Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
File:                     NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft (raw, json)
Hash identifier:          XrLfoOWX1zEcIGiuEPQtgRscHxjw9umYOH4J1ldjdCM=
Subject key identifier:   68:67:01:B9:60:7F:94:B5:AA:9F:9E:62:3E:48:AC:D8:A7:B6:02:2D
Authority key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Certificate issuer:       /CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Certificate serial:       0192B8DEE0859895FB3F92A2D06AEAD71441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
Manifest number:          0803
Signing time:             Wed 23 Oct 2024 10:14:27 +0000
Manifest this update:     Wed 23 Oct 2024 10:14:27 +0000
Manifest next update:     Thu 24 Oct 2024 10:14:27 +0000
Files and hashes:         1: NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl (hash: uXQlpQUOUIlJzpXAH3UHjtSyEPP0EHU7S8pVeqtaaec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b8:de:e0:85:98:95:fb:3f:92:a2:d0:6a:ea:d7:14:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
        Validity
            Not Before: Oct 23 10:14:27 2024 GMT
            Not After : Oct 24 10:14:27 2024 GMT
        Subject: CN=686701b9607f94b5aa9f9e623e48acd8a7b6022d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b9:46:dc:7c:25:aa:9c:e2:1a:42:78:29:ea:
                    4b:60:1c:6c:39:29:86:91:63:c2:c4:c5:21:0a:23:
                    ea:98:e2:5c:d7:77:22:ff:7d:a9:e4:25:12:69:72:
                    c1:93:ec:25:ea:a2:68:41:15:bf:0c:e0:02:45:de:
                    ce:80:50:07:9d:2f:93:b3:51:9b:a8:08:14:ff:40:
                    44:9b:45:f9:63:ea:e5:9d:d0:d0:15:4d:49:dc:8f:
                    ff:5d:21:9d:15:ca:13:17:7d:4c:24:79:68:cf:e4:
                    97:67:c8:0c:cd:c9:5b:78:3c:b5:1d:4e:20:97:58:
                    05:62:dc:ec:44:b0:24:3e:24:15:f4:b3:32:93:81:
                    03:a3:f4:a5:d9:94:46:ac:d8:bd:e0:9a:63:68:44:
                    6d:40:af:5a:e2:80:50:08:2f:ae:df:c2:6e:58:15:
                    3c:44:55:09:33:f7:ea:37:c2:b2:ae:e4:9d:ba:f2:
                    ff:13:df:68:b4:ed:3f:70:8c:30:56:d6:96:44:c5:
                    aa:ea:15:04:e4:31:b5:d4:d9:77:9b:a8:60:7c:ed:
                    ff:79:a3:e4:e5:5a:49:ae:eb:2d:c5:ae:59:13:cd:
                    d2:2f:93:6e:8f:bf:5b:c7:1d:15:0c:4d:04:cb:2a:
                    ad:84:69:1a:99:b2:69:c2:4d:5b:4b:9d:4b:1f:b3:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:67:01:B9:60:7F:94:B5:AA:9F:9E:62:3E:48:AC:D8:A7:B6:02:2D
            X509v3 Authority Key Identifier:
                keyid:34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fe:4c:43:0c:67:f1:c0:09:e0:ce:e4:62:6c:5e:aa:87:28:
         2f:c2:37:56:47:16:6f:45:c2:f0:a3:61:2a:b1:9d:d5:ca:11:
         8a:41:e0:75:de:36:45:9c:f0:ce:eb:e9:59:a3:d4:68:7b:48:
         cd:14:65:cc:b4:78:7f:9a:d9:78:48:87:cc:aa:4f:f6:40:69:
         63:a8:a1:be:95:d6:fa:2e:67:43:e3:96:09:6c:51:2f:fe:17:
         85:76:0b:80:d9:ef:ab:36:4e:0a:91:40:49:ef:f8:74:af:3e:
         0f:bc:d2:08:58:c0:e5:68:8e:08:a7:71:78:b8:e9:84:c8:d9:
         89:91:3d:62:e4:63:83:fe:f2:5c:24:ac:42:8f:9e:79:77:98:
         cd:83:25:9f:9e:9b:5e:19:a0:42:0b:ef:80:aa:04:ad:6f:79:
         9b:4e:af:03:ab:0c:4a:04:0c:e0:60:44:57:5c:fc:87:09:31:
         6d:16:64:7a:e8:80:f4:6a:36:70:19:fc:63:70:a0:f7:f2:6f:
         92:df:b9:2e:dc:b6:c0:4b:99:fe:ee:70:d2:a1:8b:e7:af:a0:
         8f:40:a4:89:e8:ae:2c:47:33:f4:a6:90:f0:59:53:2e:75:e5:
         00:9b:ad:f8:11:8c:01:d9:d0:91:eb:69:bc:10:2c:84:43:20:
         a4:3e:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----