Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
File:                     otIJQ2BBB_arGBOenTB1-XwHHOM.mft (raw, json)
Hash identifier:          PCW4SVoxl2sP+TELlW3qaW9DuBjRDEHYpl2UEihQNQ0=
Subject key identifier:   C1:69:DE:23:D8:00:20:40:24:C8:9B:B8:2E:2F:64:07:CF:2D:C5:11
Authority key identifier: A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
Certificate issuer:       /CN=a2d20943604107f6ab18139e9d3075f97c071ce3
Certificate serial:       0192B264394FB577F7CA1E631B452D2E2AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
Manifest number:          03A6
Signing time:             Tue 22 Oct 2024 04:02:45 +0000
Manifest this update:     Tue 22 Oct 2024 04:02:45 +0000
Manifest next update:     Wed 23 Oct 2024 04:02:45 +0000
Files and hashes:         1: 4IhxN6dETtHZkB0lPspu0TztDOE.roa (hash: +wIiw37yVz5vQlP59JLEZorTG3qlEhqiR2+rSllq+s4=)
                          2: otIJQ2BBB_arGBOenTB1-XwHHOM.crl (hash: T1A5FAqPpiaklGiRzriCqCLGkvzuqLV4Axmt7ZRWMQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b2:64:39:4f:b5:77:f7:ca:1e:63:1b:45:2d:2e:2a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d20943604107f6ab18139e9d3075f97c071ce3
        Validity
            Not Before: Oct 22 04:02:45 2024 GMT
            Not After : Oct 23 04:02:45 2024 GMT
        Subject: CN=c169de23d800204024c89bb82e2f6407cf2dc511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:0a:dd:4c:57:a5:be:7d:13:c3:85:c3:7d:
                    c1:0f:6b:d7:d3:b0:06:14:a9:99:2f:1e:23:7d:2c:
                    ca:fc:85:a9:ba:5d:4b:b8:57:68:73:f2:9f:4c:a8:
                    39:fe:cf:45:02:ba:cb:54:b4:98:72:75:d4:8a:31:
                    2a:90:6f:f5:60:ac:2f:0a:3a:d1:d3:c3:e8:9a:46:
                    fc:e9:bb:c4:c1:2a:76:95:65:b2:00:db:b5:0f:11:
                    5e:4f:cd:eb:a7:02:29:6f:37:c6:87:cf:8f:77:0e:
                    46:b8:2d:ab:6f:d4:ee:14:43:7d:29:18:b7:5b:f3:
                    ac:dc:1b:13:b2:9d:86:2d:b3:01:c4:e5:6f:d7:c0:
                    f6:08:1f:41:c9:fb:07:3e:e2:8e:7e:9d:21:d8:af:
                    be:fc:da:e9:93:ff:a2:25:54:3c:3a:bd:6f:e2:4e:
                    0f:1d:13:df:19:ad:7f:ff:50:77:4f:7d:16:b1:b8:
                    69:c9:32:71:c1:87:46:49:0c:eb:b1:ba:95:7f:a1:
                    c7:2a:90:a0:e0:c2:02:4f:1a:c8:09:e1:0d:28:7a:
                    4f:90:8f:7f:3b:00:36:59:94:90:eb:ef:75:0f:69:
                    4e:e2:37:d5:59:84:69:a4:6a:40:af:1e:bf:f0:8c:
                    b6:bb:a6:ca:47:54:8b:cb:6a:d9:5f:d4:6e:9c:32:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:69:DE:23:D8:00:20:40:24:C8:9B:B8:2E:2F:64:07:CF:2D:C5:11
            X509v3 Authority Key Identifier:
                keyid:A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:61:81:01:ef:2b:c2:9e:b3:99:a8:e8:c7:5b:9f:02:21:61:
         5d:22:4d:33:3d:9b:0a:3a:55:18:a7:3e:70:44:c5:86:88:d8:
         f8:73:c2:15:d6:dc:10:35:5d:de:c9:d6:23:ce:a3:44:d5:4e:
         66:6e:e6:60:d7:cb:a6:2a:22:15:29:2e:2e:33:b5:1f:c7:8d:
         50:62:97:56:4c:d4:e0:01:b6:f2:d1:77:8e:1e:d8:2d:a3:52:
         2d:a9:bb:c4:00:29:19:55:50:7e:00:31:d4:0c:48:e2:6e:c5:
         c5:4c:7d:7e:9b:59:7a:6c:d3:dd:53:96:51:74:4e:93:45:4c:
         0d:91:b5:9d:ad:8b:03:e4:9c:c9:5a:61:e8:07:af:26:20:d8:
         bc:37:ce:6f:c1:b2:cb:e7:b1:1b:05:a2:e4:23:64:4b:db:1c:
         cc:47:d0:fa:b3:37:ad:0d:61:6b:0d:a4:ae:e7:14:91:99:06:
         13:d6:d7:8d:b9:2d:fb:db:ea:56:13:7d:2f:fb:92:e2:f7:ff:
         16:2d:18:79:03:63:03:38:94:0f:34:80:72:d2:be:36:7c:d8:
         43:75:0d:44:70:f1:7d:aa:7e:54:35:e8:5b:34:4c:96:89:81:
         b7:3d:c4:78:bc:e0:4b:48:99:04:bc:04:47:60:6b:9a:79:7f:
         1e:63:8d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----