Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.mft
File:                     xT_rKsYPoxP5pzAOTF7jO0Oog0E.mft (raw, json)
Hash identifier:          Q7ya1/IJ3H2Rcc/B0EmWWLwjNguWasX+9ez032nize4=
Subject key identifier:   07:02:D2:7E:AB:87:DA:EE:4F:45:15:5A:FD:A2:CF:06:0C:0C:8C:D6
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Certificate issuer:       /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial:       018E8337EC048586ACBADB7057F9C7F3C323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.mft
Manifest number:          10F3
Signing time:             Thu 28 Mar 2024 04:01:03 +0000
Manifest this update:     Thu 28 Mar 2024 04:01:03 +0000
Manifest next update:     Fri 29 Mar 2024 04:01:03 +0000
Files and hashes:         1: HScTAY9dPQ1CMUh0YDpkJ4Kuhnw.roa (hash: 9eGLvQJyBSkTpePfWE5xMDznRnPS/ihXz2VPE0ENDPY=)
                          2: p42tVKRgtW90NYVe4yV4TVcbL8E.roa (hash: Fnu2rBchgcLJYjfD7pLzHkdsd+iSS8drEcgmn9sA27E=)
                          3: xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl (hash: pDLnT/QfS41gvlJLsUHIjMYaBWQZnQ0RWvl4nmBryq8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:83:37:ec:04:85:86:ac:ba:db:70:57:f9:c7:f3:c3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
        Validity
            Not Before: Mar 28 04:01:03 2024 GMT
            Not After : Mar 29 04:01:03 2024 GMT
        Subject: CN=0702d27eab87daee4f45155afda2cf060c0c8cd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:5f:a6:6b:e8:d5:4f:ed:ff:e2:d4:69:5d:
                    49:41:a8:58:95:ab:b3:80:46:cf:f4:2c:5d:34:23:
                    7f:20:3d:49:ab:3e:e7:6c:80:8d:8a:9e:5c:55:15:
                    8a:26:eb:d7:76:4f:7d:d9:7a:4b:f4:7a:a7:70:0c:
                    38:60:fb:0b:73:08:3f:be:fe:b3:1c:2e:68:14:08:
                    84:1a:f7:f5:91:25:6a:64:ba:50:7a:d7:c4:45:c1:
                    15:37:a3:70:1f:cd:4e:49:1a:3d:24:70:51:60:f2:
                    97:ec:97:c0:1c:ac:4c:30:58:fc:32:4b:8b:45:02:
                    3a:b3:3d:f6:f9:3f:7d:1c:ec:73:dc:2b:af:f7:25:
                    7a:76:70:d7:6b:b2:a2:76:d2:a8:ae:cd:5a:18:3a:
                    b8:46:46:b0:76:22:42:a7:d4:ab:15:d8:b3:71:88:
                    6c:81:bf:c8:a0:71:54:c8:45:a2:f5:36:46:93:34:
                    26:2d:14:28:95:16:2f:39:66:9f:9c:26:cf:6a:e6:
                    43:fb:9a:a4:09:af:67:d5:24:38:a9:20:ba:2f:81:
                    77:4f:74:03:c0:d2:23:01:0e:a3:f4:50:f3:d8:b7:
                    d1:d1:5b:e0:0e:6c:77:61:2a:62:12:94:8a:5a:ec:
                    22:16:10:19:ab:48:8d:74:8f:9b:11:61:ca:97:a3:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:02:D2:7E:AB:87:DA:EE:4F:45:15:5A:FD:A2:CF:06:0C:0C:8C:D6
            X509v3 Authority Key Identifier:
                keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:38:38:07:13:ea:96:57:a9:be:9d:e6:bc:10:ed:53:dc:29:
         67:c3:ac:33:00:3d:f1:1e:f2:de:5d:9b:26:e4:39:ea:6d:06:
         2f:36:43:f0:fe:fe:21:47:06:02:20:40:75:83:85:32:74:7c:
         77:c2:74:aa:14:70:0a:31:31:22:12:74:fa:3d:06:6e:95:4a:
         52:67:4f:29:bd:56:fc:ef:98:ad:dd:3a:bf:cb:26:41:42:e4:
         00:d5:5a:af:00:92:8f:62:ee:1c:e9:80:12:2a:f5:4a:1a:01:
         61:d0:22:9c:29:b4:8c:1d:58:b0:28:72:0d:31:e4:88:e4:1c:
         c3:07:13:9c:a2:c0:3d:fd:37:d9:6d:dc:ff:6b:bc:0e:83:36:
         94:4e:87:81:9f:e4:a2:5b:f1:e7:c4:f2:b6:d3:db:d5:60:14:
         b9:b0:f8:ad:56:39:23:ee:a7:03:b0:8b:48:46:3a:a7:90:b1:
         ab:3c:aa:86:9b:dc:bd:fc:72:d7:74:41:10:7e:f6:48:16:d8:
         2a:5c:d5:cb:29:8a:39:dc:cc:88:d6:2e:67:cf:d9:47:b2:c6:
         30:5f:d5:12:e8:90:02:2e:92:6e:46:24:db:ed:0d:a7:77:b7:
         cd:ea:0c:7a:a5:4f:9f:06:46:c5:a0:95:9b:8b:47:90:d4:c8:
         bb:5c:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----