Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
File:                     zxCtkS75QqrLTRCt05kDxun7sDo.mft (raw, json)
Hash identifier:          KiXA0wt+JSYMJm58NqgC347ZaL4uGqueKSbR5DNgkVo=
Subject key identifier:   56:A9:92:40:F5:45:2D:69:E6:75:C4:1A:BA:B4:74:D0:C6:DA:64:49
Authority key identifier: CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
Certificate issuer:       /CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Certificate serial:       0193436FCE6FF526B8EFEE1A78AB231FE10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft
Manifest number:          0BC4
Signing time:             Tue 19 Nov 2024 08:00:21 +0000
Manifest this update:     Tue 19 Nov 2024 08:00:21 +0000
Manifest next update:     Wed 20 Nov 2024 08:00:21 +0000
Files and hashes:         1: RufuW3_xCNrkXrItzwSh1-gqEtU.roa (hash: rS3Btv0ZqtLDbIiRa7t0h8uqqwVYVSfQARh6vcBuITQ=)
                          2: UDU8Pa3uOujL1w0akg2MLry4Qig.roa (hash: KKbTLgoHo1K8c7U1i4ZZNtSs8IVFZkRkKjPhlImrX5Q=)
                          3: zxCtkS75QqrLTRCt05kDxun7sDo.crl (hash: F5PYGg+gQPmP5s28YG+Dnt0IXIXRuSoMFxe1LKCAIDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:43:6f:ce:6f:f5:26:b8:ef:ee:1a:78:ab:23:1f:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
        Validity
            Not Before: Nov 19 08:00:21 2024 GMT
            Not After : Nov 20 08:00:21 2024 GMT
        Subject: CN=56a99240f5452d69e675c41abab474d0c6da6449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:28:f1:f2:92:c3:29:05:82:05:08:16:b6:
                    44:cb:c3:a0:65:f0:15:a3:87:9e:ad:9e:79:e5:b5:
                    ac:f8:66:47:56:e4:97:13:db:ee:2b:40:cb:4e:3b:
                    cc:5c:32:92:ad:d0:3a:5d:b1:4e:e8:13:12:8e:16:
                    27:76:8b:4e:33:7d:f0:c2:f4:fe:6d:30:28:1b:3e:
                    02:a3:6e:3d:04:e2:0b:60:b9:fd:89:00:52:22:17:
                    57:7b:27:15:d7:65:43:b5:6a:06:eb:1b:da:db:b7:
                    df:26:61:84:d1:9d:ae:30:b6:61:16:19:ae:26:56:
                    43:91:89:82:31:82:20:0a:e8:9a:3f:fb:80:49:e4:
                    3e:b1:8f:f0:50:28:8c:0e:66:5b:8e:35:59:b4:38:
                    17:50:7f:c3:25:22:d1:9e:eb:fe:e4:d8:f6:5a:37:
                    c9:e5:d0:2f:1a:4e:d4:0a:7d:33:b1:e3:47:f1:23:
                    e0:fb:f6:13:55:69:2a:5f:7f:fb:cc:0a:ea:d8:23:
                    be:16:9a:74:11:39:4a:63:98:d1:07:3d:6e:60:c7:
                    84:ff:2a:74:67:b2:01:03:a6:24:10:ba:35:1d:d3:
                    11:d2:67:91:f8:bf:04:60:8f:18:fa:e7:91:3c:02:
                    81:61:41:e7:d7:51:4f:e7:f1:9e:25:4f:17:5b:1e:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A9:92:40:F5:45:2D:69:E6:75:C4:1A:BA:B4:74:D0:C6:DA:64:49
            X509v3 Authority Key Identifier:
                keyid:CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:f9:19:fa:32:a3:f6:0b:4e:ff:0e:ea:e2:4f:0a:3d:e7:
         3c:e6:01:f5:2f:58:20:3c:46:9f:6c:45:b1:74:37:0d:2e:60:
         20:61:ca:81:a3:32:8f:2d:c0:e8:20:db:6f:69:e8:db:55:1f:
         6d:d1:5a:69:91:49:83:9a:d9:4a:a5:92:92:8a:44:f8:8f:00:
         5b:e5:27:e4:ee:0f:82:40:2a:a7:46:3d:d5:3f:3d:9e:5f:e6:
         7e:28:97:70:fc:e3:01:4a:b2:5d:f0:33:39:87:72:ad:81:4f:
         35:f5:a5:39:cd:98:72:e3:2d:e7:ae:a5:e3:1c:26:29:b7:3d:
         b3:a9:d6:26:02:fe:e7:b1:b9:b9:63:8c:c7:07:fa:b5:48:73:
         36:c9:b1:42:eb:a4:67:b3:89:32:5c:f8:a8:e6:37:4c:38:8b:
         00:d9:f7:82:f0:8a:04:7a:d0:34:5e:1c:ee:f9:d3:50:a8:2f:
         8d:07:b5:36:ab:05:f2:72:a4:f9:c4:f0:1c:bd:e7:e5:84:ee:
         42:e8:4f:73:11:4c:c7:49:ec:17:2f:ae:c1:ea:10:97:25:2d:
         08:eb:6c:a6:f4:8f:ce:d7:10:b3:52:98:e6:40:62:e2:80:6e:
         a8:66:95:f8:6b:9f:4b:b4:8d:4f:cc:1a:b8:32:de:fc:61:49:
         da:e3:c8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----