Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/zvMMPHGlg5aBbK_ygnAeM3nZAEY.mft
File:                     zvMMPHGlg5aBbK_ygnAeM3nZAEY.mft (raw, json)
Hash identifier:          ChdCZVih0XUi70fQYgyIC/f+t29gH2NZqbXjOcWbSMY=
Subject key identifier:   CE:56:D1:D4:68:C3:14:1B:48:35:8E:8C:8D:C6:15:08:B0:9A:42:34
Authority key identifier: CE:F3:0C:3C:71:A5:83:96:81:6C:AF:F2:82:70:1E:33:79:D9:00:46
Certificate issuer:       /CN=cef30c3c71a58396816caff282701e3379d90046
Certificate serial:       018B633DCC4C3D32E7918C0DB7719F4AD1F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvMMPHGlg5aBbK_ygnAeM3nZAEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/zvMMPHGlg5aBbK_ygnAeM3nZAEY.mft
Manifest number:          0202
Signing time:             Tue 24 Oct 2023 19:51:16 +0000
Manifest this update:     Tue 24 Oct 2023 19:51:16 +0000
Manifest next update:     Wed 25 Oct 2023 19:51:16 +0000
Files and hashes:         1: zvMMPHGlg5aBbK_ygnAeM3nZAEY.crl (hash: 5sbqsu6DPMLaq6Hmac8zPYBznpQN/ZT2/ERe0oDV/RQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:63:3d:cc:4c:3d:32:e7:91:8c:0d:b7:71:9f:4a:d1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cef30c3c71a58396816caff282701e3379d90046
        Validity
            Not Before: Oct 24 19:51:16 2023 GMT
            Not After : Oct 25 19:51:16 2023 GMT
        Subject: CN=ce56d1d468c3141b48358e8c8dc61508b09a4234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:d2:a4:2f:64:af:b0:a7:ae:26:2d:0d:5c:
                    dc:8b:cc:70:24:3a:d0:6e:bd:f4:ac:05:c6:bc:44:
                    e7:f6:31:96:45:02:36:3c:c5:09:47:81:62:c7:4a:
                    41:94:19:df:1b:ff:e6:92:01:52:1c:a7:aa:ca:a7:
                    4e:0f:70:80:72:6e:8b:8e:89:40:57:d7:58:df:d2:
                    7d:4e:26:2b:bc:f7:c2:1c:8a:36:35:39:b6:ec:69:
                    45:4d:6b:a9:d9:13:2d:80:77:97:e8:22:1d:7d:47:
                    36:e6:5f:28:60:a5:bc:77:47:73:3b:ec:b4:03:c6:
                    6f:57:4f:a7:05:f4:bb:73:75:e1:4d:bf:2d:d0:cd:
                    84:00:4a:10:b3:85:d8:f7:0a:58:98:d2:dd:7e:2a:
                    f0:40:97:28:21:7b:78:95:77:50:33:a0:a0:ed:90:
                    78:35:2a:d3:61:8b:00:74:71:72:84:f3:85:39:b4:
                    dc:a2:2d:91:29:7d:b2:79:d8:e2:9a:54:b7:5f:30:
                    17:ae:86:f7:30:1b:e5:44:32:2a:62:9a:86:80:e7:
                    2a:94:ef:0e:5b:11:05:b2:d6:8a:22:62:32:8e:61:
                    79:72:59:92:fb:b0:86:34:18:3f:33:b8:96:a6:34:
                    8d:8d:7f:d8:13:ad:69:e8:d3:94:1b:97:0d:8f:c0:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:56:D1:D4:68:C3:14:1B:48:35:8E:8C:8D:C6:15:08:B0:9A:42:34
            X509v3 Authority Key Identifier:
                keyid:CE:F3:0C:3C:71:A5:83:96:81:6C:AF:F2:82:70:1E:33:79:D9:00:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvMMPHGlg5aBbK_ygnAeM3nZAEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/zvMMPHGlg5aBbK_ygnAeM3nZAEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/5511e5-0979-4889-8d55-409716a3a3ee/1/zvMMPHGlg5aBbK_ygnAeM3nZAEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:43:c3:5c:71:81:66:01:86:e4:b7:6b:f2:d7:62:20:77:
         82:59:79:24:81:3f:4e:b6:75:80:55:0e:f1:9c:1a:b1:8c:7a:
         86:11:7b:bb:62:ba:ed:32:ec:62:f3:fc:50:b0:ea:1d:dc:84:
         d6:a1:24:c8:0a:92:cd:e9:24:12:08:45:89:ec:6b:54:31:b0:
         06:c6:d6:90:a4:65:c9:99:ac:1f:2a:c3:14:31:6e:67:d1:c1:
         d8:8a:b1:13:11:b8:84:bd:ea:1d:22:bb:3b:67:89:e9:58:5b:
         9d:47:52:88:09:14:af:dd:a6:e9:b3:bc:0d:d3:5b:02:e0:95:
         c9:1d:e9:5f:6d:4e:eb:33:a5:eb:e3:56:14:35:62:69:21:e6:
         ce:cd:07:7f:1c:dc:8a:73:03:14:f4:68:e1:ad:50:49:21:7e:
         fe:c7:65:11:c5:9c:95:af:d1:ea:8c:91:b7:75:93:23:41:14:
         30:f9:fc:0b:cc:7f:44:c0:37:c2:96:a3:17:af:ea:a0:02:e2:
         40:66:30:81:5f:24:0f:04:0d:c0:2e:7e:f6:d0:b0:35:ca:16:
         2d:75:73:40:1c:f4:6d:bd:25:0a:c2:0c:6e:f1:0e:9d:2a:b6:
         e1:6b:94:c3:11:f3:a3:73:71:2c:dc:b6:ef:f3:7f:4e:15:60:
         27:37:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----