Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
File:                     IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft (raw, json)
Hash identifier:          lW8kZ5rbcYdwkTenm43kJW2rxjru0XpxLTAmmnuaoVQ=
Subject key identifier:   3D:A4:69:40:5B:0A:66:58:37:C1:3D:C6:C7:44:83:92:9C:EB:77:CC
Authority key identifier: 21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
Certificate issuer:       /CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Certificate serial:       018D0BEC4FE748441C732DE974CA02E29471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
Manifest number:          0943
Signing time:             Mon 15 Jan 2024 07:00:52 +0000
Manifest this update:     Mon 15 Jan 2024 07:00:52 +0000
Manifest next update:     Tue 16 Jan 2024 07:00:52 +0000
Files and hashes:         1: IZ-NH7o11Jg11C_NIpQAj6dB2o8.crl (hash: UuKt43CXUL6c+7GxsYKyknZk/Aj6LlyGIC/NVaDaih0=)
                          2: QUTYy5DDss2sqMvWr4nwKY0bOlQ.roa (hash: uC04tuGEQAyOoRhUlpjp4+H/dZYIrT4mhF7SihoWXcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0b:ec:4f:e7:48:44:1c:73:2d:e9:74:ca:02:e2:94:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219f8d1fba35d49835d42fcd2294008fa741da8f
        Validity
            Not Before: Jan 15 07:00:52 2024 GMT
            Not After : Jan 16 07:00:52 2024 GMT
        Subject: CN=3da469405b0a665837c13dc6c74483929ceb77cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:b0:43:cc:b0:ac:b7:50:bb:2f:21:e0:2e:
                    94:20:e9:1c:50:8b:1b:94:cf:c7:fe:63:bb:79:78:
                    67:ef:f7:bd:19:81:2d:a9:57:7f:e9:a2:12:bb:e3:
                    37:a3:87:ee:6a:93:8b:03:09:c3:b8:40:a0:b8:8a:
                    a4:15:e5:22:67:28:21:c0:d7:b2:54:30:d9:5e:14:
                    2b:9a:22:f1:d7:c0:fc:1e:70:1e:15:8e:06:db:8e:
                    bf:58:bd:a2:da:89:47:f1:08:83:2e:3c:15:ec:eb:
                    3a:b2:77:93:f0:88:8a:a7:f8:f4:88:ad:49:b0:1a:
                    17:12:f9:3e:f0:57:fe:06:a5:af:77:30:97:ae:e8:
                    ee:d6:5a:0b:1f:75:99:78:0e:23:b3:c0:9a:f4:9d:
                    42:8d:cf:62:32:b3:eb:e7:de:96:e1:6b:d5:05:13:
                    c5:bf:c7:2d:ae:48:85:d0:df:a5:fc:f4:07:96:c5:
                    74:af:2f:02:10:d0:c3:49:f0:f7:21:27:55:b9:dc:
                    0f:dd:8d:ff:48:7d:83:27:00:a8:20:0c:1a:b5:34:
                    01:f8:ef:d4:6f:9c:75:4c:d2:2b:30:d2:ea:0d:7f:
                    6e:2d:8b:24:d4:02:b6:12:7f:cf:e9:cf:0e:68:20:
                    43:cd:c9:f6:6d:a4:6d:15:bc:ee:91:e8:30:4c:14:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A4:69:40:5B:0A:66:58:37:C1:3D:C6:C7:44:83:92:9C:EB:77:CC
            X509v3 Authority Key Identifier:
                keyid:21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ab:e3:a5:e3:67:4d:02:21:53:f2:27:0f:aa:c3:1b:fe:d1:
         26:a9:9e:93:17:d8:e7:3b:ec:8b:64:d7:1e:12:f2:5b:52:6a:
         22:f4:d6:f5:8d:75:a6:1a:62:81:cf:e5:d7:ed:3d:88:a5:fc:
         5b:20:f0:b4:d4:42:62:f0:71:e8:46:fd:7e:68:28:43:20:ee:
         9f:1d:2a:93:65:d4:d6:ba:85:14:95:ed:93:61:91:67:e6:c5:
         68:a6:ee:8c:3d:45:88:5d:a6:ac:61:8b:68:ea:de:e4:3a:24:
         dc:5d:60:cf:74:24:5a:b1:25:6a:44:95:19:cd:73:8f:6d:53:
         1f:6b:a9:ca:2c:0e:58:a7:93:b4:ae:e5:3b:a0:80:a8:47:f7:
         b8:48:ad:60:f1:20:4d:05:b9:ca:a8:c5:ce:95:e1:f4:c5:dd:
         01:1f:47:51:76:cc:9c:b8:af:d8:41:11:c2:bc:2c:bf:a1:fc:
         25:42:64:fe:05:94:8b:f3:70:82:56:1f:08:c0:a7:31:1f:33:
         4b:16:18:ae:d4:48:c1:58:4b:5a:41:0d:62:71:6a:85:a1:a7:
         3d:c9:97:e9:a0:69:10:d3:ad:db:00:c5:58:8f:7d:65:79:8b:
         15:3c:d7:b9:5b:6a:8f:c3:5d:1b:2c:36:00:ad:b0:db:ae:ca:
         8e:7e:4c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----