Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.mft
File:                     zagf6VJhkE6UEjfqTHzsj3aLBG0.mft (raw, json)
Hash identifier:          AzlpYzDoy8UvGhdlUkevl7h6DAjl1uvjw4qXTUJ2Kmc=
Subject key identifier:   30:97:71:74:6B:6A:72:36:B8:72:96:5F:D9:64:6A:60:8A:55:43:69
Authority key identifier: CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D
Certificate issuer:       /CN=cda81fe95261904e941237ea4c7cec8f768b046d
Certificate serial:       018F381C2F44B6A31167FEACCBBB7491CD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.mft
Manifest number:          08BB
Signing time:             Thu 02 May 2024 07:02:02 +0000
Manifest this update:     Thu 02 May 2024 07:02:02 +0000
Manifest next update:     Fri 03 May 2024 07:02:02 +0000
Files and hashes:         1: 5czdLI31iMB2ig-xA6i2AzkTCtk.roa (hash: tDKPPjPBV3rdSqcTl0nU6PKDY+d76bLopLc0va1WDu0=)
                          2: rBL33DZxRYw_sutQsOkobjcTifA.roa (hash: bJi6cqjRuLwpvguptcQWLPa+3GgHCid+RphQG3Pxlfk=)
                          3: zagf6VJhkE6UEjfqTHzsj3aLBG0.crl (hash: AOURgZWFO7Cau6e57tfFjB51WfiEbqPe7fRLMoV7zhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1c:2f:44:b6:a3:11:67:fe:ac:cb:bb:74:91:cd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda81fe95261904e941237ea4c7cec8f768b046d
        Validity
            Not Before: May  2 07:02:02 2024 GMT
            Not After : May  3 07:02:02 2024 GMT
        Subject: CN=309771746b6a7236b872965fd9646a608a554369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:a3:4d:0a:4a:12:dd:01:c0:a0:ad:dc:0c:
                    67:86:7b:ed:69:ae:9c:d0:95:2c:53:12:a7:05:10:
                    a1:32:fb:43:16:f7:7a:33:6d:6f:90:d8:7a:ec:f3:
                    68:26:24:38:7d:5c:32:c4:bc:15:e5:b3:29:b4:7e:
                    9c:4d:d5:ee:fb:b2:85:43:7d:6f:5f:b5:a8:04:b4:
                    d8:c7:e2:ac:6b:d9:0a:64:c1:4a:d7:55:12:22:f5:
                    93:21:16:be:1e:74:d2:45:e1:cc:b7:9d:01:e1:c4:
                    6b:7b:bd:ce:ef:08:1c:ec:b4:37:9b:8d:83:e5:5f:
                    e2:00:d4:7c:f0:ae:44:57:71:22:e6:b3:46:0a:46:
                    5d:b2:1a:da:ab:7b:90:6b:fe:64:49:ba:e8:a3:83:
                    31:ba:ff:4e:5b:84:5a:de:4b:85:d9:ec:52:7b:d5:
                    b8:6e:a0:23:db:af:a0:5b:f5:ce:ee:91:68:7c:4e:
                    6a:82:c7:1e:54:49:aa:92:fb:ff:77:e2:61:65:df:
                    c8:d7:6e:76:3f:f8:d0:cf:8a:da:78:26:52:5f:66:
                    9c:9d:f7:fd:a2:1e:52:61:ca:4b:8a:9f:d5:83:6a:
                    02:07:f6:36:d1:84:1e:02:84:33:08:30:f2:99:de:
                    0c:1c:b9:bf:e3:36:4c:64:d1:12:99:05:57:0a:36:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:97:71:74:6B:6A:72:36:B8:72:96:5F:D9:64:6A:60:8A:55:43:69
            X509v3 Authority Key Identifier:
                keyid:CD:A8:1F:E9:52:61:90:4E:94:12:37:EA:4C:7C:EC:8F:76:8B:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zagf6VJhkE6UEjfqTHzsj3aLBG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/641aec-da38-4df3-8e71-f7fe3e473b12/1/zagf6VJhkE6UEjfqTHzsj3aLBG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:c4:38:ce:24:50:a9:c4:b3:50:7b:02:60:bb:35:77:3f:
         a8:4a:83:6d:a5:88:80:4e:3c:d5:5c:d4:98:9c:dc:c9:63:05:
         84:97:e6:4f:41:8d:a7:27:6a:99:a7:26:3b:cb:a2:b1:ca:b6:
         9a:f4:4d:46:ea:7c:4e:3f:0b:c9:18:b3:21:cd:7e:c0:17:21:
         59:8e:61:d7:5a:c7:93:39:27:22:e8:2a:62:9f:c8:dd:42:b5:
         91:6c:f9:1b:c7:0f:ac:00:47:8b:3e:ab:51:74:a2:d5:4e:fc:
         e9:9f:2f:fa:ff:e8:f6:9c:53:19:1d:70:11:03:5f:21:6f:47:
         2b:2e:d9:88:73:e3:63:b7:b8:77:59:96:16:f8:55:2b:a5:6b:
         cf:61:d8:dd:6c:bd:7f:12:af:a0:7f:46:02:cd:19:9a:6a:e6:
         7e:c1:ba:30:35:40:8e:46:d1:58:d0:0f:93:91:8a:47:35:c2:
         39:20:e0:4c:57:88:1d:a6:64:69:26:af:eb:a1:46:ac:ee:21:
         48:af:ba:46:37:8b:6c:ab:ae:39:76:1c:c9:5d:d0:22:d9:81:
         ad:b4:d0:da:d4:0e:2e:ef:13:05:1f:a3:5b:9f:c5:41:bc:dd:
         f1:94:b2:7e:aa:96:17:99:ca:00:76:d0:e2:f9:91:1a:b6:45:
         1c:99:74:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----