Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.mft
File:                     i207l1ETkCRqrlMy2exzXnKZtBQ.mft (raw, json)
Hash identifier:          p2MPfmHuT90PfwCUTo0/umwJDIDejVecopArwUCChZw=
Subject key identifier:   3B:02:0F:66:A1:9C:2C:1C:EF:68:DB:0C:94:93:BD:CA:F7:31:14:26
Authority key identifier: 8B:6D:3B:97:51:13:90:24:6A:AE:53:32:D9:EC:73:5E:72:99:B4:14
Certificate issuer:       /CN=8b6d3b97511390246aae5332d9ec735e7299b414
Certificate serial:       018D592CB9CCF8B94EE8908A8D1EA102D18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i207l1ETkCRqrlMy2exzXnKZtBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.mft
Manifest number:          1054
Signing time:             Tue 30 Jan 2024 07:01:59 +0000
Manifest this update:     Tue 30 Jan 2024 07:01:59 +0000
Manifest next update:     Wed 31 Jan 2024 07:01:59 +0000
Files and hashes:         1: i207l1ETkCRqrlMy2exzXnKZtBQ.crl (hash: ABewwzNLDqha1rtWNKYDCDlVzkzAST9oqx9UgGgmC38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:59:2c:b9:cc:f8:b9:4e:e8:90:8a:8d:1e:a1:02:d1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6d3b97511390246aae5332d9ec735e7299b414
        Validity
            Not Before: Jan 30 07:01:59 2024 GMT
            Not After : Jan 31 07:01:59 2024 GMT
        Subject: CN=3b020f66a19c2c1cef68db0c9493bdcaf7311426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b4:c9:a7:88:35:7c:cd:57:0e:e6:6c:c2:11:
                    8c:2a:27:8e:58:1e:33:96:9e:a6:f5:eb:c0:c1:a2:
                    14:4f:96:19:30:df:34:c0:55:c4:f6:a7:1c:50:21:
                    38:81:b9:63:4c:48:2d:f6:22:f5:6c:5d:06:32:e4:
                    91:23:c9:66:10:8d:ec:a8:3b:eb:74:71:47:17:8c:
                    10:50:0a:12:6e:27:03:58:42:fb:aa:09:68:bf:8e:
                    9b:e7:4e:89:16:30:74:56:e6:fc:6b:c6:4c:44:01:
                    ec:07:0d:a2:da:32:1f:8a:4c:bc:40:ba:2a:88:98:
                    09:10:f8:22:87:1c:b1:ce:be:56:c5:49:a0:db:7a:
                    49:c4:f1:7d:7f:0a:d7:8a:59:55:38:92:68:87:ec:
                    1c:e8:50:d1:72:43:6c:21:50:f4:f7:1d:3e:2d:3f:
                    15:10:00:5d:dc:dd:ac:07:3a:d4:68:79:d8:68:2e:
                    62:8d:7b:d3:78:8a:30:a8:50:2f:f1:8a:e8:8a:01:
                    cc:d6:55:13:ef:63:b3:e9:9f:2a:3d:0c:55:b8:00:
                    16:17:0e:e2:64:a6:7b:7d:71:19:21:59:8d:e4:f8:
                    1d:2c:1f:1f:09:c8:0a:cd:32:28:d9:6b:fc:02:01:
                    5b:e5:c9:00:50:80:d2:67:3d:c5:dc:5b:75:be:0e:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:02:0F:66:A1:9C:2C:1C:EF:68:DB:0C:94:93:BD:CA:F7:31:14:26
            X509v3 Authority Key Identifier:
                keyid:8B:6D:3B:97:51:13:90:24:6A:AE:53:32:D9:EC:73:5E:72:99:B4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i207l1ETkCRqrlMy2exzXnKZtBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:f7:5e:88:ab:d7:55:0a:04:8a:79:bc:dd:a4:90:ab:a8:
         3e:44:bb:88:42:53:39:d2:01:b2:01:2d:07:48:80:9f:49:73:
         d0:9c:ea:51:f3:ba:ab:66:ee:0d:1c:eb:f7:94:99:aa:c6:71:
         61:2f:4f:3a:79:8f:b8:69:6b:38:8d:3f:0a:d0:0d:e3:ea:5c:
         43:72:e4:bb:b0:e9:ab:48:d2:c7:1d:7a:dc:9c:c3:b7:25:16:
         fe:a8:a5:91:82:24:f0:fa:ac:83:7b:6f:d5:a0:56:38:8d:a4:
         4c:ae:c1:bc:b3:bb:6d:c4:ab:3c:8a:7f:48:15:e0:e5:84:8c:
         ed:0d:dd:69:62:a1:4c:b7:6b:7a:b8:0e:75:23:94:da:00:9f:
         ab:8d:21:9c:af:47:47:79:8c:a3:df:19:6e:60:e1:b0:7c:6c:
         e8:7b:93:e6:16:8a:37:15:fd:2c:00:4d:d7:67:27:13:43:27:
         f3:47:26:13:94:25:77:82:f8:bf:e1:97:61:38:27:e0:bf:bd:
         b0:98:9c:9d:ca:49:b4:b4:8c:c8:2f:a8:b5:44:a7:c0:b1:4d:
         c5:0b:9b:26:86:87:7c:5f:6d:7c:fa:91:dd:09:bb:2a:44:de:
         dc:8b:40:51:55:58:c0:84:ad:ec:4f:48:6d:8a:86:b2:e0:5f:
         f7:a0:a4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----