Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
File:                     Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft (raw, json)
Hash identifier:          vOdvIQoUD+WfxREuhFEo1f6GwhQmhtTEHpeYtPrTiGg=
Subject key identifier:   9F:F0:63:FC:29:CF:B0:EC:F9:B3:81:0F:CB:4A:DB:BC:59:4E:5D:2A
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Certificate issuer:       /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial:       01932A1DB78F52B8B62FCB4C9A31690434CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
Manifest number:          135C
Signing time:             Thu 14 Nov 2024 10:00:10 +0000
Manifest this update:     Thu 14 Nov 2024 10:00:10 +0000
Manifest next update:     Fri 15 Nov 2024 10:00:10 +0000
Files and hashes:         1: Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl (hash: q8GOu4vXcVmxN7BT1ZwjGgXCaEwk6OPVWZS0C+wlqdo=)
                          2: jGqpvp4ibA-qeZOiAqe2cEHLf8w.roa (hash: pyieLE18ftE6LzfZes4vYUtIgC7LyMgyCYlfRnjefBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2a:1d:b7:8f:52:b8:b6:2f:cb:4c:9a:31:69:04:34:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
        Validity
            Not Before: Nov 14 10:00:10 2024 GMT
            Not After : Nov 15 10:00:10 2024 GMT
        Subject: CN=9ff063fc29cfb0ecf9b3810fcb4adbbc594e5d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:28:c0:d3:97:50:61:2d:d5:ba:78:1e:c9:
                    c4:7c:de:58:6a:dc:ca:2e:21:d1:18:ea:d0:84:7a:
                    3b:20:f9:69:c0:34:f6:fa:c7:dc:ba:d1:4d:74:77:
                    59:f5:36:4f:44:7f:65:1d:4c:47:b4:5f:99:a6:67:
                    98:b6:c6:f8:e8:6c:e2:af:1c:6d:f9:76:81:09:17:
                    d3:46:09:21:9f:5c:cc:fd:79:eb:1e:aa:c7:ee:58:
                    d9:19:ab:ac:88:9d:99:91:bf:0a:d7:3d:59:37:aa:
                    f1:9f:78:09:48:8e:ae:61:54:3b:46:22:1b:4a:5f:
                    58:02:a0:f7:bb:04:c7:be:72:fd:8b:0e:f2:19:5a:
                    32:2a:8d:ef:09:4b:e9:40:fc:d9:4a:1a:8c:59:c0:
                    50:e2:b4:97:73:f0:91:be:8a:b6:8f:5d:e0:2b:fd:
                    86:9a:44:d1:b2:2a:76:87:43:57:2a:1c:ae:53:d3:
                    8b:a2:00:4c:88:a4:e4:3a:c3:41:11:d9:9c:dc:49:
                    51:c1:85:36:f4:a4:72:11:00:52:20:de:43:fd:b4:
                    43:a1:46:49:54:f9:ae:54:a5:ec:89:50:1e:1c:4f:
                    a8:eb:22:96:93:e7:38:21:16:29:9c:85:77:66:0f:
                    c2:a5:e9:f0:8c:f2:4f:0b:79:04:ed:23:0f:c5:97:
                    e8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:63:FC:29:CF:B0:EC:F9:B3:81:0F:CB:4A:DB:BC:59:4E:5D:2A
            X509v3 Authority Key Identifier:
                keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:a0:b1:1a:53:22:2a:57:8d:d2:ed:a4:41:6b:4b:04:e9:
         33:27:76:05:b7:28:22:d2:48:91:d0:2d:3a:63:ac:ce:1e:f2:
         9a:a2:c7:dc:62:b7:73:db:23:f4:81:7e:aa:2d:64:81:aa:b8:
         05:41:05:03:fd:f5:b8:71:58:45:4c:23:70:ae:6e:5f:f3:2d:
         69:26:15:ac:4e:f0:76:71:09:71:b1:67:58:7f:7a:d0:64:95:
         29:c5:91:6b:f3:78:b2:e1:ee:96:95:a3:9c:5e:26:84:1f:13:
         d8:2c:6b:6d:e1:c5:eb:aa:51:83:aa:43:62:67:8b:ff:4f:20:
         f2:0e:49:08:30:fd:6d:9f:5c:f9:58:f7:51:b3:5d:d4:ba:76:
         b6:54:29:42:2b:ff:59:64:10:bf:a2:ae:4c:e0:ed:6e:8b:52:
         b0:48:e5:8b:fc:88:e1:8d:3d:91:19:fd:51:34:b0:de:ce:64:
         47:67:00:3f:52:b7:f1:6b:46:e6:99:09:9c:dc:91:3b:30:17:
         88:47:6d:68:9e:54:38:ca:5c:b0:fa:c6:73:48:00:4c:4e:47:
         05:72:c5:16:57:a2:9a:80:2c:13:f0:1a:4f:3b:07:c1:7a:53:
         04:46:68:81:8a:9d:12:ad:bc:65:23:e2:b7:94:50:69:4d:b4:
         ab:a5:03:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----