Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
File:                     yKYn5qZ_e2l9j7ryybB158cuqws.mft (raw, json)
Hash identifier:          qDuF1et+v5cqyhPoSQxzfNAlBI0XN9bG/a4twb2Fvbc=
Subject key identifier:   6D:6E:68:C8:33:D3:BE:48:EB:9A:4E:6B:88:2A:C1:43:A7:F7:29:36
Authority key identifier: C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B
Certificate issuer:       /CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
Certificate serial:       018EFD861F047A13F90FC3F14D3CA5C13DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft
Manifest number:          08F1
Signing time:             Sat 20 Apr 2024 22:00:09 +0000
Manifest this update:     Sat 20 Apr 2024 22:00:09 +0000
Manifest next update:     Sun 21 Apr 2024 22:00:09 +0000
Files and hashes:         1: dXaN8mxXjyc5-mDM_nKc_sIqIWw.roa (hash: +A+nM5jbyH0PyEGq84fweHuOsJi+pxpYJGfjTCax71M=)
                          2: ovq9SHaGHSZtUyimJkIoTGn8INk.roa (hash: CXb3LyRj5VuCMLVlACtqxz/81TDLV0/hwVMMXGdNbNo=)
                          3: yKYn5qZ_e2l9j7ryybB158cuqws.crl (hash: miqMX3vV2V9Ja59PB0ALOBOBEFWoDz4J0ZU9vgQuWhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:fd:86:1f:04:7a:13:f9:0f:c3:f1:4d:3c:a5:c1:3d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a627e6a67f7b697d8fbaf2c9b075e7c72eab0b
        Validity
            Not Before: Apr 20 22:00:09 2024 GMT
            Not After : Apr 21 22:00:09 2024 GMT
        Subject: CN=6d6e68c833d3be48eb9a4e6b882ac143a7f72936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:88:d9:68:28:bd:cc:5e:ac:1f:bd:6e:e7:
                    2f:6e:4d:a7:3b:76:ca:3f:60:70:c0:ab:02:b2:43:
                    19:51:ea:39:e8:64:81:40:65:dc:47:01:13:f6:d5:
                    52:a0:16:6c:2e:33:63:c9:d4:50:2d:e0:26:fa:20:
                    c6:c1:a4:c2:92:fc:5e:77:41:df:d4:28:bc:14:12:
                    f2:cb:27:e0:9d:6c:51:5a:e5:6e:c6:ab:70:b0:3a:
                    aa:1c:0b:16:a9:43:42:e9:ac:83:13:ad:6c:2a:47:
                    13:24:28:81:99:e1:e0:da:c1:f4:5d:49:f5:f6:22:
                    91:bd:64:7b:3b:8e:f8:29:5b:fa:08:b8:04:47:8b:
                    31:c2:e7:42:93:d0:e6:2b:de:1a:52:8c:0b:36:0e:
                    3c:c0:a2:aa:90:b0:95:05:2e:88:f2:c2:9b:ea:eb:
                    f9:d1:0c:27:6e:d1:f4:b0:b5:3d:02:30:57:5e:5e:
                    e2:72:8c:1b:9f:3b:28:b8:96:6e:f8:69:94:7c:fd:
                    df:42:a4:f0:48:14:0b:5a:46:c7:82:28:1e:54:27:
                    db:bc:c1:b1:c9:85:a8:7e:d9:b0:92:14:07:aa:a1:
                    6d:b7:81:09:df:f3:16:8b:50:7e:db:42:ab:8c:f7:
                    77:ac:8d:23:c9:5f:fb:73:21:ab:0f:a0:00:df:58:
                    e5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:68:C8:33:D3:BE:48:EB:9A:4E:6B:88:2A:C1:43:A7:F7:29:36
            X509v3 Authority Key Identifier:
                keyid:C8:A6:27:E6:A6:7F:7B:69:7D:8F:BA:F2:C9:B0:75:E7:C7:2E:AB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKYn5qZ_e2l9j7ryybB158cuqws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd05d5-373a-45ff-84ba-404c00adec91/1/yKYn5qZ_e2l9j7ryybB158cuqws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:81:7d:f0:a5:68:8c:a2:bf:ed:6e:e1:2f:24:3f:00:64:
         4d:48:a3:bd:64:21:d2:65:f6:eb:e2:58:61:f0:13:25:b3:8a:
         25:1c:4d:94:22:a4:f7:73:d5:d8:73:1f:0e:d6:07:df:15:d9:
         48:fc:d6:9b:ca:e7:aa:ff:07:c2:88:b0:ba:15:1e:5e:28:6c:
         d5:6a:91:09:9c:fd:34:55:6f:00:b2:73:df:ed:86:9f:bf:ea:
         d6:62:a0:42:36:23:9c:5b:79:bb:e7:31:59:5e:57:42:0e:57:
         f0:8c:d2:f1:ab:4f:9a:38:e6:dd:90:81:09:ac:be:46:b8:da:
         13:c4:06:d2:2a:d1:c3:77:eb:ef:0d:f7:0b:61:e7:b7:89:4b:
         c4:a6:4e:0b:c6:cc:77:61:ed:fb:b9:00:58:dc:38:de:21:e2:
         85:d5:a7:ea:8b:87:83:86:0e:12:d1:ac:41:a6:07:18:8e:f1:
         72:98:c3:7f:e1:22:63:44:5f:f5:49:44:32:2f:cc:f5:65:4d:
         db:14:ea:a7:2f:4a:97:19:d7:d6:65:9f:a9:e7:a2:1c:69:38:
         93:2a:93:db:d4:25:41:03:36:62:97:7d:2c:f9:6a:16:43:ab:
         d9:10:35:88:c0:e7:c5:63:ce:59:7c:c1:81:98:54:ff:b9:ed:
         d1:aa:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----