Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f2471-efd9-49ca-986a-9c8ef6039d26/1/CsYlC14T8Ww17usPrvfaIv4y8sY.mft
File:                     CsYlC14T8Ww17usPrvfaIv4y8sY.mft (raw, json)
Hash identifier:          P30qDrW2T2514aIrk3zI507mzfi/+N96VUAD9tTLvlk=
Subject key identifier:   C6:48:09:69:66:54:27:65:45:06:A4:2B:2F:B5:86:E2:90:8F:D2:43
Authority key identifier: 0A:C6:25:0B:5E:13:F1:6C:35:EE:EB:0F:AE:F7:DA:22:FE:32:F2:C6
Certificate issuer:       /CN=0ac6250b5e13f16c35eeeb0faef7da22fe32f2c6
Certificate serial:       018F9E7597E9F19F3AAD57BCE1035A41437E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsYlC14T8Ww17usPrvfaIv4y8sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/0f2471-efd9-49ca-986a-9c8ef6039d26/1/CsYlC14T8Ww17usPrvfaIv4y8sY.mft
Manifest number:          1002
Signing time:             Wed 22 May 2024 04:00:57 +0000
Manifest this update:     Wed 22 May 2024 04:00:57 +0000
Manifest next update:     Thu 23 May 2024 04:00:57 +0000
Files and hashes:         1: CsYlC14T8Ww17usPrvfaIv4y8sY.crl (hash: E8Yq2eIa02Pg4EOpSNZdF9Y04uF918GXdBeDGRnvZSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9e:75:97:e9:f1:9f:3a:ad:57:bc:e1:03:5a:41:43:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac6250b5e13f16c35eeeb0faef7da22fe32f2c6
        Validity
            Not Before: May 22 04:00:57 2024 GMT
            Not After : May 23 04:00:57 2024 GMT
        Subject: CN=c6480969665427654506a42b2fb586e2908fd243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:e5:f1:7d:7f:a6:86:49:4f:c4:58:aa:00:
                    8f:0c:c4:2a:ef:56:97:ee:4e:99:99:80:b3:b7:31:
                    7a:bd:7e:75:fa:a4:88:c6:7b:b2:6b:fe:b9:30:ff:
                    80:9b:42:8c:30:e3:79:97:46:4a:5a:ce:ca:c6:42:
                    84:ca:17:9f:14:27:25:70:50:e4:ca:60:43:05:64:
                    19:25:09:49:d9:2e:ff:42:13:5b:8f:df:1e:ab:5e:
                    66:1f:cf:2d:5c:77:6f:92:0a:21:d0:49:e7:a7:1d:
                    90:90:76:39:04:45:a8:bc:c6:b5:f2:08:5b:e4:95:
                    29:af:a7:20:a0:8f:5e:a7:4c:4f:75:71:3c:5f:58:
                    cd:ad:ff:76:1a:5e:bb:52:a1:c9:e0:b6:b3:21:09:
                    42:ee:ad:e1:52:39:2a:7a:28:60:d9:85:ef:6c:73:
                    d3:50:e2:7b:9c:33:ee:0b:d5:5d:12:65:19:8a:a2:
                    dc:5f:8c:25:10:27:99:4f:ae:43:86:bb:3e:8c:5e:
                    22:e4:bd:ed:08:74:97:d4:08:4b:41:e2:00:42:6a:
                    76:f0:58:fb:88:3a:67:c0:ca:75:94:a8:73:e1:47:
                    de:f6:89:bb:33:74:ad:ba:1b:64:6f:97:4b:8c:cc:
                    90:e6:77:9d:10:e0:1b:b6:6f:7b:39:44:d5:5b:20:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:48:09:69:66:54:27:65:45:06:A4:2B:2F:B5:86:E2:90:8F:D2:43
            X509v3 Authority Key Identifier:
                keyid:0A:C6:25:0B:5E:13:F1:6C:35:EE:EB:0F:AE:F7:DA:22:FE:32:F2:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsYlC14T8Ww17usPrvfaIv4y8sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f2471-efd9-49ca-986a-9c8ef6039d26/1/CsYlC14T8Ww17usPrvfaIv4y8sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f2471-efd9-49ca-986a-9c8ef6039d26/1/CsYlC14T8Ww17usPrvfaIv4y8sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5a:15:5a:98:17:8d:6b:24:ef:19:d1:82:18:d1:45:72:39:
         79:53:dd:ed:64:fd:40:6f:79:57:a7:88:4b:da:46:8a:53:e7:
         82:57:1f:61:fc:cb:67:63:0b:17:d8:35:fa:b6:69:25:b8:7d:
         88:84:43:09:82:86:f0:4f:ed:b9:75:ee:ea:35:9f:55:4d:85:
         fd:ed:d7:f0:7f:82:17:aa:06:d8:e0:36:13:48:f8:0f:f5:89:
         71:43:3f:5b:20:5d:51:af:16:ae:5d:e3:42:2d:92:77:2d:ce:
         aa:2c:ca:ba:98:7d:97:f7:41:bf:44:61:b9:dc:6e:66:2f:00:
         b5:ed:fa:3c:8e:69:d3:93:fd:0d:cc:49:39:5e:c4:6c:e1:e4:
         fb:af:f7:8e:39:8b:18:db:e6:5d:86:aa:75:fc:21:b5:4a:5f:
         f5:5c:fb:d9:a0:d3:b8:51:f0:21:35:bd:ee:c3:c0:83:f6:68:
         82:78:51:f8:f2:8b:59:ab:14:e2:d3:77:54:f3:13:13:b2:f4:
         2c:3f:e5:43:94:cd:f6:c4:8e:bc:2e:48:d6:dd:24:1d:a6:91:
         dd:e1:fc:cb:4e:cc:af:49:ec:93:11:64:4b:76:4b:65:fc:d2:
         0b:f5:52:f3:df:d1:1f:14:a2:74:05:e4:2f:c4:52:81:10:a7:
         f5:50:fd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----