Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2e844b-0cd5-4779-a038-fdabfadb6279/1/Px61HIDMs2v9x0Zn0X_DzxIg1j4.mft
File:                     Px61HIDMs2v9x0Zn0X_DzxIg1j4.mft (raw, json)
Hash identifier:          4EEet5P9BlaMs7vzoIvn3qNjBiW6Od9UIQs7V0EeM2k=
Subject key identifier:   0F:09:08:B7:AD:DD:CA:71:DB:7E:7D:D0:19:9F:8D:EE:5E:B7:9D:9C
Authority key identifier: 3F:1E:B5:1C:80:CC:B3:6B:FD:C7:46:67:D1:7F:C3:CF:12:20:D6:3E
Certificate issuer:       /CN=3f1eb51c80ccb36bfdc74667d17fc3cf1220d63e
Certificate serial:       01922B34AB288698FDE784ACABB3DBDFD261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Px61HIDMs2v9x0Zn0X_DzxIg1j4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/2e844b-0cd5-4779-a038-fdabfadb6279/1/Px61HIDMs2v9x0Zn0X_DzxIg1j4.mft
Manifest number:          12D5
Signing time:             Wed 25 Sep 2024 22:02:04 +0000
Manifest this update:     Wed 25 Sep 2024 22:02:04 +0000
Manifest next update:     Thu 26 Sep 2024 22:02:04 +0000
Files and hashes:         1: Px61HIDMs2v9x0Zn0X_DzxIg1j4.crl (hash: WtRnIDdx0fQlBXBaZbFLEnv9ad2c44XwL85zoT5pCvc=)
                          2: d5XwQtQ6CppFh_mtx0N9WV8Gj8s.roa (hash: rUz7UA7y5mdMdhmJRWl5s7164JkGMeNpG+na3aRIrmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2b:34:ab:28:86:98:fd:e7:84:ac:ab:b3:db:df:d2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1eb51c80ccb36bfdc74667d17fc3cf1220d63e
        Validity
            Not Before: Sep 25 22:02:04 2024 GMT
            Not After : Sep 26 22:02:04 2024 GMT
        Subject: CN=0f0908b7adddca71db7e7dd0199f8dee5eb79d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:8f:d3:c0:99:af:83:5d:f7:6b:9d:ea:e6:
                    88:db:2e:c2:71:1f:88:f0:b5:9f:00:c5:c0:07:e5:
                    cf:5d:6c:ca:22:8b:48:8f:68:e1:c3:2d:12:96:a4:
                    01:d4:68:b1:5b:5c:21:83:72:b7:0a:62:95:dd:2c:
                    6f:0c:43:34:4c:24:fd:4a:02:a9:53:f2:cf:b3:ad:
                    44:74:bb:fe:c2:43:10:ec:7c:23:a8:b5:00:b4:fa:
                    cf:40:86:64:d7:9e:f5:2b:56:96:65:a4:cf:a2:2a:
                    ef:c0:0b:90:7f:5c:da:e6:ff:66:ad:a7:ff:9e:91:
                    ca:2f:0b:a8:90:b1:9d:55:e0:32:e0:fc:3e:54:4e:
                    46:a8:39:cc:26:6b:50:ab:1b:d7:a4:c5:3b:8b:e3:
                    be:6c:d0:90:e1:87:57:50:01:22:56:dc:12:d8:9b:
                    61:28:15:8b:41:53:b5:bd:f0:13:b2:84:e2:f4:e8:
                    1d:b2:02:6b:38:6c:f0:e6:bb:06:41:d1:ff:5d:13:
                    49:24:ad:28:fe:12:06:8e:78:13:1d:87:d0:9b:ea:
                    d4:3b:27:a8:18:af:4a:62:8e:29:a3:a0:57:0b:13:
                    59:cf:f4:7d:66:92:32:d2:5b:6d:6b:51:97:f9:b1:
                    85:21:01:a7:6a:f7:e4:5f:4d:a1:e6:70:71:53:26:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:08:B7:AD:DD:CA:71:DB:7E:7D:D0:19:9F:8D:EE:5E:B7:9D:9C
            X509v3 Authority Key Identifier:
                keyid:3F:1E:B5:1C:80:CC:B3:6B:FD:C7:46:67:D1:7F:C3:CF:12:20:D6:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Px61HIDMs2v9x0Zn0X_DzxIg1j4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2e844b-0cd5-4779-a038-fdabfadb6279/1/Px61HIDMs2v9x0Zn0X_DzxIg1j4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2e844b-0cd5-4779-a038-fdabfadb6279/1/Px61HIDMs2v9x0Zn0X_DzxIg1j4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:80:f0:c6:46:a9:e3:a6:5c:c2:0c:e1:74:20:73:79:77:2f:
         79:f9:98:4c:7c:fd:6e:01:8b:12:21:aa:87:9c:40:6e:9d:f0:
         31:6e:6b:ec:1c:54:fc:21:54:95:ad:85:ba:6b:88:de:ba:63:
         6c:d9:1a:48:f9:27:39:6a:ab:0d:91:a4:bf:f6:7a:79:39:9f:
         a6:27:b3:be:4b:86:80:99:ca:72:1c:46:d4:d4:71:f7:68:a3:
         c9:70:29:32:c5:9c:fc:c7:e9:34:ab:1b:e3:bb:68:6e:6d:b5:
         a5:2d:01:4e:ee:0b:41:f5:c6:0c:20:6d:fb:b8:37:57:9c:fc:
         a5:7a:84:ef:76:0f:b4:ea:c5:96:75:87:a6:c1:ed:e4:55:0f:
         74:5d:4f:1e:d6:25:2f:e0:44:8f:ee:29:eb:97:19:c0:e7:20:
         74:64:3c:32:34:ff:2e:57:8e:67:5e:5d:ae:3d:b1:ce:7b:6f:
         e9:fe:36:69:0d:c3:80:05:8c:4d:2e:dd:c9:a8:a8:4f:29:7a:
         27:49:05:0f:37:24:df:5e:cd:a6:ef:81:f9:4d:ae:28:f9:e7:
         0b:b5:e8:20:c0:7a:dc:9a:e5:58:95:80:ed:c1:d8:5a:82:4c:
         6e:ae:ed:45:dd:03:43:30:f9:c2:bc:cb:30:c2:ec:ed:eb:12:
         96:13:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----