Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/17SV5MDrVC1r3I-uPZJrUdVElHM.mft
File:                     17SV5MDrVC1r3I-uPZJrUdVElHM.mft (raw, json)
Hash identifier:          OrGbVxxS2+FbE1HBN0Km7isUAokJNTKvVj3Mfo0TNa4=
Subject key identifier:   89:39:EC:6D:07:87:38:AE:40:38:18:C4:06:0A:83:35:AB:8F:1E:0B
Authority key identifier: D7:B4:95:E4:C0:EB:54:2D:6B:DC:8F:AE:3D:92:6B:51:D5:44:94:73
Certificate issuer:       /CN=d7b495e4c0eb542d6bdc8fae3d926b51d5449473
Certificate serial:       018B607C6504547FC4B2DC0E34CACD961A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17SV5MDrVC1r3I-uPZJrUdVElHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/17SV5MDrVC1r3I-uPZJrUdVElHM.mft
Manifest number:          0812
Signing time:             Tue 24 Oct 2023 07:00:46 +0000
Manifest this update:     Tue 24 Oct 2023 07:00:46 +0000
Manifest next update:     Wed 25 Oct 2023 07:00:46 +0000
Files and hashes:         1: 17SV5MDrVC1r3I-uPZJrUdVElHM.crl (hash: wSYVBceCBCC5u4At1HqbbRMI2a51tSOf9Xnn5BTdsaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:60:7c:65:04:54:7f:c4:b2:dc:0e:34:ca:cd:96:1a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7b495e4c0eb542d6bdc8fae3d926b51d5449473
        Validity
            Not Before: Oct 24 07:00:46 2023 GMT
            Not After : Oct 25 07:00:46 2023 GMT
        Subject: CN=8939ec6d078738ae403818c4060a8335ab8f1e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:8b:41:f8:18:85:7c:84:31:dd:4c:9d:8e:
                    99:ea:4b:4a:52:ea:9b:3b:a4:91:e5:5f:9d:d7:f2:
                    2b:04:83:6b:d8:81:fa:b1:86:50:f7:ab:fc:3b:2e:
                    ca:8f:02:62:b4:64:83:82:b9:b4:9d:73:11:7b:f7:
                    ab:1f:20:c8:01:e3:c9:33:c6:4f:8c:d2:2d:37:14:
                    9d:bd:63:ac:fc:36:d9:92:9c:65:8d:3a:9c:05:8a:
                    e9:7a:84:16:cd:52:bb:17:74:27:21:e2:27:dd:40:
                    c9:24:60:94:50:69:ee:f8:6b:c9:c5:87:f8:32:98:
                    cd:20:80:8b:9e:71:cc:a9:a1:24:91:97:f9:50:fc:
                    12:76:0f:c7:c9:f0:93:6e:0e:50:35:5b:13:4f:1a:
                    7d:29:86:d3:b4:e5:2b:32:99:1b:6e:86:48:18:a2:
                    46:7c:dc:a5:0c:1f:ff:01:d2:30:9a:5d:c8:7d:84:
                    76:19:45:83:05:b9:bb:e4:be:bf:5b:bc:3c:a2:37:
                    93:7c:36:4e:bf:d0:25:ac:cb:b0:8c:2a:23:e6:52:
                    90:ae:d8:8b:a3:85:b0:6e:65:f3:9a:eb:46:91:24:
                    c8:4d:ed:75:f5:ad:62:fd:95:5c:d1:08:20:ad:78:
                    06:2a:b6:46:fb:39:ae:4c:de:63:31:80:16:3e:59:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:EC:6D:07:87:38:AE:40:38:18:C4:06:0A:83:35:AB:8F:1E:0B
            X509v3 Authority Key Identifier:
                keyid:D7:B4:95:E4:C0:EB:54:2D:6B:DC:8F:AE:3D:92:6B:51:D5:44:94:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17SV5MDrVC1r3I-uPZJrUdVElHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/17SV5MDrVC1r3I-uPZJrUdVElHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/fe6e8f-7449-478f-a7e1-a4961294f51e/1/17SV5MDrVC1r3I-uPZJrUdVElHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:54:e0:51:fe:66:22:5c:00:fb:57:a8:7f:87:de:dc:17:1f:
         20:c8:96:54:9d:6b:e9:f7:23:3f:a2:ac:bc:2c:51:a4:3d:5c:
         bf:ae:fa:6d:d5:48:f2:13:14:27:6d:bf:63:21:e1:e0:63:97:
         ea:22:e2:6b:aa:e1:6a:63:ef:10:a3:f8:68:bf:36:11:b3:7d:
         54:8a:41:b6:6e:ad:5f:3a:c6:ce:16:44:8b:ee:7a:37:d9:21:
         fd:3c:7e:36:65:d2:f5:41:f7:24:a9:da:d1:73:5c:e7:1d:01:
         1d:05:ae:7a:1f:05:c5:e7:e6:1a:66:cb:75:1e:a3:43:14:c3:
         74:28:4a:12:ee:fb:b3:3f:62:27:52:f0:cf:a2:1a:3a:65:24:
         d4:ba:b2:fd:ca:01:59:13:1b:b7:c3:29:6d:4c:15:b3:9a:e7:
         f6:f9:7b:9c:d9:77:08:98:03:53:cf:74:62:2c:51:b0:22:dd:
         ea:93:ef:60:be:50:51:e4:d8:16:8a:3e:24:15:69:69:a8:df:
         98:4e:3a:d2:92:38:c2:9d:c2:7d:87:fd:43:dd:22:e3:9e:a1:
         59:f9:08:c3:6f:1e:33:63:a1:39:49:17:d9:bd:ed:13:74:4f:
         64:e8:8d:9a:48:0e:4e:b0:bd:de:9a:d3:64:97:98:33:41:6f:
         48:6d:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----