Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.mft
File:                     7TFBIglo0K5EBF5oNpmZKOyoZLg.mft (raw, json)
Hash identifier:          oqOcnoEzS87q3hzJayaA542FP1slSSf/EQ0TDCCUESc=
Subject key identifier:   B1:C2:79:CA:5E:9D:48:D4:29:B9:C3:8E:31:B0:0E:4C:40:43:86:65
Authority key identifier: ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8
Certificate issuer:       /CN=ed3141220968d0ae44045e6836999928eca864b8
Certificate serial:       018977C22FF7FC76C290E09C85E23A3BA2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.mft
Manifest number:          0E4A
Signing time:             Fri 21 Jul 2023 09:22:42 +0000
Manifest this update:     Fri 21 Jul 2023 09:22:42 +0000
Manifest next update:     Sat 22 Jul 2023 09:22:42 +0000
Files and hashes:         1: 7TFBIglo0K5EBF5oNpmZKOyoZLg.crl (hash: Ru8ngkQ8vagASh+UpiRWT8ZjwUv3FUITXFjWRl6xrXw=)
                          2: UU6tLpkAgcGXQBKYNt1ixd6UT_s.roa (hash: sbQkGosfvYed00K0i5Qf9A6Q+ACjdzIy6l5MBI7zSQM=)
                          3: c6_xzt9BLk41mFMxdpUEYlDHIjY.roa (hash: q6UOPFnw3H0IbKVjd2ahW72yniR4x7QcvaO5GOePy/E=)
                          4: ocn7bukAypyPjfWMRVg9vSP19Go.roa (hash: xo5MTytmqGsnRb4jGpI1N8VgAI/0DyTlAvXkvxoOr58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:77:c2:2f:f7:fc:76:c2:90:e0:9c:85:e2:3a:3b:a2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed3141220968d0ae44045e6836999928eca864b8
        Validity
            Not Before: Jul 21 09:22:42 2023 GMT
            Not After : Jul 22 09:22:42 2023 GMT
        Subject: CN=b1c279ca5e9d48d429b9c38e31b00e4c40438665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:8f:05:3f:85:e3:79:9b:37:55:ec:14:03:
                    96:55:60:12:bd:fb:de:54:6d:c0:af:70:a2:d8:b4:
                    dc:14:00:1f:cf:94:e2:9b:55:82:74:e3:81:2d:2b:
                    cf:9c:1e:17:33:43:a0:f1:03:38:b8:ec:3a:27:38:
                    95:53:0c:9f:dc:9c:7f:5c:d8:65:25:bc:4a:c3:72:
                    2a:4e:25:9d:29:b7:88:08:d0:50:41:ac:99:f7:8a:
                    9a:02:02:1e:0b:4d:02:9b:c4:93:3f:d3:15:14:da:
                    ef:62:94:e5:14:b2:e2:5e:13:aa:34:8d:1b:d9:d2:
                    48:3a:a2:03:47:7a:80:54:22:31:f7:26:8a:38:64:
                    f6:3e:c2:6a:85:c2:0a:3a:f6:2a:c6:b7:72:09:c9:
                    21:bc:05:0e:72:52:87:1b:0e:f9:d9:8d:e5:fe:83:
                    82:fd:0a:46:9c:9c:fa:9d:8e:13:3f:a4:b7:cc:e2:
                    66:4d:22:3e:e3:ff:b9:ec:97:79:6c:c9:cc:ba:e7:
                    1a:2f:1d:af:dc:1a:d5:af:a6:06:f8:92:c2:f2:39:
                    05:9e:21:39:28:7e:73:e9:21:33:8d:15:74:7b:5f:
                    d3:5d:80:d8:1e:c5:59:a8:c1:83:02:47:48:cb:27:
                    dc:4c:0b:ba:cb:78:18:9b:de:77:cf:83:42:d8:76:
                    0f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C2:79:CA:5E:9D:48:D4:29:B9:C3:8E:31:B0:0E:4C:40:43:86:65
            X509v3 Authority Key Identifier:
                keyid:ED:31:41:22:09:68:D0:AE:44:04:5E:68:36:99:99:28:EC:A8:64:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TFBIglo0K5EBF5oNpmZKOyoZLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4609ad-0b95-40e4-b053-ad5d53699dd8/1/7TFBIglo0K5EBF5oNpmZKOyoZLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:40:2e:fd:e7:ba:7f:1f:cc:fd:a5:d4:59:c1:e6:5a:cb:
         6e:29:1d:23:a0:e1:47:97:99:50:5f:50:7f:ac:ba:7a:ca:5a:
         e3:16:cc:c0:94:17:fc:0b:a2:20:78:eb:6d:c3:37:03:4e:7a:
         59:05:c2:56:fc:a2:dd:ec:33:04:42:7c:ef:7e:ab:d8:4e:2c:
         7f:c6:66:d6:e3:1f:fd:49:3a:97:7c:47:6b:8c:97:4a:d3:8a:
         18:11:a9:7c:a5:f1:98:b6:9b:75:0f:e2:f8:95:74:1d:29:ad:
         58:16:b7:8f:f8:34:09:aa:be:d5:01:8f:33:72:db:36:7c:10:
         a4:2e:05:1d:c5:d5:0d:12:bb:f7:10:04:b7:4f:d8:e6:21:f6:
         85:55:44:b1:f4:c3:6b:e1:2e:3c:4d:ab:27:dc:66:a9:45:38:
         dd:09:d2:d5:86:45:56:59:74:c8:c2:00:44:7e:4f:d9:4d:a2:
         f6:3f:40:51:1c:43:3a:0d:47:5e:ec:a7:01:17:6d:ab:e1:b0:
         95:3d:37:4e:bc:ef:eb:93:42:f9:47:01:ee:a5:7f:44:7a:a9:
         c4:e1:58:2e:c9:13:e2:fa:2c:db:35:cb:62:91:1f:91:86:49:
         88:eb:83:e8:ef:37:a1:5d:9b:27:a5:25:16:b9:9b:32:6f:60:
         7c:72:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----