Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bef9e1-1345-4f75-9ccd-ea8ddaa1fbe4/1/wrMCK1FGl7YHtntuwKRIE_DyEhg.mft
File:                     wrMCK1FGl7YHtntuwKRIE_DyEhg.mft (raw, json)
Hash identifier:          +Ie56kI9BnI7YtPZAastLAfAandnRRWuqlqQW7mql3A=
Subject key identifier:   37:62:C2:4D:75:48:6D:F5:AD:33:3C:EE:1D:2F:9B:A6:E2:93:08:8E
Authority key identifier: C2:B3:02:2B:51:46:97:B6:07:B6:7B:6E:C0:A4:48:13:F0:F2:12:18
Certificate issuer:       /CN=c2b3022b514697b607b67b6ec0a44813f0f21218
Certificate serial:       0191B0AD8ADEF017E709E6A4100BE3F057BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrMCK1FGl7YHtntuwKRIE_DyEhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/bef9e1-1345-4f75-9ccd-ea8ddaa1fbe4/1/wrMCK1FGl7YHtntuwKRIE_DyEhg.mft
Manifest number:          06F7
Signing time:             Mon 02 Sep 2024 03:00:48 +0000
Manifest this update:     Mon 02 Sep 2024 03:00:48 +0000
Manifest next update:     Tue 03 Sep 2024 03:00:48 +0000
Files and hashes:         1: IGkwZoh_RPLR6unX268V2TMZ32c.roa (hash: DC5FxmO8IxNcP5KnnStbtnqjwbTgJDSubLelGmhDh2g=)
                          2: wrMCK1FGl7YHtntuwKRIE_DyEhg.crl (hash: YmxeqyLHL053qA5BUQOg+IgX2E2Tf7nE/dwrerlBdTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b0:ad:8a:de:f0:17:e7:09:e6:a4:10:0b:e3:f0:57:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3022b514697b607b67b6ec0a44813f0f21218
        Validity
            Not Before: Sep  2 03:00:48 2024 GMT
            Not After : Sep  3 03:00:48 2024 GMT
        Subject: CN=3762c24d75486df5ad333cee1d2f9ba6e293088e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:c9:cb:96:02:e1:86:88:53:a4:e0:60:f4:
                    7f:b2:74:db:68:71:ff:36:0b:aa:1f:69:64:90:f6:
                    86:71:56:f8:23:4e:37:f7:c7:9d:d3:d4:00:1a:7f:
                    c6:4a:d0:da:57:10:7d:29:4f:56:86:1e:60:40:c3:
                    fb:83:77:2b:c7:4f:fa:54:42:b5:76:68:c1:be:fd:
                    48:9c:a6:0f:d6:bb:6e:89:dd:18:a0:48:85:49:07:
                    71:2c:29:7b:88:c2:89:6c:64:f9:74:35:d7:f9:23:
                    59:af:74:63:5f:e5:20:4f:7a:6c:8f:42:c6:9f:0b:
                    5a:cf:eb:4f:45:d5:44:3d:b0:93:3c:f5:0d:0f:88:
                    b2:1d:6a:c6:bb:bb:e8:4a:db:9c:81:65:c3:30:2b:
                    04:b2:d7:81:91:ef:be:6d:c1:00:b4:72:36:9a:a5:
                    e8:3f:da:ed:97:57:ca:6a:63:3e:36:5f:ce:08:38:
                    e3:1c:85:06:12:23:48:5d:bb:59:fd:7d:77:a6:55:
                    75:5f:86:4a:2c:e2:31:2f:4a:25:bd:27:b8:61:11:
                    a7:a3:17:cd:2b:76:f0:af:d1:8f:f0:cf:dd:67:e8:
                    53:79:cc:af:29:fe:12:88:1a:62:df:c0:88:bd:62:
                    d0:8a:94:da:a6:b1:cd:86:e4:32:22:2d:95:80:51:
                    cb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:C2:4D:75:48:6D:F5:AD:33:3C:EE:1D:2F:9B:A6:E2:93:08:8E
            X509v3 Authority Key Identifier:
                keyid:C2:B3:02:2B:51:46:97:B6:07:B6:7B:6E:C0:A4:48:13:F0:F2:12:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrMCK1FGl7YHtntuwKRIE_DyEhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bef9e1-1345-4f75-9ccd-ea8ddaa1fbe4/1/wrMCK1FGl7YHtntuwKRIE_DyEhg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bef9e1-1345-4f75-9ccd-ea8ddaa1fbe4/1/wrMCK1FGl7YHtntuwKRIE_DyEhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:d5:14:95:e7:4f:72:a4:e6:71:9b:72:05:d5:85:a3:ab:
         5d:4f:9e:e8:64:63:2f:2b:4f:d2:7f:99:97:87:61:30:39:55:
         44:a6:cc:f3:41:b1:f3:67:c2:07:02:e9:d1:bb:d1:cd:1e:ea:
         1c:b3:1e:16:b1:3f:10:6e:17:b7:8a:2a:dc:41:37:3a:df:ca:
         82:62:04:9c:a4:ae:98:e1:00:ca:7a:82:a9:f8:83:4a:20:96:
         aa:09:f4:85:44:2a:5a:14:b3:31:ec:80:28:44:fd:33:c4:57:
         ea:d8:1e:fc:f8:06:57:bb:a0:83:63:a9:bd:cf:43:43:bf:77:
         2a:37:01:c6:73:99:eb:b3:28:7e:d3:68:de:61:43:b7:13:43:
         46:51:73:d3:d1:8b:18:02:d3:c9:95:68:ff:bc:dc:cf:cf:57:
         2e:7e:fa:36:18:c6:4c:57:a3:5c:5d:22:d3:d8:fd:b6:3f:3a:
         eb:ef:ca:c4:41:dc:a6:6f:fb:a2:bc:93:d5:7e:63:3a:fe:6e:
         1c:74:20:06:32:cd:69:3e:3f:81:ba:f2:a9:a6:ed:e4:5b:f5:
         20:41:1a:c5:b8:91:19:1b:2d:b2:9d:10:8e:a8:09:54:1d:81:
         02:5c:d3:0e:59:81:e2:8b:33:83:b7:3b:04:bb:c6:a5:2e:1b:
         97:c7:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----