:d4:15:2f:94:fd:5e:5c:81:
         74:6b:d8:3c:70:57:26:ae:da:36:06:46:1e:e2:60:d9:c9:e8:
         48:f5:3a:64:84:7c:7b:22:41:06:7e:df:96:9e:33:0f:b1:b8:
         c6:42:20:2d:89:f9:7d:c3:fe:dc:8e:06:ad:22:e9:bd:79:d4:
         81:7c:b8:1d:8d:e3:26:a8:9e:d7:e3:ec:84:80:93:d3:ce:94:
         f9:e9:79:61:98:23:a2:ec:78:5f:ed:3f:98:45:3e:ca:3b:f0:
         26:00:39:48:c8:61:1c:4e:d4:10:31:87:80:a1:47:f2:17:81:
         e2:67:dd:e8:43:a8:64:b9:f7:e6:1c:47:55:52:2c:43:b5:13:
         b9:d5:da:9d:c1:5d:3a:45:49:5a:8d:69:95:a2:7e:25:c3:f9:
         49:9e:e4:3d:16:d4:d3:42:f4:8a:6a:ff:ad:11:13:d4:94:c1:
         95:07:b7:93:c6:89:47:27:93:8e:9c:7b:00:b8:b7:a6:1a:80:
         42:07:5a:f8:eb:8d:8e:50:64:54:de:c6:95:b2:c7:9f:f7:40:
         22:c3:ce:dc:6a:55:a7:12:ad:68:f3:1d:77:a2:09:5e:53:3f:
         bf:9f:f4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8Nn6DQ+ZR2+DZZ/VZw+IUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5N2VjMWNmZWFiZTY5MTJjMDk3YjBhYzM5ODQxNGJiOTk4
ZmI5NjUwHhcNMjQwNDI0MDEwMTU2WhcNMjQwNDI1MDEwMTU2WjAzMTEwLwYDVQQD
EygwMzY2NzdkODcxODU2NTllODI5NjBkYzk4MmI2NzhhYjYwNzI3ODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiteVBFoF3/aHVnf177R6j+YPRILM
O/arCEopS4ersjqyByQoU9BaWbKGcbmyv2vyUEs1UJicb9EeazkHPJgAtDvRxuS+
v833l/ZmKLOd+pZprWWQqBSS8n2xu+cjgpBgA7JKePiKlBbVz7hDkS5euNBE8mDz
CpvKx337r5aFjgN3Ke9sUjizGvpVnY5wHaw8k9zC4um7/UizefiNPUdNQUXsRA23
VdlABlmC3+Ug48on3JnGYqwl9EqrsVCq63K3LmdPjB2g937QjOTQPQF1dxULZ/CJ
tQ776Tt8KEW+qc1Kmgid9CCe9Q87KEOS84WLVljKCM9UHt06+XELNj/rAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANmd9hxhWWegpYNyYK2eKtgcniEMB8GA1UdIwQY
MBaAFNl+wc/qvmkSwJewrDmEFLuZj7llMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlg3QnotcS1hUkxBbDdDc09ZUVV1NW1QdVdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wN2IzYjAtN2I1ZC00Zjk2LTk0Y2Yt
YjdhNTUzYjEzMjM3LzEvMlg3QnotcS1hUkxBbDdDc09ZUVV1NW1QdVdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wN2IzYjAtN2I1ZC00Zjk2LTk0Y2YtYjdhNTUzYjEzMjM3
LzEvMlg3QnotcS1hUkxBbDdDc09ZUVV1NW1QdVdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOzBDCKN
o64L+76jilshm4i6TqbcCwGd55pIXNQVL5T9XlyBdGvYPHBXJq7aNgZGHuJg2cno
SPU6ZIR8eyJBBn7flp4zD7G4xkIgLYn5fcP+3I4GrSLpvXnUgXy4HY3jJqie1+Ps
hICT086U+el5YZgjoux4X+0/mEU+yjvwJgA5SMhhHE7UEDGHgKFH8heB4mfd6EOo
ZLn35hxHVVIsQ7UTudXancFdOkVJWo1plaJ+JcP5SZ7kPRbU00L0imr/rRET1JTB
lQe3k8aJRyeTjpx7ALi3phqAQgda+OuNjlBkVN7GlbLHn/dAIsPO3GpVpxKtaPMd
d6IJXlM/v5/0zQ==
-----END CERTIFICATE-----