Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.mft
File:                     1-0MZXc7GD1nC-JyK-QICXRc7umo.mft (raw, json)
Hash identifier:          gD6PXLpOTfX+Zyj2PKkhAomcUqHjd4XfBp+g4VMqN+0=
Subject key identifier:   10:15:3F:81:4B:52:3F:E8:4B:DE:FF:5D:8B:7F:16:E8:7C:B8:2D:A0
Authority key identifier: FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A
Certificate issuer:       /CN=fb43195dcec60f59c2f89c8af902025d173bba6a
Certificate serial:       018EC773B45F41C408E3B1FED26E27249301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.mft
Manifest number:          0909
Signing time:             Wed 10 Apr 2024 10:00:32 +0000
Manifest this update:     Wed 10 Apr 2024 10:00:32 +0000
Manifest next update:     Thu 11 Apr 2024 10:00:32 +0000
Files and hashes:         1: 1-0MZXc7GD1nC-JyK-QICXRc7umo.crl (hash: V4lmpHC6tRq4C7i3eTQxXvmhYsGAI7d33uxmSR72IwM=)
                          2: QQ6BdGDnmOvjoKW4WY5u19BCgfM.roa (hash: aO55BSzLnhl4OCbrnR6U3r6qvIZmAPZL+vT5Kx4soHc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c7:73:b4:5f:41:c4:08:e3:b1:fe:d2:6e:27:24:93:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb43195dcec60f59c2f89c8af902025d173bba6a
        Validity
            Not Before: Apr 10 10:00:32 2024 GMT
            Not After : Apr 11 10:00:32 2024 GMT
        Subject: CN=10153f814b523fe84bdeff5d8b7f16e87cb82da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fa:82:ab:36:9a:46:97:c5:da:e7:fb:08:6f:
                    3b:a5:5a:27:49:f3:d9:36:31:ed:87:b4:cc:3a:25:
                    76:d2:d7:61:d3:f8:fe:ca:47:40:f2:a3:40:cc:8b:
                    2b:32:90:5b:b5:76:82:e5:32:a1:8a:07:7d:46:eb:
                    25:0d:88:db:1c:61:5f:03:7b:0c:a3:93:b3:61:74:
                    a4:fe:fd:37:77:cd:5d:8f:79:81:18:99:0e:37:0c:
                    c0:bf:8a:3e:fa:b2:ed:3e:36:cd:1c:9a:01:9b:e0:
                    67:a0:48:2e:71:90:ca:38:7e:c3:5b:19:81:97:71:
                    9d:11:84:6e:dc:a1:66:b5:52:54:f3:52:7e:16:3a:
                    82:79:67:d6:c0:26:af:b6:44:c2:75:94:fd:53:33:
                    08:1f:0b:8c:b5:84:fe:70:dc:9c:42:81:a1:b1:87:
                    2e:a1:5c:eb:c9:c2:7c:28:37:bf:72:84:52:69:53:
                    85:1a:62:f2:c7:52:98:52:7b:d4:a8:81:90:66:2d:
                    a5:db:af:e9:0d:83:dd:8e:44:cf:1e:49:7b:ea:0d:
                    8c:13:a4:01:0b:66:3d:b1:59:57:db:32:81:06:47:
                    26:56:49:04:94:70:fa:57:f4:99:91:aa:14:a4:c0:
                    ea:30:b4:f6:a8:79:f3:2a:1d:8e:c0:52:89:12:a1:
                    d1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:3F:81:4B:52:3F:E8:4B:DE:FF:5D:8B:7F:16:E8:7C:B8:2D:A0
            X509v3 Authority Key Identifier:
                keyid:FB:43:19:5D:CE:C6:0F:59:C2:F8:9C:8A:F9:02:02:5D:17:3B:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0MZXc7GD1nC-JyK-QICXRc7umo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/dfd6bf-c3a6-48cb-a2a0-5bc09dc1b080/1/1-0MZXc7GD1nC-JyK-QICXRc7umo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:98:37:ca:6f:0d:1d:b8:48:89:5e:40:7b:c3:e9:37:ea:
         41:17:62:b9:e4:77:27:ad:61:bc:03:36:d0:8b:fe:2f:93:f5:
         3c:fb:e6:bf:5d:4c:03:b3:c5:5c:e2:cf:0f:20:97:86:51:4f:
         69:86:f8:17:14:fe:53:66:08:7d:ee:a7:23:68:79:f4:5e:c5:
         b8:d1:67:11:a8:04:48:fb:50:79:cf:4f:76:97:d0:4f:ae:2e:
         5c:5b:39:4f:1c:2a:75:9a:21:d1:18:c0:5c:51:85:8a:0d:1f:
         56:6d:20:58:de:98:84:14:d5:5b:ab:ed:1e:83:67:0c:c3:04:
         b4:0e:17:88:a0:83:7c:06:73:e1:28:dd:6b:90:23:d5:60:b3:
         33:ee:79:73:1f:1e:ac:b7:06:ba:d8:20:55:24:8d:17:01:95:
         fb:25:c9:68:73:6d:07:ba:d3:7b:5c:92:7c:1d:22:06:eb:2c:
         0f:8b:f2:cb:a3:bb:68:14:2a:1a:97:ee:49:ea:9b:f2:04:f2:
         d6:75:d3:53:9c:96:0a:46:d9:d1:1e:d8:5d:74:5f:d2:fe:f0:
         4f:32:e6:93:d6:c4:5d:09:01:10:ef:cb:d7:b8:57:9f:53:76:
         94:e6:97:1a:cc:11:77:5f:a7:ad:eb:13:47:1c:89:cc:0d:ee:
         03:c5:e9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----