Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.mft
File:                     24EOw-83uELK1WE41U25eo9rdqg.mft (raw, json)
Hash identifier:          1wc0awrzXdlE2LeRFzvpCwVmH0TLuawIexzjAWs7dj8=
Subject key identifier:   FB:F0:C3:46:53:BA:58:AB:2D:F6:A1:5F:00:30:B7:21:1A:3C:22:3C
Authority key identifier: DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
Certificate issuer:       /CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Certificate serial:       018CAB5DF1A2F13AA9B537178654D63C3FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.mft
Manifest number:          095F
Signing time:             Wed 27 Dec 2023 13:01:49 +0000
Manifest this update:     Wed 27 Dec 2023 13:01:49 +0000
Manifest next update:     Thu 28 Dec 2023 13:01:49 +0000
Files and hashes:         1: 24EOw-83uELK1WE41U25eo9rdqg.crl (hash: Fn1yfw/8zxWWFV5KtC+CvXzlO/Br6YAFT7pBlRR2NSg=)
                          2: TKcivj7ajHvesQmi7XIqavvV7NQ.roa (hash: o3XbUFfXHo0+hp3wY4x9eoWjIW4KiL/7892ARoyI6HA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ab:5d:f1:a2:f1:3a:a9:b5:37:17:86:54:d6:3c:3f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
        Validity
            Not Before: Dec 27 13:01:49 2023 GMT
            Not After : Dec 28 13:01:49 2023 GMT
        Subject: CN=fbf0c34653ba58ab2df6a15f0030b7211a3c223c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:21:27:3e:d3:fb:5b:93:e1:d3:02:ec:06:88:
                    6c:84:25:33:bd:fe:04:b0:d6:de:a4:af:76:1a:48:
                    15:d2:37:4f:32:ef:c6:de:1f:4a:b3:84:7d:10:be:
                    91:c0:cf:33:fe:6a:67:ca:81:ee:44:48:27:5f:c3:
                    60:14:6c:22:00:a8:e6:9c:a6:24:f1:ee:f0:a7:fa:
                    c8:e5:8d:31:c2:62:37:1a:aa:1a:84:a6:ec:c8:ad:
                    c1:27:fc:b6:57:c8:24:14:2c:d4:e0:40:00:0e:9c:
                    37:02:46:4f:8e:25:2a:e8:f1:14:9c:a0:9c:28:7e:
                    ef:c6:c7:44:03:42:8f:1e:91:58:da:bd:6c:8b:1f:
                    bd:24:d9:37:df:ae:4d:6b:ac:21:00:2a:8a:b8:3b:
                    ce:b0:87:e4:87:4d:68:8c:10:e2:69:7e:cf:c4:49:
                    07:41:76:0a:d7:c0:d1:e3:8e:3b:ca:f9:d2:26:f8:
                    11:f5:aa:2d:ce:5f:d6:85:4a:c3:fb:02:02:b0:56:
                    58:e2:97:19:89:77:5b:9c:e8:7b:f8:fe:e2:5d:53:
                    a5:ca:ff:67:c9:34:70:a2:9b:7a:36:1f:81:da:6e:
                    5b:e6:90:e6:24:59:09:55:16:56:19:e2:7b:ba:0a:
                    b1:90:ed:e6:43:96:d4:dd:84:01:db:91:b1:59:40:
                    c9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F0:C3:46:53:BA:58:AB:2D:F6:A1:5F:00:30:B7:21:1A:3C:22:3C
            X509v3 Authority Key Identifier:
                keyid:DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:87:97:ed:6f:06:9d:49:99:15:dc:ac:f6:14:8c:d2:08:90:
         38:73:8a:ce:e6:5e:1d:ca:4d:81:2f:ed:45:db:41:94:55:ab:
         e9:e0:31:da:ae:e0:42:71:e2:a7:9b:63:5e:3d:7a:c0:57:db:
         00:72:c3:c0:35:2f:b0:cf:99:15:0f:3c:a3:f3:6c:92:24:69:
         bd:6a:2e:86:e3:11:08:7e:88:69:34:62:25:ad:1d:5d:35:ae:
         6f:53:16:d2:59:aa:7c:c7:a0:f9:1d:c9:5f:f7:5a:67:55:f5:
         5f:48:2d:bb:34:94:7f:98:8b:6f:a7:86:e9:d6:9d:28:8d:09:
         61:c3:cb:b1:8d:a7:41:a5:f3:67:fb:58:a3:49:6a:8d:ee:97:
         48:a9:c6:7b:6d:2b:cd:8d:e2:08:d6:d5:70:9a:1c:d9:5f:8e:
         55:3b:c3:59:72:c5:20:df:f8:16:62:92:a6:c8:dc:2b:7d:10:
         ec:63:2a:75:d5:b9:9d:0e:df:18:90:19:01:ab:fd:fb:be:a1:
         05:be:bc:f2:5b:d1:05:76:77:a4:09:15:37:71:af:55:50:51:
         89:3a:bd:f3:db:6f:b1:17:e7:82:22:6e:ec:8f:e6:17:b3:5c:
         d9:ab:f2:62:6b:06:2c:76:bb:28:4b:a9:df:b3:b3:49:8c:9f:
         c2:c0:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----