Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/gTq9KOUcnEKegfgR2UrQImApdGY.mft
File:                     gTq9KOUcnEKegfgR2UrQImApdGY.mft (raw, json)
Hash identifier:          6Ykc8ZmzKP4rIDwMQqhGn5K3oqRxr2IpC9Uu8CmUPKM=
Subject key identifier:   C0:4E:C0:EA:CE:E3:68:6E:32:4D:B1:FB:F1:A5:4E:D7:CB:14:24:B0
Authority key identifier: 81:3A:BD:28:E5:1C:9C:42:9E:81:F8:11:D9:4A:D0:22:60:29:74:66
Certificate issuer:       /CN=813abd28e51c9c429e81f811d94ad02260297466
Certificate serial:       018D0A34EED757500D411AA050499CED6ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTq9KOUcnEKegfgR2UrQImApdGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/gTq9KOUcnEKegfgR2UrQImApdGY.mft
Manifest number:          041B
Signing time:             Sun 14 Jan 2024 23:00:57 +0000
Manifest this update:     Sun 14 Jan 2024 23:00:57 +0000
Manifest next update:     Mon 15 Jan 2024 23:00:57 +0000
Files and hashes:         1: gTq9KOUcnEKegfgR2UrQImApdGY.crl (hash: XO7A4VdCjBixHdRpka99u4o8ZliqXvZKqxq7ZnlnT6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0a:34:ee:d7:57:50:0d:41:1a:a0:50:49:9c:ed:6a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813abd28e51c9c429e81f811d94ad02260297466
        Validity
            Not Before: Jan 14 23:00:57 2024 GMT
            Not After : Jan 15 23:00:57 2024 GMT
        Subject: CN=c04ec0eacee3686e324db1fbf1a54ed7cb1424b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:17:fa:ec:34:f3:d5:90:b5:98:da:8f:2a:2a:
                    fb:df:93:b9:2f:3a:de:5c:1d:53:83:35:c9:20:c0:
                    d7:fd:3b:01:0f:7a:04:54:a7:9d:8d:25:79:28:be:
                    ba:d1:40:4f:7c:5d:64:82:d4:52:07:b5:d8:36:d7:
                    14:a8:74:a9:c4:e7:3d:ce:f4:a6:ad:4e:e4:64:a4:
                    23:13:84:20:b8:c5:26:0c:04:11:2f:59:44:f7:9b:
                    08:9e:4e:ee:f5:bd:a2:f6:7b:d2:00:83:d2:e8:c6:
                    db:54:a0:4f:86:0b:84:2d:2c:04:e1:b4:40:85:23:
                    e2:66:bc:22:71:d1:b9:5f:cf:32:1d:49:41:9a:c5:
                    a6:e8:85:e7:b7:46:1d:21:27:9c:17:5f:5a:d9:0f:
                    e0:bb:c0:f7:61:47:2d:02:ee:31:ac:b9:a9:c9:ea:
                    21:43:d4:f1:89:c5:20:df:3b:f4:63:65:5e:01:61:
                    06:76:9d:dd:f5:b8:5c:e7:4f:8d:26:ec:f2:5d:1d:
                    d4:5c:8b:f5:d0:21:0e:4d:8b:61:4e:d5:bf:d2:63:
                    62:23:97:d2:ae:a4:e2:50:08:58:94:88:5c:99:10:
                    cd:26:0b:0b:12:f4:64:95:4a:e0:b6:00:92:00:fc:
                    23:39:88:4b:04:bc:4b:1f:e2:ab:b1:96:c3:33:50:
                    a8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:C0:EA:CE:E3:68:6E:32:4D:B1:FB:F1:A5:4E:D7:CB:14:24:B0
            X509v3 Authority Key Identifier:
                keyid:81:3A:BD:28:E5:1C:9C:42:9E:81:F8:11:D9:4A:D0:22:60:29:74:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTq9KOUcnEKegfgR2UrQImApdGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/gTq9KOUcnEKegfgR2UrQImApdGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fd0c88-2e1b-4810-95ba-7bbf53314e80/1/gTq9KOUcnEKegfgR2UrQImApdGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:93:86:5e:f8:57:1f:2c:f3:fc:3e:51:7f:07:03:50:3f:10:
         44:68:19:6a:f3:b4:0c:fe:ca:a5:83:27:20:85:8c:1a:76:54:
         dc:17:77:cc:41:f3:70:ac:88:87:2b:67:ca:54:6b:32:28:c4:
         22:7e:0d:9f:46:97:fd:54:19:39:35:93:b1:b6:a7:40:40:ef:
         82:e0:83:f3:84:cf:91:a5:fe:db:73:34:5c:7e:e5:3b:d0:c8:
         c2:86:36:35:d2:a7:bb:9a:2f:39:56:73:39:d9:5a:26:64:07:
         1b:d8:1e:e6:20:8d:2b:c3:41:8a:0f:ed:f7:9d:bd:08:0d:cc:
         51:3e:2d:a7:03:bf:84:37:91:f0:63:2d:67:2c:07:e7:81:ce:
         11:b5:bc:b4:b3:0f:0e:20:b9:13:ed:15:7a:af:bc:34:92:1e:
         99:15:5d:f3:74:75:18:66:b4:b5:c3:74:44:0f:c9:b8:4d:2a:
         27:85:0f:8d:f6:45:67:15:16:66:85:a5:f0:a0:c3:8f:c4:b5:
         d7:c7:dc:06:db:70:58:e9:c5:96:5b:da:cc:78:90:d4:a4:3c:
         81:fa:b0:ba:da:60:42:fb:5b:41:67:ce:d5:67:c7:36:b0:86:
         20:30:b1:0c:e7:dc:4f:5a:f9:67:11:8d:e3:6d:88:af:c8:8e:
         ee:5f:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----