Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft
File:                     eqGomGyJZ2Gvx_j4gevDBCDodms.mft (raw, json)
Hash identifier:          Bpx2mJhLFwz86f8m2cSTP31uz4mMUjqnhS4K6I5L01s=
Subject key identifier:   BE:FD:98:42:3E:DB:62:CE:69:88:82:74:D3:0D:17:E2:0D:05:B4:29
Authority key identifier: 7A:A1:A8:98:6C:89:67:61:AF:C7:F8:F8:81:EB:C3:04:20:E8:76:6B
Certificate issuer:       /CN=7aa1a8986c896761afc7f8f881ebc30420e8766b
Certificate serial:       018D0BB63AAE5387A32E95A58ACC0FB55B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqGomGyJZ2Gvx_j4gevDBCDodms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft
Manifest number:          0FBD
Signing time:             Mon 15 Jan 2024 06:01:48 +0000
Manifest this update:     Mon 15 Jan 2024 06:01:48 +0000
Manifest next update:     Tue 16 Jan 2024 06:01:48 +0000
Files and hashes:         1: eqGomGyJZ2Gvx_j4gevDBCDodms.crl (hash: tuCSke2tsQd/mOVSfi0hOsOX+ur+eoXgWXuApm3ddoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0b:b6:3a:ae:53:87:a3:2e:95:a5:8a:cc:0f:b5:5b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa1a8986c896761afc7f8f881ebc30420e8766b
        Validity
            Not Before: Jan 15 06:01:48 2024 GMT
            Not After : Jan 16 06:01:48 2024 GMT
        Subject: CN=befd98423edb62ce69888274d30d17e20d05b429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:f3:5f:ef:62:f0:68:68:e8:ae:c2:72:9d:
                    ca:66:1a:6e:c6:ca:bf:bf:fe:59:98:90:76:d0:bd:
                    25:2b:7e:42:e3:86:b9:a5:41:18:05:6f:7b:0c:4a:
                    e6:b0:11:f8:c1:03:ac:3f:be:a9:53:8e:9b:58:6a:
                    a3:16:32:ae:87:b8:5e:45:ce:ad:78:9a:36:bd:a0:
                    54:c9:ff:4e:89:c0:a9:01:81:35:16:65:51:d1:08:
                    74:11:0c:aa:f5:8d:59:b3:61:f8:49:84:76:dd:4f:
                    d1:4f:41:a3:cb:8a:3e:8f:b2:b9:2c:04:46:1d:a2:
                    d0:d8:a0:68:bd:5f:df:82:6c:db:42:f3:4d:df:2a:
                    a8:17:73:bc:39:3e:cd:3e:69:bd:fe:dd:f4:53:30:
                    7c:7d:51:41:9d:c3:3a:39:f8:bb:06:25:f0:33:a4:
                    66:6c:07:27:2a:ce:c9:a5:96:cf:cd:cd:61:7b:d7:
                    7a:5c:f2:21:f4:07:f7:16:33:78:52:13:fb:47:22:
                    96:cb:0c:79:fe:ee:7e:23:43:ed:6b:9e:41:ae:4d:
                    ae:ef:65:70:73:67:a1:15:af:35:7c:f9:82:d8:88:
                    3c:a9:6b:70:61:27:4a:82:6f:6e:22:b3:74:7c:e8:
                    50:d2:44:24:ac:69:27:0e:a8:f7:78:84:b8:6c:41:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FD:98:42:3E:DB:62:CE:69:88:82:74:D3:0D:17:E2:0D:05:B4:29
            X509v3 Authority Key Identifier:
                keyid:7A:A1:A8:98:6C:89:67:61:AF:C7:F8:F8:81:EB:C3:04:20:E8:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqGomGyJZ2Gvx_j4gevDBCDodms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b0:9f:0c:45:17:34:16:70:79:2f:79:28:a0:96:5d:44:ec:
         b1:de:f1:25:7a:a7:35:63:60:44:b2:66:84:e3:99:24:c0:fc:
         b3:85:4a:b6:19:71:54:b9:c3:b0:ff:a7:09:28:89:6d:64:af:
         52:0c:f8:04:73:51:43:cf:db:fe:45:4d:ed:5b:7c:4c:ee:c8:
         ac:99:f9:e3:a8:87:8d:11:b6:89:dd:5a:68:a7:32:23:34:57:
         0d:c8:fc:43:3e:54:a3:f1:d7:c8:ec:55:82:77:f8:05:e0:71:
         80:1a:a7:a6:17:62:28:0c:e3:bc:12:fc:1e:4f:4a:eb:44:42:
         96:04:d2:05:5f:02:74:68:e0:3e:b1:5b:6d:ca:d7:3a:62:c7:
         cb:2e:d7:64:33:05:6c:e6:46:ee:78:69:06:af:5a:90:59:14:
         0d:5d:1b:78:c7:5e:51:64:b5:ff:02:14:b5:e5:ec:0b:69:7c:
         5c:14:bf:a2:f0:bb:74:84:46:7d:0e:a5:7e:25:9c:e6:01:76:
         bc:0e:98:f1:66:cc:3d:fb:fd:d3:78:b9:8f:75:e5:9c:a9:4c:
         0b:99:42:7d:7a:49:ea:65:ab:f6:f1:1c:01:46:77:e5:16:ff:
         d0:03:12:14:a6:15:94:e4:36:2a:a2:d4:ee:7d:7e:0d:dc:68:
         b8:3c:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----