Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/1b0IADXXr8ZgLUh1fpBaV9f2x_E.mft
File:                     1b0IADXXr8ZgLUh1fpBaV9f2x_E.mft (raw, json)
Hash identifier:          YmbFWtYt/w1AXfjx8NXXm2mAj9acQF/if6W666vXeJ8=
Subject key identifier:   DD:C3:1D:07:15:B1:47:A0:9D:E3:99:49:35:89:08:C1:69:0E:0F:52
Authority key identifier: D5:BD:08:00:35:D7:AF:C6:60:2D:48:75:7E:90:5A:57:D7:F6:C7:F1
Certificate issuer:       /CN=d5bd080035d7afc6602d48757e905a57d7f6c7f1
Certificate serial:       018F0FFABBEB0C269DB7EC9D58E199655180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1b0IADXXr8ZgLUh1fpBaV9f2x_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/1b0IADXXr8ZgLUh1fpBaV9f2x_E.mft
Manifest number:          0E79
Signing time:             Wed 24 Apr 2024 12:00:41 +0000
Manifest this update:     Wed 24 Apr 2024 12:00:41 +0000
Manifest next update:     Thu 25 Apr 2024 12:00:41 +0000
Files and hashes:         1: 1b0IADXXr8ZgLUh1fpBaV9f2x_E.crl (hash: C0wS7q3Z+W/jBSGMhMGgYoZTjKciHBJ6rbTXXkeDXCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0f:fa:bb:eb:0c:26:9d:b7:ec:9d:58:e1:99:65:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bd080035d7afc6602d48757e905a57d7f6c7f1
        Validity
            Not Before: Apr 24 12:00:41 2024 GMT
            Not After : Apr 25 12:00:41 2024 GMT
        Subject: CN=ddc31d0715b147a09de39949358908c1690e0f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b4:f4:da:4c:09:5d:5c:e3:0f:a9:ed:15:93:
                    b8:f9:12:fd:ac:ae:45:2e:fc:93:c9:ef:70:13:53:
                    be:29:24:47:67:48:fa:c7:5c:bd:72:f1:03:5d:bd:
                    3e:52:c7:49:b9:98:55:ec:7e:35:fe:58:87:d7:7a:
                    f3:b3:f1:55:2b:f9:14:a3:b7:6b:c1:5f:59:e7:97:
                    f7:0c:7f:95:a0:84:14:8e:72:d8:30:a6:0a:08:18:
                    d4:eb:97:35:26:a6:33:9e:66:d3:93:62:78:59:78:
                    3d:dc:f0:41:7a:59:23:fc:9a:c9:8e:dd:79:3e:03:
                    e7:33:1b:e2:11:30:73:97:49:a0:06:a9:43:2b:1c:
                    1d:c6:fb:d9:b0:78:07:1b:f6:99:35:98:23:d6:9e:
                    b8:f8:38:95:73:3a:26:f8:8f:70:ba:83:d6:5a:54:
                    e8:50:aa:2c:9f:90:20:0c:e0:50:14:92:bb:0f:de:
                    36:6c:f8:1b:d1:1b:11:57:64:8d:ec:2d:98:23:f4:
                    ee:53:c0:52:25:87:7e:ee:f3:3d:ae:13:98:42:af:
                    5d:23:f6:c5:56:e7:8f:b4:14:30:d0:a0:9b:78:f7:
                    44:93:75:ad:5c:93:98:c8:29:b5:d0:3e:be:67:bf:
                    e5:cc:e2:0f:44:8c:76:80:d5:4f:16:a0:c7:73:22:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:1D:07:15:B1:47:A0:9D:E3:99:49:35:89:08:C1:69:0E:0F:52
            X509v3 Authority Key Identifier:
                keyid:D5:BD:08:00:35:D7:AF:C6:60:2D:48:75:7E:90:5A:57:D7:F6:C7:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b0IADXXr8ZgLUh1fpBaV9f2x_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/1b0IADXXr8ZgLUh1fpBaV9f2x_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b2ca30-f82f-4c71-bdf4-ac68f0724962/1/1b0IADXXr8ZgLUh1fpBaV9f2x_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:49:6e:98:d6:50:0f:d9:4d:b6:e2:b5:0e:75:d7:cc:57:dc:
         32:f2:99:51:1b:91:6f:80:e6:4d:e7:ba:65:e0:6f:ff:ce:96:
         f4:bd:bf:3a:77:ee:8f:97:eb:32:76:36:ef:56:06:e9:1b:e5:
         42:4e:a9:90:e8:aa:28:ef:b9:5d:f8:ae:bc:4b:bf:3a:ba:83:
         38:2a:6f:40:74:25:fc:10:90:70:96:e2:9f:aa:55:58:75:c9:
         3e:c9:24:d5:3a:b8:33:d2:91:f6:5e:7f:26:db:ae:5a:f6:8f:
         02:5e:3b:fa:33:66:63:89:a7:22:39:c4:4f:2d:0f:4c:9a:b6:
         a1:99:c0:b1:ff:00:8d:cb:da:8b:25:cb:f2:f1:9d:cb:9f:47:
         89:65:a9:bd:1d:67:00:04:22:02:92:76:f2:68:b5:d5:31:e8:
         61:17:9d:83:f5:bd:c3:c8:c2:c9:94:99:ce:69:75:94:10:ce:
         81:1a:4f:0f:f3:df:77:7c:7b:9b:bb:2e:a2:1e:15:af:7b:13:
         a6:c2:5a:de:3e:07:56:98:db:f7:17:07:49:25:91:dd:30:3f:
         79:77:70:9c:9e:0c:fc:b0:e0:88:82:b0:8b:a5:8a:27:b4:05:
         ec:91:c5:10:26:6f:67:4b:2d:0c:0a:5b:7a:53:c5:11:79:43:
         a3:10:89:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----