Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.mft
File:                     DBa7UnpShZ4PabiNL-3t4b3p_y0.mft (raw, json)
Hash identifier:          gBXrNHiat8EGq6KX15cjsIWgKhIuOtSrOazhsTjo2n0=
Subject key identifier:   1F:92:8B:97:2C:BC:8B:54:05:14:EA:BE:80:DE:12:27:D9:EE:0A:03
Authority key identifier: 0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
Certificate issuer:       /CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Certificate serial:       018E5EBDC882BD6186D589F22A2406BBDF1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.mft
Manifest number:          08D5
Signing time:             Thu 21 Mar 2024 02:01:19 +0000
Manifest this update:     Thu 21 Mar 2024 02:01:19 +0000
Manifest next update:     Fri 22 Mar 2024 02:01:19 +0000
Files and hashes:         1: 6qI_5XPEOEo7aCZxV8QdrkazQYU.roa (hash: nAZV57OY5Tt727ECpw6VrBHSz3HCYEG4DseUfA3X7gk=)
                          2: DBa7UnpShZ4PabiNL-3t4b3p_y0.crl (hash: G4pL6fQa8lJiLdNlM5/xPwK1xqouMBZt80altuAJRcA=)
                          3: WocdVRGEeAZvfEJg1U_rPitmTN8.roa (hash: T4BRZu1zOLNNfs43/dvxRu0Qf+AjEoOdW+T5XbTy0RY=)
                          4: yR4ZhdPnFjVIh_9AgyDbt2SkLjc.roa (hash: 6J0jqgaZZsy0CQDg73orlMyZafvvzqix5gKt6+WQQYk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5e:bd:c8:82:bd:61:86:d5:89:f2:2a:24:06:bb:df:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
        Validity
            Not Before: Mar 21 02:01:19 2024 GMT
            Not After : Mar 22 02:01:19 2024 GMT
        Subject: CN=1f928b972cbc8b540514eabe80de1227d9ee0a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:74:39:c9:89:34:b6:3d:be:05:b8:d2:36:
                    b3:8a:72:0f:20:d6:f9:af:5b:15:bb:ac:de:b5:ac:
                    24:cf:fd:3e:3e:4e:e6:8c:e9:af:b1:93:72:ee:c2:
                    83:f3:b1:d8:02:ad:e9:00:61:34:6b:0b:9a:f6:37:
                    74:1c:8b:0a:a3:63:52:76:f8:8f:3d:2d:1e:f1:a5:
                    75:f1:1a:e9:77:14:cc:74:6e:64:b2:f3:d2:aa:e2:
                    40:56:de:47:08:99:6b:75:72:b0:c3:e1:e3:31:a6:
                    c1:08:0c:d9:d4:dd:52:e3:f3:1b:e0:4e:06:b3:27:
                    bd:00:2b:85:f7:06:e6:61:c2:fa:fd:fb:5f:e5:b6:
                    d7:43:df:4d:ea:61:ce:94:a1:77:83:d5:a8:2b:5c:
                    82:6d:25:17:a4:b8:c6:2e:aa:3c:59:c1:66:be:2c:
                    27:32:c7:45:71:42:7b:f6:9d:7a:c7:d5:73:e0:69:
                    ba:1f:0d:85:36:eb:ee:fa:6f:88:9c:44:43:06:99:
                    35:04:67:9d:04:44:d6:e0:57:e4:fc:f2:5d:0d:2e:
                    a9:7c:d7:82:5a:3e:92:d3:25:52:75:6f:a1:66:31:
                    1c:8f:6a:ea:40:d0:67:6f:8c:77:58:cd:82:a1:44:
                    30:f9:d5:08:eb:80:2f:4c:a2:03:ed:ac:2a:c5:d0:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:8B:97:2C:BC:8B:54:05:14:EA:BE:80:DE:12:27:D9:EE:0A:03
            X509v3 Authority Key Identifier:
                keyid:0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:14:03:aa:bc:cb:57:a8:4c:c0:28:56:01:fd:6c:f8:7a:39:
         a8:75:4d:c0:4e:bf:28:85:c4:83:3d:88:a7:c5:71:58:50:53:
         7c:2a:2d:a0:6e:5b:3f:82:4d:e9:c4:3a:3c:3c:cb:bd:de:35:
         8a:21:d9:a1:de:d5:e0:a6:e5:34:bc:db:77:c1:7d:56:d0:ae:
         fd:75:5c:26:08:76:54:3a:b4:f3:ec:75:0d:1e:89:fa:51:13:
         54:d9:bb:8c:05:49:d0:e3:a7:df:81:4d:4b:c7:95:3f:a4:e4:
         02:9b:90:a5:9e:39:1d:c2:21:26:a7:d7:10:b4:0e:45:12:73:
         d6:42:b8:64:79:6a:5a:14:ee:06:57:f7:04:a9:39:a8:49:39:
         5b:98:e0:93:3c:6d:c0:aa:2c:81:22:11:45:db:67:96:6f:43:
         14:0e:93:0a:1b:e7:7e:8a:8e:a0:00:77:41:47:6b:4f:7a:6f:
         37:14:c1:7a:95:c9:8b:97:fa:9a:25:25:b6:4d:8c:d4:e9:a6:
         27:c7:51:fe:2a:f8:38:91:fa:97:86:a2:b5:86:14:d5:89:96:
         b2:5f:dc:f8:b9:69:74:a8:0a:40:36:8f:59:f8:54:71:7a:fb:
         a4:c3:aa:26:df:7a:e0:c5:8c:71:d7:bb:cf:a8:52:3e:94:b1:
         24:9e:83:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----