Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/IB2o0qJdWJyl8BKB3_JjpR8rheU.mft
File:                     IB2o0qJdWJyl8BKB3_JjpR8rheU.mft (raw, json)
Hash identifier:          0q1ClLeBj57bY2CEJfCiIybINww71kz1bBot5WM3Oy4=
Subject key identifier:   0D:99:82:72:50:D1:35:61:4B:63:51:A7:8F:7B:94:36:66:AE:45:36
Authority key identifier: 20:1D:A8:D2:A2:5D:58:9C:A5:F0:12:81:DF:F2:63:A5:1F:2B:85:E5
Certificate issuer:       /CN=201da8d2a25d589ca5f01281dff263a51f2b85e5
Certificate serial:       018C333308E7DD35989C47991B9A37421225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB2o0qJdWJyl8BKB3_JjpR8rheU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/IB2o0qJdWJyl8BKB3_JjpR8rheU.mft
Manifest number:          072B
Signing time:             Mon 04 Dec 2023 05:00:31 +0000
Manifest this update:     Mon 04 Dec 2023 05:00:31 +0000
Manifest next update:     Tue 05 Dec 2023 05:00:31 +0000
Files and hashes:         1: IB2o0qJdWJyl8BKB3_JjpR8rheU.crl (hash: mS448UIu8mOVx3djHC0LMhC/76LGiydvOIb+D3o1mI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:33:33:08:e7:dd:35:98:9c:47:99:1b:9a:37:42:12:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201da8d2a25d589ca5f01281dff263a51f2b85e5
        Validity
            Not Before: Dec  4 05:00:31 2023 GMT
            Not After : Dec  5 05:00:31 2023 GMT
        Subject: CN=0d99827250d135614b6351a78f7b943666ae4536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:c9:1f:fd:23:59:22:ac:4b:8e:40:6d:0b:
                    11:44:a8:69:b7:e9:ae:f6:eb:3c:77:76:12:30:e0:
                    7f:7a:d2:4e:5c:90:93:3f:05:86:fa:7c:af:b3:5f:
                    69:fb:4b:d0:73:6a:7f:de:68:9c:b2:22:71:4b:7c:
                    10:f4:ec:4e:f2:07:fb:72:2b:a3:f6:24:82:17:ea:
                    93:98:70:2e:3a:16:ae:c7:b2:e0:46:2b:db:fa:90:
                    35:35:f9:5e:5a:82:ac:0c:63:a4:30:c9:9b:cf:5f:
                    83:dc:30:3e:d8:33:f0:c3:6c:3b:8f:98:d3:f0:ec:
                    2e:4e:5d:58:1d:e7:9d:63:02:d9:a3:d3:c8:2a:70:
                    f9:b5:90:dc:f7:90:61:cd:0a:f8:47:4f:0e:f1:10:
                    40:00:58:09:b5:06:30:a9:e3:8c:9f:68:45:1f:7b:
                    a7:52:db:fa:90:46:75:c0:6e:f1:4a:03:8f:04:49:
                    4c:3f:52:dd:14:ad:6b:40:45:72:7a:ac:d7:8b:44:
                    44:da:20:46:83:10:15:c8:f5:da:4d:a0:a4:eb:80:
                    f2:4d:53:aa:47:ba:14:77:28:b1:11:82:be:c4:74:
                    6c:85:7f:b0:d3:91:80:04:58:31:74:9d:b2:f8:cb:
                    f9:38:21:30:d0:14:75:cf:95:dc:09:19:5b:37:b2:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:82:72:50:D1:35:61:4B:63:51:A7:8F:7B:94:36:66:AE:45:36
            X509v3 Authority Key Identifier:
                keyid:20:1D:A8:D2:A2:5D:58:9C:A5:F0:12:81:DF:F2:63:A5:1F:2B:85:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB2o0qJdWJyl8BKB3_JjpR8rheU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/IB2o0qJdWJyl8BKB3_JjpR8rheU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e519a0-72b3-407f-bf3c-8810c5a2863e/1/IB2o0qJdWJyl8BKB3_JjpR8rheU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8e:98:8e:f5:10:03:6a:52:b3:6f:0c:a7:bc:8e:76:0b:ac:
         ca:1e:dc:03:c1:2a:ed:94:b9:7f:ef:da:16:8e:98:03:0e:a3:
         c2:bc:5c:d8:35:e9:1c:17:e1:39:b7:65:54:9a:89:9b:f7:1b:
         5d:79:cf:10:7f:da:ce:81:c0:6f:c3:ae:d7:2c:7f:da:e2:97:
         2e:6a:fc:01:fb:6f:09:9d:f0:a0:c2:8b:ad:f2:87:32:22:65:
         a3:aa:0c:54:c9:6f:8f:b5:7d:46:5e:ec:f2:63:f6:65:ce:17:
         81:8f:52:16:7c:c9:ba:09:69:11:fb:84:b1:6d:35:24:98:a4:
         9b:17:b6:0b:7a:21:eb:d9:e9:0f:ef:79:a9:e6:e1:37:1c:c3:
         fc:58:af:98:5c:d6:b1:58:31:92:b5:c2:17:75:46:d7:22:2b:
         c1:de:e5:0b:2c:8c:ab:d9:9e:f9:1c:8c:34:49:1a:46:85:15:
         69:ca:fa:dc:c9:b1:c1:7c:ee:9f:7b:04:9a:c7:70:8a:be:a4:
         60:eb:54:39:86:8f:56:48:9d:b8:f7:cc:82:a5:0b:9f:8e:1f:
         d3:55:a3:0d:27:a2:42:f7:c2:92:7c:d9:9b:62:98:71:a6:83:
         79:0c:d1:57:e7:83:52:07:aa:f9:c7:01:b0:19:b5:f2:1a:9f:
         db:a3:60:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----