Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.mft
File:                     Z02JyOm-UtlW_FuIqYpyvgaZ_f0.mft (raw, json)
Hash identifier:          J0g/U2k+IhGGIdT6k0czHOAlpIEWqN0HeJVh4u8S0DA=
Subject key identifier:   D4:25:DF:83:62:9B:69:4A:68:F5:6E:C2:A6:87:F8:96:1C:C8:93:C0
Authority key identifier: 67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD
Certificate issuer:       /CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
Certificate serial:       018D9CC3E23BDC71AC614EDD0820AE1777D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.mft
Manifest number:          086E
Signing time:             Mon 12 Feb 2024 10:01:39 +0000
Manifest this update:     Mon 12 Feb 2024 10:01:39 +0000
Manifest next update:     Tue 13 Feb 2024 10:01:39 +0000
Files and hashes:         1: VBIaWWNaN_ChPEeeQHKFIFIrflc.roa (hash: ETJgL3wLmKekhTfsfchi3FJNh7Fyrd0XtZw1hVrawN0=)
                          2: Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl (hash: oe3yYySVIvsLFRs275kjR+4lkCVdfhlu6pgCZmq9Rtk=)
                          3: pNTYM1EIOHYbB48930MsJSsW24Q.roa (hash: IV9767U7H7HwSzZUwXYzQupLGh83yoxkQBSM1Imh5+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9c:c3:e2:3b:dc:71:ac:61:4e:dd:08:20:ae:17:77:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674d89c8e9be52d956fc5b88a98a72be0699fdfd
        Validity
            Not Before: Feb 12 10:01:39 2024 GMT
            Not After : Feb 13 10:01:39 2024 GMT
        Subject: CN=d425df83629b694a68f56ec2a687f8961cc893c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:65:90:5c:9a:6a:05:b2:58:c5:18:81:91:
                    ba:42:2f:16:be:ea:52:59:bc:04:df:96:2f:d0:ed:
                    fe:3f:61:7c:9d:c6:cb:5a:19:82:d0:cd:c4:30:ed:
                    e0:71:18:5b:86:60:37:55:2d:c2:1e:0b:d0:cd:d0:
                    a1:d5:a6:cc:39:97:4f:13:a1:66:00:85:a7:2c:2c:
                    63:e8:f9:81:f6:76:29:b0:ce:c2:10:4a:46:5c:52:
                    81:8d:74:8a:2e:1d:39:db:b3:ed:52:75:ed:86:1d:
                    88:0e:55:1a:7f:d6:74:f1:c2:43:0b:01:65:5c:90:
                    a3:58:12:50:36:32:ce:b8:95:60:aa:73:86:af:cc:
                    97:75:b2:1a:76:fc:98:7e:4d:b9:4b:98:45:81:44:
                    ab:41:88:cb:60:4e:45:fc:c0:b1:4e:62:f9:5e:6c:
                    bb:0d:13:29:e4:70:65:0d:d3:f1:ac:b2:63:d2:1a:
                    04:fe:43:fe:ab:4a:23:48:b9:a3:b7:3a:39:a6:9a:
                    ff:37:26:04:d8:c4:71:c0:7b:4f:82:2f:c4:31:c5:
                    39:42:30:e0:6a:30:48:87:d0:7f:0f:14:78:19:63:
                    43:a2:c1:42:3a:8f:ae:84:d4:91:ae:db:15:35:60:
                    91:e5:b9:0b:29:b9:15:91:1a:30:8e:35:7a:86:ce:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:25:DF:83:62:9B:69:4A:68:F5:6E:C2:A6:87:F8:96:1C:C8:93:C0
            X509v3 Authority Key Identifier:
                keyid:67:4D:89:C8:E9:BE:52:D9:56:FC:5B:88:A9:8A:72:BE:06:99:FD:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/136e5a-ba1a-4ae3-a4c8-59e2fd4e380f/1/Z02JyOm-UtlW_FuIqYpyvgaZ_f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:49:7d:82:37:8d:a9:46:38:99:ef:e5:67:0b:5d:ca:05:
         3f:51:b7:8d:94:17:31:4c:f7:64:2b:ab:c1:73:ab:b0:24:83:
         c0:ae:d7:2f:b3:c7:6f:f6:61:64:ba:66:5c:09:f0:25:76:56:
         4a:fe:10:3d:9f:89:f8:92:5c:af:63:7a:11:cb:94:a9:0b:ce:
         07:d6:35:eb:79:1d:48:cb:12:7b:c5:f2:4e:d7:a8:37:3b:f5:
         c3:a3:d7:a6:a2:62:ed:f7:17:97:f2:f8:6d:2c:ec:46:1e:36:
         54:cd:c5:40:a3:84:a6:4c:25:b6:8d:38:13:19:be:b5:51:c2:
         6a:28:22:eb:2c:76:e9:e0:b6:6e:6b:75:41:27:3c:3e:ef:33:
         75:d1:06:42:ef:e0:be:73:06:11:97:ad:d7:5d:24:35:4d:fc:
         0f:ac:5f:2c:10:bc:94:a4:2e:d1:34:77:77:9e:27:56:70:54:
         ff:ac:2c:6b:0b:76:cc:28:73:9a:f2:4f:c8:9f:28:06:42:5d:
         ff:10:01:96:5e:33:d1:78:86:d0:59:b3:98:4f:3f:d6:c5:79:
         93:9f:19:63:39:79:45:ad:18:84:06:f1:0c:e0:52:74:b4:17:
         80:24:2d:c4:62:fd:88:54:19:ad:0a:47:90:1b:41:2e:90:21:
         e7:43:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----