Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
File:                     K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft (raw, json)
Hash identifier:          vDBh1Nk09/qLwuatAjyyNTGxbeQLcYlHZDJZXjVMlYU=
Subject key identifier:   04:8A:C3:9C:34:DE:A7:B0:2F:55:34:9A:02:65:AB:1B:7B:F5:C0:63
Authority key identifier: 2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80
Certificate issuer:       /CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
Certificate serial:       0191D44C5D8D890589EC7787BB2AABED826B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft
Manifest number:          12A8
Signing time:             Mon 09 Sep 2024 01:01:00 +0000
Manifest this update:     Mon 09 Sep 2024 01:01:00 +0000
Manifest next update:     Tue 10 Sep 2024 01:01:00 +0000
Files and hashes:         1: 9WRa97VmeqFMilJjJuQm8rbN_rU.roa (hash: 0A5T582BmWhmxor5G9MeG/m5nmlyqCbahKiIBWAlnhk=)
                          2: K2uCLt3P0SGdqpT8Q0Y8qLqux4A.crl (hash: RTHDZHThNb9UHkT9NXZWXECy3CNZ4n54ho8+29zuXk8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d4:4c:5d:8d:89:05:89:ec:77:87:bb:2a:ab:ed:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b6b822eddcfd1219daa94fc43463ca8baaec780
        Validity
            Not Before: Sep  9 01:01:00 2024 GMT
            Not After : Sep 10 01:01:00 2024 GMT
        Subject: CN=048ac39c34dea7b02f55349a0265ab1b7bf5c063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:3b:7a:0c:d1:a2:fa:e6:a8:f4:ec:9b:3b:
                    c4:37:0f:bc:c2:5e:83:79:33:29:c7:52:f4:ae:ba:
                    5f:25:66:f1:d4:3d:9a:98:f2:a5:06:59:8a:8a:e7:
                    0f:08:08:13:d0:0d:d5:ea:02:2b:fb:1c:b7:0e:34:
                    de:ee:fd:48:a6:f3:2e:cf:77:e1:7c:73:97:d6:4c:
                    1b:d2:2a:97:08:3c:79:e4:0d:7e:5e:2e:a0:32:6d:
                    21:70:b3:a1:1d:09:9a:0c:e8:fc:2d:99:c8:ed:e4:
                    4e:c3:62:67:73:35:b7:5d:ca:50:4e:e6:16:a7:29:
                    21:51:e2:11:57:b4:19:65:bd:13:55:fe:4e:a4:c8:
                    4c:af:bb:45:f8:c7:95:c5:c5:f8:d0:8d:17:d9:08:
                    63:e2:c0:c4:2c:4a:27:7b:49:6f:92:41:ad:f6:d5:
                    01:61:56:c4:2f:3c:97:6f:3a:2b:46:78:f4:91:29:
                    ed:57:92:2d:e3:5a:2a:67:f7:49:a2:32:ef:19:34:
                    ce:be:3b:43:aa:a5:7c:27:f1:51:52:c5:80:9f:d6:
                    96:10:0d:8f:ad:2c:7e:da:41:64:2e:0a:28:4d:03:
                    05:52:68:94:5d:7a:bc:eb:ac:48:14:fe:74:93:92:
                    d6:33:c8:c1:83:06:ac:4e:67:2b:1a:06:63:5a:bb:
                    13:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8A:C3:9C:34:DE:A7:B0:2F:55:34:9A:02:65:AB:1B:7B:F5:C0:63
            X509v3 Authority Key Identifier:
                keyid:2B:6B:82:2E:DD:CF:D1:21:9D:AA:94:FC:43:46:3C:A8:BA:AE:C7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9159ea-076c-49a5-916b-110b7e58ede8/1/K2uCLt3P0SGdqpT8Q0Y8qLqux4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:89:23:b7:22:f7:6d:df:fd:5f:9d:0f:88:11:a1:34:31:67:
         4e:70:88:d0:2d:bf:36:73:f0:be:2f:ef:73:30:d8:d9:5d:36:
         b5:3c:34:da:a1:f2:5a:33:c0:e6:ae:16:c4:46:af:dd:de:c3:
         3a:1b:83:0b:73:bf:06:77:da:c2:a5:32:76:49:b7:c6:36:ee:
         71:8f:28:18:41:93:20:a0:e8:db:c0:aa:b5:d0:76:74:75:8d:
         be:6d:a9:26:bd:f7:68:72:49:9f:77:c6:45:00:ad:a1:44:d8:
         7a:2f:3e:a2:ab:7a:2e:f1:60:a3:8e:92:35:c1:f5:13:c5:c1:
         64:49:c3:bf:c3:e6:10:29:32:32:46:03:73:74:68:28:11:0a:
         96:f5:e3:6c:cb:5b:a4:61:54:cb:cd:ec:85:83:12:a5:fc:a2:
         4b:39:3b:fe:7b:30:ae:fd:39:2d:45:9e:bb:20:78:18:87:19:
         81:78:4e:4d:fa:0d:33:3a:44:47:e8:08:77:02:48:26:79:4e:
         3e:20:d1:6c:e2:ff:3d:6b:ef:1a:b1:84:f6:c3:79:c1:b0:2c:
         8d:6a:a9:4d:e4:44:b6:4a:8d:b5:0d:a2:25:75:7e:0b:cf:0d:
         b8:b3:7a:d9:96:f5:c2:2c:6c:5a:9f:bb:00:c5:3e:cd:16:b9:
         4e:b7:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----