Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/8_iKYhsPb1cW0HHdoh84pr69p4I.mft
File:                     8_iKYhsPb1cW0HHdoh84pr69p4I.mft (raw, json)
Hash identifier:          DQ4+8HF/Nz0mL11u5KxluiCm17TGR5vpWCvBLL/xaUU=
Subject key identifier:   3E:79:5F:90:BB:DA:69:B0:F3:4F:3B:4D:0A:74:92:68:1C:34:4F:AE
Authority key identifier: F3:F8:8A:62:1B:0F:6F:57:16:D0:71:DD:A2:1F:38:A6:BE:BD:A7:82
Certificate issuer:       /CN=f3f88a621b0f6f5716d071dda21f38a6bebda782
Certificate serial:       0191C245EC614E32578FD6CFE36AA5735060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_iKYhsPb1cW0HHdoh84pr69p4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/8_iKYhsPb1cW0HHdoh84pr69p4I.mft
Manifest number:          0D63
Signing time:             Thu 05 Sep 2024 13:00:47 +0000
Manifest this update:     Thu 05 Sep 2024 13:00:47 +0000
Manifest next update:     Fri 06 Sep 2024 13:00:47 +0000
Files and hashes:         1: 8_iKYhsPb1cW0HHdoh84pr69p4I.crl (hash: D8Cjij6+huAoeItH7wTEymMlPDRdYyESDhMbR+AuQhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:c2:45:ec:61:4e:32:57:8f:d6:cf:e3:6a:a5:73:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3f88a621b0f6f5716d071dda21f38a6bebda782
        Validity
            Not Before: Sep  5 13:00:47 2024 GMT
            Not After : Sep  6 13:00:47 2024 GMT
        Subject: CN=3e795f90bbda69b0f34f3b4d0a7492681c344fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:71:ae:ae:34:01:75:c7:3e:7c:d5:77:d8:31:
                    41:1b:a5:58:e5:6b:3e:bb:84:b5:44:2d:ac:67:cd:
                    2f:f9:b5:50:c4:22:2f:7d:a7:2a:3a:7d:ea:15:57:
                    bc:d8:96:6f:66:72:2a:11:59:b7:26:f4:3d:f3:39:
                    e5:ec:66:e3:9e:c1:0d:37:14:f9:7f:5b:04:aa:a1:
                    a9:8c:9b:71:a0:0f:db:f1:5b:f8:99:10:dc:f6:9d:
                    ec:40:4c:bb:f6:af:b5:c1:a9:cf:46:ae:0d:2b:ef:
                    dd:8f:b1:7b:d8:23:5b:00:6a:01:ca:ad:0a:22:20:
                    ae:14:cc:12:85:1b:5a:20:a9:06:cd:ef:54:63:e0:
                    67:f0:75:08:89:55:7b:c4:dc:f6:35:1e:06:61:b6:
                    a7:17:3b:7d:2e:86:c5:10:1f:4b:8e:b8:82:39:d8:
                    19:48:66:57:ff:1a:19:4c:7e:ba:d3:ad:4c:99:e3:
                    18:9f:90:17:b0:20:6c:d3:b9:2b:aa:e4:1a:cd:6a:
                    e1:52:ab:3d:02:41:96:0f:5f:41:cf:14:5d:86:c2:
                    d7:64:33:fd:d8:59:32:88:51:bc:53:45:10:1e:ef:
                    82:13:f2:c5:6c:3b:98:c6:03:38:66:2f:82:ca:29:
                    5f:d3:ff:be:a1:28:78:e2:f3:cd:f3:be:e1:b1:76:
                    a5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:79:5F:90:BB:DA:69:B0:F3:4F:3B:4D:0A:74:92:68:1C:34:4F:AE
            X509v3 Authority Key Identifier:
                keyid:F3:F8:8A:62:1B:0F:6F:57:16:D0:71:DD:A2:1F:38:A6:BE:BD:A7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_iKYhsPb1cW0HHdoh84pr69p4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/8_iKYhsPb1cW0HHdoh84pr69p4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/73cfad-649f-41c6-b123-aeb2a7c9f817/1/8_iKYhsPb1cW0HHdoh84pr69p4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:49:94:63:81:b7:e1:25:38:73:d3:9f:ee:a4:28:0b:ad:
         ac:60:12:22:62:ae:0d:10:d4:96:44:44:13:43:96:b8:b8:ec:
         a6:f4:bb:e6:3d:47:89:07:05:67:32:cd:f3:56:9d:32:ec:bd:
         16:b8:23:5a:60:e1:52:84:61:7f:a7:e4:4d:b9:a6:e0:85:a9:
         fd:56:23:83:10:3b:70:c4:04:11:03:d9:d9:43:dc:b9:c9:35:
         3d:56:b9:1c:17:12:c0:5e:c8:8e:95:96:ab:13:dd:4a:fc:f3:
         d1:80:5f:ad:c2:09:c0:bb:ca:61:cb:d6:2a:24:cf:ce:8f:6a:
         b1:55:02:90:1a:56:8a:5f:44:de:57:48:11:3f:a9:09:4c:21:
         17:0e:14:2a:5a:c4:21:20:7f:cb:02:2a:20:94:ff:43:30:c2:
         99:50:05:a5:b4:3f:01:7f:86:03:4d:6a:c0:c4:d3:87:df:cf:
         57:74:5c:7f:e1:95:33:a6:0d:a6:03:95:48:26:a5:ef:c2:ba:
         f4:b2:6c:f8:44:37:ba:d1:8e:1f:fc:55:5c:c8:e2:50:02:38:
         db:bd:f4:e2:09:f8:3d:3c:90:dd:fa:fc:0c:d3:0b:9a:37:83:
         cd:b7:5d:90:a0:e6:a9:54:29:df:fe:4d:72:12:e5:a5:b0:44:
         f8:8a:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----