Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft
File:                     ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft (raw, json)
Hash identifier:          q642aQYPl/xNVbyJzv6iuSHlz/TpruGv62oJb+nEqr0=
Subject key identifier:   39:0C:23:85:A2:FF:C7:32:40:5E:0D:3E:42:2C:88:3A:1A:07:E5:2C
Authority key identifier: B9:F2:84:56:80:2A:8E:EB:ED:30:5F:6A:43:F7:2E:CA:32:61:CE:23
Certificate issuer:       /CN=b9f28456802a8eebed305f6a43f72eca3261ce23
Certificate serial:       0190FD8125528300EDA7D003D39946460EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ufKEVoAqjuvtMF9qQ_cuyjJhziM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft
Manifest number:          0B
Signing time:             Mon 29 Jul 2024 08:00:17 +0000
Manifest this update:     Mon 29 Jul 2024 08:00:17 +0000
Manifest next update:     Tue 30 Jul 2024 08:00:17 +0000
Files and hashes:         1: ufKEVoAqjuvtMF9qQ_cuyjJhziM.crl (hash: E3zpXamQEdNmDw4tBRniEZRXKZuo0k/gq5+mbN/vzT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fd:81:25:52:83:00:ed:a7:d0:03:d3:99:46:46:0e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9f28456802a8eebed305f6a43f72eca3261ce23
        Validity
            Not Before: Jul 29 08:00:17 2024 GMT
            Not After : Jul 30 08:00:17 2024 GMT
        Subject: CN=390c2385a2ffc732405e0d3e422c883a1a07e52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:1f:38:ac:de:1b:ed:ac:d5:d0:61:8e:fc:
                    e3:ca:66:2b:9b:67:06:4c:55:d0:d0:dd:9a:0e:83:
                    73:aa:75:c9:79:d7:80:29:0d:5f:4c:b8:81:53:74:
                    dc:3f:ff:71:27:17:2e:cc:79:f5:cb:26:c1:6e:f1:
                    92:9c:d8:4b:33:58:29:32:08:19:31:2a:22:9b:0d:
                    73:64:13:c5:4d:0d:5a:ab:22:28:4c:c1:6d:17:23:
                    4b:84:32:f5:1a:94:c9:8c:f1:88:cf:5f:01:13:97:
                    7c:d9:f9:9e:c8:98:b4:ca:5c:1f:46:bd:ba:b6:a2:
                    f3:98:80:49:cf:90:b2:00:7b:41:20:ab:e9:94:09:
                    28:6a:20:b0:65:7e:89:e6:55:45:fc:fe:d9:7c:0e:
                    2f:61:28:8b:3c:04:77:62:d7:9e:d1:5c:42:59:5e:
                    fd:29:85:37:10:12:23:ae:eb:55:90:7b:a5:e2:df:
                    00:60:4d:90:c9:cf:2e:0f:da:13:19:99:3b:cc:2c:
                    d3:1d:fb:6e:ec:65:22:a2:56:69:71:f7:d3:d5:15:
                    cb:c6:92:bc:90:e9:ee:30:e4:a6:a5:ad:ef:33:59:
                    59:06:03:0d:9d:6a:d6:4d:80:4d:4b:22:dc:ad:ac:
                    db:b8:3c:4f:e9:e6:a1:55:4b:22:cb:49:a7:7c:cc:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0C:23:85:A2:FF:C7:32:40:5E:0D:3E:42:2C:88:3A:1A:07:E5:2C
            X509v3 Authority Key Identifier:
                keyid:B9:F2:84:56:80:2A:8E:EB:ED:30:5F:6A:43:F7:2E:CA:32:61:CE:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufKEVoAqjuvtMF9qQ_cuyjJhziM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/def10a-bd53-4793-b1a8-604b47261476/1/ufKEVoAqjuvtMF9qQ_cuyjJhziM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:4a:e2:b1:d9:25:e5:e2:62:db:7a:19:0f:56:dd:9a:97:65:
         f5:d9:5b:7a:19:04:11:c3:0d:3f:b2:48:f1:b1:49:91:ca:f5:
         47:15:ec:4d:09:02:ce:eb:3d:81:61:bd:77:77:ed:e5:37:dc:
         07:aa:c2:14:e5:c4:72:65:5f:e8:57:4d:90:9b:8f:7a:4f:13:
         83:84:92:c0:5e:7c:42:19:1a:cb:ad:bc:93:50:af:3a:32:06:
         6f:6a:2a:0d:71:99:98:2f:57:21:c5:a5:43:f0:f2:66:63:c5:
         0c:9f:2e:7d:d8:f3:93:08:4d:f8:df:9e:62:cc:f0:7c:05:f6:
         43:9d:20:13:a2:2a:af:64:3d:ca:f8:79:a9:fc:be:18:7c:74:
         70:d6:97:13:98:3c:9e:9d:f9:0a:85:4b:1f:30:3e:26:72:22:
         10:38:17:22:55:b5:b5:2a:83:3a:6e:67:c9:e0:56:7e:11:b6:
         ed:6a:91:40:18:7d:63:7a:a8:ad:04:39:d0:c1:41:b3:05:39:
         eb:38:1c:a8:ce:c9:f5:f5:a1:d2:15:54:85:8e:ae:0b:c3:66:
         77:f6:ee:61:81:49:8c:89:d8:2b:05:55:bd:17:3d:ed:c8:35:
         51:e6:cf:be:65:36:72:d6:79:8f:5e:01:53:1b:df:b0:7a:71:
         18:40:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----