Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1dc8de-5a56-480a-97d1-f80a0d54a8f7/1/1-8ds30PAkFJLPgKNdmlTxNI2do.mft
File:                     1-8ds30PAkFJLPgKNdmlTxNI2do.mft (raw, json)
Hash identifier:          RP0IyQ47u0eAYyOI4ve7TO00W+EAQ1AMo7PIIB0VgQo=
Subject key identifier:   E1:63:D1:AC:B9:F4:75:49:A2:53:C6:D1:7F:CA:55:FB:3B:28:C8:D4
Authority key identifier: D7:EF:1D:B3:7D:0F:02:41:49:2C:F8:0A:35:D9:A5:4F:13:48:D9:DA
Certificate issuer:       /CN=d7ef1db37d0f0241492cf80a35d9a54f1348d9da
Certificate serial:       0191D63D465B4B969C3C6A0A2AB19DE1DAC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-8ds30PAkFJLPgKNdmlTxNI2do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1dc8de-5a56-480a-97d1-f80a0d54a8f7/1/1-8ds30PAkFJLPgKNdmlTxNI2do.mft
Manifest number:          0401
Signing time:             Mon 09 Sep 2024 10:03:45 +0000
Manifest this update:     Mon 09 Sep 2024 10:03:45 +0000
Manifest next update:     Tue 10 Sep 2024 10:03:45 +0000
Files and hashes:         1: 1-8ds30PAkFJLPgKNdmlTxNI2do.crl (hash: 11vr59U6x8wqsRsxrPrHdPyV5tsOi5JjMsK5uQsxNPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d6:3d:46:5b:4b:96:9c:3c:6a:0a:2a:b1:9d:e1:da:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7ef1db37d0f0241492cf80a35d9a54f1348d9da
        Validity
            Not Before: Sep  9 10:03:45 2024 GMT
            Not After : Sep 10 10:03:45 2024 GMT
        Subject: CN=e163d1acb9f47549a253c6d17fca55fb3b28c8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:7f:58:fb:7d:34:64:62:a1:35:3d:81:41:
                    51:08:6f:b7:92:8f:cd:74:ee:1c:f1:f4:1c:bb:7e:
                    82:c5:8d:97:cc:71:f2:8f:9d:9a:fb:41:77:f0:5a:
                    da:b2:b5:4a:d5:c4:44:f6:a8:a5:03:7e:d6:29:8f:
                    88:86:71:bd:aa:d9:43:9f:7c:aa:d3:e7:4e:23:c9:
                    6e:39:0d:a7:87:c2:61:7e:d8:d4:c3:c8:df:75:a7:
                    39:49:38:26:fd:4a:2d:b7:9b:3c:29:16:12:df:fa:
                    a6:c2:82:63:cf:69:47:5a:fc:66:b9:22:52:ba:76:
                    63:f6:ad:32:eb:65:86:7a:72:e6:c0:65:ea:8c:1c:
                    2c:3d:bb:0e:48:d2:ee:84:56:1e:ff:6f:11:fd:68:
                    f9:b4:46:52:d8:b4:35:6a:4c:5f:14:27:cc:87:e4:
                    ce:22:a5:a0:2e:d9:8b:d5:b3:ba:25:c2:df:6d:8b:
                    ac:3f:46:30:ff:21:b7:f3:2e:4a:80:e0:92:19:9d:
                    22:bb:78:b4:43:4d:51:07:c1:cd:70:0e:3f:2e:50:
                    29:06:2c:36:f8:b5:dd:27:6f:d9:6d:e7:9e:6e:b8:
                    5a:40:83:64:0f:05:e3:39:6b:6a:bd:a8:92:1b:f7:
                    72:34:b3:26:a4:92:1c:74:24:c1:d4:19:5a:e7:d5:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:D1:AC:B9:F4:75:49:A2:53:C6:D1:7F:CA:55:FB:3B:28:C8:D4
            X509v3 Authority Key Identifier:
                keyid:D7:EF:1D:B3:7D:0F:02:41:49:2C:F8:0A:35:D9:A5:4F:13:48:D9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8ds30PAkFJLPgKNdmlTxNI2do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1dc8de-5a56-480a-97d1-f80a0d54a8f7/1/1-8ds30PAkFJLPgKNdmlTxNI2do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1dc8de-5a56-480a-97d1-f80a0d54a8f7/1/1-8ds30PAkFJLPgKNdmlTxNI2do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b2:c1:87:0f:31:80:ed:28:d6:7c:cb:d5:4c:9a:d5:e8:2a:
         8d:03:2e:4e:f1:5e:a9:1f:7b:1e:33:a7:73:84:15:4d:c7:ae:
         20:95:0c:ce:56:7b:ea:bc:be:dd:98:be:1b:5c:80:72:8b:fa:
         11:3d:84:8f:a6:e1:67:ae:5d:b1:64:71:6c:09:ba:cb:fc:37:
         ad:b3:16:8f:bc:b2:c8:cd:35:0e:7d:bd:ab:9e:87:02:c7:00:
         4d:a1:32:26:cf:17:c6:b1:20:2a:c3:df:9d:d4:80:88:17:a8:
         93:b1:12:ac:dc:96:b7:41:7c:22:c4:21:63:25:d7:a3:01:9f:
         87:e0:3e:39:ad:2c:5d:da:d0:b7:4f:93:bc:d9:a5:a7:b5:32:
         b9:29:89:76:4c:79:3c:c6:91:be:b4:c9:33:bb:a4:ba:71:a1:
         94:83:e9:7b:80:5d:1e:60:8e:27:cf:03:e3:5f:0f:c3:ab:b2:
         e4:5e:26:b7:b1:8e:3b:7f:f4:58:4d:ac:b9:f7:71:ed:38:f3:
         55:7f:b5:d6:f9:fb:9f:11:66:69:59:7c:c0:b5:3d:1b:bf:08:
         0a:93:02:12:20:e2:8c:96:c5:1a:32:0b:6f:01:e5:60:9a:89:
         95:77:6b:91:67:af:51:36:9e:6b:88:c2:3b:17:46:98:96:29:
         17:85:e2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----