Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.mft
File:                     49qlehhT2z-5Q7n7CyiBnbNwsnE.mft (raw, json)
Hash identifier:          P7ZjrCVLPjDemAu69V5KNDyHazUrZ8o1hoEA8ZEzV4s=
Subject key identifier:   90:C2:5A:F8:00:19:09:6F:96:37:F7:85:63:2F:7F:26:73:95:9B:2E
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Certificate issuer:       /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial:       018C811769FAE0A6E5BFBC9923DB506F26E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.mft
Manifest number:          0924
Signing time:             Tue 19 Dec 2023 08:00:44 +0000
Manifest this update:     Tue 19 Dec 2023 08:00:44 +0000
Manifest next update:     Wed 20 Dec 2023 08:00:44 +0000
Files and hashes:         1: 3WPnX86mSDFivb62-aygAV7Gbsg.roa (hash: WjCbs9ecCKOAG0uWDSYbsAucVSif6egnO3Jc7Wfearc=)
                          2: 49qlehhT2z-5Q7n7CyiBnbNwsnE.crl (hash: qJdt+Hnnv5E2yzxkQxiqvSgbiGdb5vlE6KZxX0EUisw=)
                          3: DkV8Zbj3UqtTeygQIl6Mm_h1JCo.roa (hash: rgVEM8f4iit+QJ5VqUqtHt5J2TyCfDntIyhKia/s+58=)
                          4: _0U_tt0MBbbMMY_6uFbHcO2qHII.roa (hash: JdW0n3DtJFmRMK7RNqyRduN2u/9aZTIGnGHf+FPqj/Q=)
                          5: _Ymjnq1ti-HpO40O_tsQDoKGEEc.roa (hash: 2Fxd0uW+AOYU4Tdk7pMDziGOW53CNhxx7HamJG8xoDQ=)
                          6: ejuRFoOHty1ublZN9K_JCMucEE0.roa (hash: D0V+s12ekgLBWaPig18C7jlgBYn1armMdsmRB3JdFpE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:17:69:fa:e0:a6:e5:bf:bc:99:23:db:50:6f:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
        Validity
            Not Before: Dec 19 08:00:44 2023 GMT
            Not After : Dec 20 08:00:44 2023 GMT
        Subject: CN=90c25af80019096f9637f785632f7f2673959b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:05:24:38:7d:c8:88:6a:56:f8:72:1a:1a:9c:
                    90:a9:70:f1:ca:a7:c1:35:ba:1d:7f:4a:da:c4:f6:
                    66:ee:0d:09:21:85:bb:00:b0:23:6f:2c:85:77:e8:
                    81:01:82:39:c0:6d:bb:1f:ea:90:ad:0c:b0:1d:16:
                    46:91:b8:ba:04:fb:1c:0a:b0:57:36:50:36:67:92:
                    c1:27:af:6b:24:09:04:18:40:02:58:15:14:24:8f:
                    b5:61:7d:56:67:1c:a7:ab:3a:e2:a3:6b:92:49:3a:
                    fc:1c:1c:e5:5a:29:d8:e9:fe:7d:96:e3:4c:a5:66:
                    83:6f:27:d6:aa:3c:5b:e1:16:fb:69:b1:b0:05:18:
                    d4:99:1b:d1:83:4d:b9:2a:e9:77:24:cd:18:ef:ec:
                    f2:80:62:91:be:82:ce:a8:4d:37:9a:f1:a2:45:67:
                    6d:21:5c:7d:8b:77:01:f1:92:08:34:35:2d:1e:b5:
                    89:8d:a7:8d:4a:51:92:c8:51:89:57:d2:36:ec:35:
                    85:f9:b2:d6:dc:32:26:fe:51:65:ec:f3:07:da:b8:
                    34:da:bd:0b:44:89:25:56:9c:c6:ae:71:93:0b:e8:
                    d7:04:c2:f6:45:1c:cd:5b:a4:75:6b:f3:fb:8e:70:
                    81:55:e8:b1:e4:ec:17:f4:84:79:86:9a:9c:03:4b:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C2:5A:F8:00:19:09:6F:96:37:F7:85:63:2F:7F:26:73:95:9B:2E
            X509v3 Authority Key Identifier:
                keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:88:75:a2:e4:7e:22:c9:86:e2:c3:89:85:de:a6:b4:00:
         c9:f5:88:12:5b:da:d1:ee:4c:3c:6d:26:b0:52:61:6b:d8:5a:
         52:3d:c5:30:c9:f4:ed:20:b4:72:4a:39:02:fa:b7:6d:35:8a:
         4c:97:04:56:ab:10:38:5d:e4:ad:c0:ec:79:c4:31:13:73:3b:
         5b:64:19:94:15:05:86:0d:dd:ea:83:68:65:3a:05:4b:d3:e6:
         3f:f9:30:a3:db:ef:21:7d:b5:54:33:ff:aa:93:71:30:64:40:
         71:a8:05:3c:5d:2a:72:95:c0:fe:e3:63:93:d0:34:4e:b7:86:
         e2:32:4b:02:9d:1b:5a:ed:f8:c0:32:e4:9d:b0:9c:d8:ff:22:
         f8:ab:44:2e:b6:3b:9d:8c:08:b5:4e:05:bc:ad:a0:7d:fb:f8:
         c3:ea:11:5c:37:67:c7:8c:f4:79:6b:ef:bf:77:44:d6:55:17:
         89:36:1e:7e:56:89:54:1c:64:2b:3a:bf:d6:d0:9b:b3:36:0d:
         13:41:b4:fc:e0:64:a7:b2:49:3d:4f:1e:75:21:5f:e6:c7:0c:
         e9:90:1c:79:2f:f5:74:ef:58:c2:51:68:4b:50:d9:48:b1:9a:
         59:fe:53:b1:5b:3a:54:6e:b2:63:50:b7:81:42:6e:b5:68:61:
         38:f2:4f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----