Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.mft
File:                     dOugEi9kOtygy8b2pGgbbXfpNiA.mft (raw, json)
Hash identifier:          ageoUlkN0R8/5eBhNDUtAf9R1Mxr7XSOEAdeCj1pQGA=
Subject key identifier:   40:3D:59:E8:A6:2A:6B:C7:23:EA:30:0A:A6:4D:A7:85:E0:B8:2F:B8
Authority key identifier: 74:EB:A0:12:2F:64:3A:DC:A0:CB:C6:F6:A4:68:1B:6D:77:E9:36:20
Certificate issuer:       /CN=74eba0122f643adca0cbc6f6a4681b6d77e93620
Certificate serial:       01927496309BA991E4BEABF5C0A325EFD0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOugEi9kOtygy8b2pGgbbXfpNiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.mft
Manifest number:          1229
Signing time:             Thu 10 Oct 2024 04:00:52 +0000
Manifest this update:     Thu 10 Oct 2024 04:00:52 +0000
Manifest next update:     Fri 11 Oct 2024 04:00:52 +0000
Files and hashes:         1: dOugEi9kOtygy8b2pGgbbXfpNiA.crl (hash: FdJiGcL2wNx1FTv8zSs/C1U2R5TN9wMHys6bU4bTahA=)
                          2: dvMKLrYFLe_opLs27-tHnSS5uMY.roa (hash: yciWulMPckuHZ2r7UNAHsTqgZgh8uZ4N9nsz1o4DNOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:74:96:30:9b:a9:91:e4:be:ab:f5:c0:a3:25:ef:d0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74eba0122f643adca0cbc6f6a4681b6d77e93620
        Validity
            Not Before: Oct 10 04:00:52 2024 GMT
            Not After : Oct 11 04:00:52 2024 GMT
        Subject: CN=403d59e8a62a6bc723ea300aa64da785e0b82fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:a7:be:c7:42:a6:59:1a:d7:6b:13:4c:18:
                    9c:68:22:b4:4a:dc:95:26:96:6d:6a:45:2e:4c:48:
                    34:30:49:50:9e:a8:3f:cc:72:24:2e:7a:8a:4e:d2:
                    e5:2a:20:83:6c:9a:b5:d1:1b:07:70:a2:2a:fb:b6:
                    d9:cb:b7:3b:9f:66:5c:6b:cd:5f:5d:a7:6d:93:45:
                    04:f5:e6:4b:20:5d:57:40:25:bd:1c:29:a1:31:05:
                    a8:62:a4:24:c8:a5:0e:07:75:fc:ae:f8:da:61:a3:
                    e2:ea:52:6e:cb:a1:e3:33:a3:d7:e1:ab:a9:4c:53:
                    18:4e:59:2d:c0:f8:e3:2f:57:d4:e2:83:e5:63:4c:
                    4f:2f:46:9f:e8:e3:5b:ea:06:b7:a9:05:b1:62:49:
                    4a:eb:89:68:9a:42:f1:40:2c:e9:d8:61:15:49:9e:
                    3c:f3:9c:8c:3b:83:f8:4b:0a:81:c9:36:50:3f:32:
                    0f:4c:c9:bc:a8:84:67:dc:a8:7f:48:a6:68:9f:f8:
                    b3:31:63:b6:10:44:b9:ec:8d:7f:eb:69:70:dc:5a:
                    4f:31:cd:bd:48:37:49:a1:72:f3:ed:53:df:56:84:
                    b1:aa:41:96:5d:61:dd:9d:dc:67:18:ec:eb:4a:0f:
                    01:a1:18:5a:97:97:03:7f:a7:08:86:8d:79:50:e9:
                    a7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3D:59:E8:A6:2A:6B:C7:23:EA:30:0A:A6:4D:A7:85:E0:B8:2F:B8
            X509v3 Authority Key Identifier:
                keyid:74:EB:A0:12:2F:64:3A:DC:A0:CB:C6:F6:A4:68:1B:6D:77:E9:36:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOugEi9kOtygy8b2pGgbbXfpNiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:de:8a:a6:d7:a2:73:be:93:d6:29:0a:c3:ec:46:57:d7:
         d8:ed:3a:ec:ed:f5:d2:3f:75:74:ba:61:2e:28:37:d8:4c:7c:
         29:85:f2:7c:05:ff:5b:64:76:ec:aa:b3:6a:16:8d:9d:74:de:
         71:d8:c6:9a:d6:74:a0:f7:08:cd:d7:1c:c2:5a:bd:0c:e5:29:
         4c:86:e4:32:29:fa:83:a6:32:b3:43:41:5e:c0:8d:01:3e:d7:
         be:52:07:0a:24:0c:51:e4:cf:c6:0f:01:e9:43:37:e3:8d:c8:
         99:63:6b:db:2e:aa:d1:f9:1e:87:53:12:32:e3:f3:f0:d2:0b:
         22:85:cb:b3:c3:02:df:a8:73:ff:c5:f0:39:ce:df:bc:52:79:
         e9:78:bf:14:7a:73:07:4d:b9:ca:f0:12:3f:c3:9d:36:b4:3e:
         96:12:28:e1:ee:28:a3:70:cf:02:5c:64:5f:06:f2:5a:8a:09:
         3c:48:e2:69:85:1e:41:63:e3:88:c0:69:2c:2f:e4:77:9e:d4:
         3c:43:d5:ae:00:ab:ff:95:0f:6d:4c:e4:50:33:cf:83:00:29:
         5e:24:15:6f:c4:d8:d9:b3:6e:96:64:a1:c4:c1:4d:8e:cf:0d:
         3a:9a:74:44:f1:ee:a7:15:20:99:e4:0f:1c:95:4f:7b:ef:fb:
         4e:52:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----