Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/lDlVpujFRs4-2RnzjqBjDYQKF-0.mft
File:                     lDlVpujFRs4-2RnzjqBjDYQKF-0.mft (raw, json)
Hash identifier:          uy7bthUICKSfP04+WGFXPWOo4KqDH8uWZhMe4PkBP1E=
Subject key identifier:   CD:17:8F:50:CF:A0:56:D6:03:E9:EA:1D:0F:39:6B:56:CC:87:F7:67
Authority key identifier: 94:39:55:A6:E8:C5:46:CE:3E:D9:19:F3:8E:A0:63:0D:84:0A:17:ED
Certificate issuer:       /CN=943955a6e8c546ce3ed919f38ea0630d840a17ed
Certificate serial:       0190C92671D22E8DC0A5CDC4B22F581A867B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDlVpujFRs4-2RnzjqBjDYQKF-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/lDlVpujFRs4-2RnzjqBjDYQKF-0.mft
Manifest number:          093F
Signing time:             Fri 19 Jul 2024 04:00:58 +0000
Manifest this update:     Fri 19 Jul 2024 04:00:58 +0000
Manifest next update:     Sat 20 Jul 2024 04:00:58 +0000
Files and hashes:         1: VgDS8psnl4HduWET4rgBi0G9kmc.roa (hash: pbEepqoHs8OnaBlrTUpCaumIlAlFqgo7nM59cmBO6xY=)
                          2: lDlVpujFRs4-2RnzjqBjDYQKF-0.crl (hash: ZytkikZROYMRwBOfr/5dP4/rOEGhJlhwB2a7rVlBGQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c9:26:71:d2:2e:8d:c0:a5:cd:c4:b2:2f:58:1a:86:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943955a6e8c546ce3ed919f38ea0630d840a17ed
        Validity
            Not Before: Jul 19 04:00:58 2024 GMT
            Not After : Jul 20 04:00:58 2024 GMT
        Subject: CN=cd178f50cfa056d603e9ea1d0f396b56cc87f767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:f5:0b:71:d7:1f:0a:a1:53:eb:fc:f4:30:
                    65:b7:bd:50:e6:d8:1f:bb:75:2f:cc:88:96:1e:fd:
                    29:17:d7:bc:80:19:2e:86:9c:29:b5:b8:35:c7:4a:
                    b9:1e:7e:cf:1f:35:5f:cd:4e:85:ba:00:08:ae:93:
                    c1:d9:ad:de:64:08:81:ca:75:b0:6f:46:fa:54:c1:
                    06:e7:29:7d:bd:89:63:fd:11:99:09:5d:88:6d:01:
                    f9:dc:bc:ba:72:e8:b0:d2:23:da:95:07:71:5b:d9:
                    dc:73:5a:09:be:b9:f8:40:35:17:20:66:a7:ed:98:
                    76:82:34:d2:02:70:cf:28:73:cc:75:9f:c3:a0:c9:
                    bc:a8:ee:6f:ba:2a:e7:37:20:0d:32:52:9f:8e:2f:
                    e6:41:c5:2a:d9:c3:85:ed:39:30:71:b7:a6:c0:9e:
                    c2:68:d5:88:da:27:c9:be:75:3e:0f:1a:e8:fc:d7:
                    8f:99:00:75:a7:aa:1b:7b:84:2a:ef:c0:b3:40:8a:
                    5e:7e:7f:54:2b:05:eb:ce:a2:13:ef:54:80:6c:ff:
                    f3:75:06:93:dc:ff:3f:ea:86:1c:0e:b6:42:d6:67:
                    19:2b:48:05:28:73:88:0f:a0:1c:28:0e:89:98:4e:
                    79:c8:05:c6:0b:14:dd:1b:c6:a2:8f:41:ed:c0:45:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:8F:50:CF:A0:56:D6:03:E9:EA:1D:0F:39:6B:56:CC:87:F7:67
            X509v3 Authority Key Identifier:
                keyid:94:39:55:A6:E8:C5:46:CE:3E:D9:19:F3:8E:A0:63:0D:84:0A:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDlVpujFRs4-2RnzjqBjDYQKF-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/lDlVpujFRs4-2RnzjqBjDYQKF-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/5f172f-65d2-4591-88f4-9f8657190f55/1/lDlVpujFRs4-2RnzjqBjDYQKF-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:33:cd:52:fa:e7:5e:b7:5e:c1:dd:4b:85:e9:4e:61:d4:d0:
         f5:c9:ec:d8:bf:e4:f3:ba:cc:b8:a6:83:1c:07:1d:3e:f5:51:
         de:36:ed:03:3c:33:c4:cc:00:9d:a8:28:8e:f0:4f:04:59:90:
         33:52:7d:ed:89:a8:ad:83:6a:e3:c1:55:52:36:ca:2d:45:20:
         a8:4e:0b:0b:a5:10:50:26:8c:17:fd:2e:73:4c:e6:80:1c:08:
         5e:b2:f3:0c:ce:37:47:a8:2d:33:36:9e:99:68:68:6f:30:d1:
         2c:d3:34:35:1c:3c:d2:0d:07:37:2b:03:69:46:a9:27:b5:a8:
         7d:83:04:f2:82:51:4c:66:da:63:ee:11:a4:da:a0:74:e4:ed:
         27:ec:1b:b3:1d:39:a9:7f:b6:d3:39:80:3c:57:ba:7b:13:1f:
         ef:4f:aa:fc:a7:19:da:ec:8f:fc:b2:b0:4f:49:e0:d2:b9:1d:
         ab:e9:39:a6:80:35:7b:d7:6a:13:5b:76:a2:d2:88:67:60:01:
         6e:d0:25:f1:8e:de:1f:80:08:5f:bd:b6:9b:29:ca:0a:10:7e:
         a7:63:e5:3c:4c:20:84:26:3b:dd:48:d6:dc:0f:d9:c0:ce:20:
         c7:da:6c:58:5d:6b:d0:9c:58:82:93:a1:5d:ba:02:b8:cd:6e:
         92:2d:74:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----