Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft
File:                     HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft (raw, json)
Hash identifier:          mxn42TcgUHERtHn32i+a8VtatZuGj0b9hmrnztMzEBg=
Subject key identifier:   B9:D6:9F:DC:1E:AE:0D:B0:3F:C6:52:74:9C:AB:37:F3:D1:04:04:F1
Authority key identifier: 1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5
Certificate issuer:       /CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
Certificate serial:       018D5D76CE679FED66148B303D1BFADDBD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft
Manifest number:          08F5
Signing time:             Wed 31 Jan 2024 03:01:23 +0000
Manifest this update:     Wed 31 Jan 2024 03:01:23 +0000
Manifest next update:     Thu 01 Feb 2024 03:01:23 +0000
Files and hashes:         1: HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl (hash: UWSp8kHvpjHLcEWCAZbQLq+rgte8syAV/QubwMi/pm0=)
                          2: gcCPZLHL0FzGVjJUSxEsH7vcXTU.roa (hash: L1SW0WovgD+nbalEyvPxeHr/wcgcVSpe4hHBMm4BK/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5d:76:ce:67:9f:ed:66:14:8b:30:3d:1b:fa:dd:bd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c50a2289e1bf87121ae73ca7116d53f5fd5c4d5
        Validity
            Not Before: Jan 31 03:01:23 2024 GMT
            Not After : Feb  1 03:01:23 2024 GMT
        Subject: CN=b9d69fdc1eae0db03fc652749cab37f3d10404f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:74:b6:17:df:01:e3:cb:88:da:d8:70:c9:
                    f4:e8:8b:34:30:33:78:0b:6a:1f:e6:ba:f7:f2:0c:
                    8b:f6:77:cb:98:7f:be:4e:e7:8d:1a:54:8b:a2:57:
                    6d:21:f0:65:a7:e4:94:16:cf:72:0c:0b:11:5e:74:
                    f7:ef:ce:5e:42:27:20:c5:01:f9:07:6f:23:aa:e4:
                    7a:e8:82:28:01:33:ec:46:24:a4:b7:44:89:6c:ca:
                    ee:04:9f:1b:01:c2:c1:e3:b3:26:2e:93:b6:0b:9f:
                    27:91:61:f2:ba:69:ae:2c:ba:68:3f:1b:fa:90:fc:
                    be:73:e9:dc:21:a3:97:1f:0b:2e:94:d1:ac:6f:a3:
                    a7:ac:58:02:7e:53:96:37:f9:84:96:78:d6:51:6b:
                    13:c4:71:31:9a:ff:61:fe:57:ce:3d:2c:27:ba:33:
                    a9:08:01:6d:a3:48:6b:6b:30:de:3b:c4:f4:fb:4a:
                    05:72:73:a5:60:a1:2a:2f:de:11:8e:49:d8:7b:90:
                    ac:47:b3:5a:2b:84:77:55:b4:38:2e:95:10:3c:46:
                    ee:2b:7c:b8:6a:f9:3b:e4:9b:ee:fe:0a:93:e5:fb:
                    a9:ed:d3:7d:8d:1d:5f:11:fc:f8:d6:1b:76:60:f2:
                    cc:08:39:dc:62:63:d4:22:93:45:d3:0c:dc:c3:76:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D6:9F:DC:1E:AE:0D:B0:3F:C6:52:74:9C:AB:37:F3:D1:04:04:F1
            X509v3 Authority Key Identifier:
                keyid:1C:50:A2:28:9E:1B:F8:71:21:AE:73:CA:71:16:D5:3F:5F:D5:C4:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/94960a-1821-4db3-8f48-d15fc98424f0/1/HFCiKJ4b-HEhrnPKcRbVP1_VxNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:86:f6:a2:d1:1d:75:2c:9b:b4:0f:59:d3:18:da:84:1a:
         8b:ee:d5:aa:bf:99:81:25:5a:74:32:cf:0d:83:6b:29:12:93:
         dc:a0:0a:77:5e:6c:77:60:ab:91:0f:bb:26:f1:14:74:9f:dc:
         05:99:86:5a:dd:89:31:ae:10:a2:27:96:52:da:71:68:14:27:
         69:aa:4f:ea:b5:0b:1e:73:ea:1c:51:cf:00:65:32:e5:65:bd:
         d0:38:2d:45:51:a1:f2:e1:9b:90:54:6c:a8:96:26:f5:3b:e1:
         13:1e:a4:32:be:f4:9e:7f:87:70:fa:c8:9f:65:5a:9b:dd:e5:
         c9:1b:36:85:58:de:d3:0d:2f:47:ef:07:fe:00:ed:e7:a5:ff:
         82:64:55:d5:b5:3e:54:48:39:e0:fb:60:aa:c6:e0:5c:0c:7a:
         6d:64:7e:af:ae:d1:e1:96:92:dd:9a:d8:e5:05:a5:9e:fd:c4:
         81:b8:ae:b0:d2:71:73:ec:a1:96:62:80:e0:9f:e3:98:7d:53:
         cc:20:35:23:6d:e6:71:ce:5c:e7:08:9b:9a:de:6d:20:b8:4e:
         38:4b:d4:06:cb:81:6d:1d:27:89:c3:b5:90:63:08:4e:fc:a7:
         b0:b8:2e:ae:69:58:3c:c1:7b:e1:3e:33:7d:11:b7:d3:6f:e0:
         84:aa:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----