Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.mft
File:                     sKv_-IXKVLslJjgPclBR1T5yE8A.mft (raw, json)
Hash identifier:          /LF6wVK+RdvrFLbYEY2Q66LxR2eNCYlxy7UEAQqUB94=
Subject key identifier:   51:C3:F6:F8:46:60:E9:92:67:1C:48:1C:CA:82:2C:77:F1:1B:AC:5A
Authority key identifier: B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0
Certificate issuer:       /CN=b0abfff885ca54bb2526380f725051d53e7213c0
Certificate serial:       0192D59325E130436C3E6258B47C4D5A6580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.mft
Manifest number:          07E9
Signing time:             Tue 29 Oct 2024 00:00:43 +0000
Manifest this update:     Tue 29 Oct 2024 00:00:43 +0000
Manifest next update:     Wed 30 Oct 2024 00:00:43 +0000
Files and hashes:         1: V8NLewQ2tEv_0pd5OvURPl4kK4E.roa (hash: MK3K9FNdnamwecuBKy7FOp/TKe9SgpJUUlIQw234fy0=)
                          2: sKv_-IXKVLslJjgPclBR1T5yE8A.crl (hash: uV3Ws1neuf5y/NMZxe5LGK3D1BvObMiZPh1gu4rYjXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d5:93:25:e1:30:43:6c:3e:62:58:b4:7c:4d:5a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0abfff885ca54bb2526380f725051d53e7213c0
        Validity
            Not Before: Oct 29 00:00:43 2024 GMT
            Not After : Oct 30 00:00:43 2024 GMT
        Subject: CN=51c3f6f84660e992671c481cca822c77f11bac5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:1f:0a:49:d0:ba:f4:9d:1f:7b:87:ce:25:
                    84:2b:99:c4:c2:b9:34:e2:1e:1f:2e:2d:13:ce:48:
                    a5:c9:6c:ca:b5:f1:1c:71:70:4d:d9:eb:bf:32:5b:
                    35:e8:8c:08:1c:0a:db:17:0e:d6:97:9e:35:16:49:
                    12:28:42:39:ad:15:11:ec:a3:e0:05:ca:50:47:e4:
                    5b:fe:e7:56:44:35:9a:58:64:3a:cc:61:2f:48:eb:
                    c4:40:81:15:4a:57:3f:c8:8e:7e:33:97:e2:a9:3a:
                    e7:4e:55:93:d3:39:82:42:58:ff:61:b2:b8:32:30:
                    30:32:6c:32:c5:e9:f9:11:6d:05:d8:f7:8c:68:c3:
                    90:6c:d6:4d:a6:17:c4:f8:5a:ab:3a:1b:af:f6:60:
                    75:f8:40:6d:fa:0c:08:06:fa:4b:06:bf:59:8e:56:
                    82:12:22:52:33:55:e1:28:a3:d7:ff:de:d4:3c:f8:
                    38:17:c1:b3:cd:df:08:74:f5:43:ae:07:ff:dc:9a:
                    42:ef:b3:2e:ea:24:f0:03:99:11:f2:c3:9b:28:2b:
                    62:d7:2a:64:62:22:04:9a:97:97:d8:d2:6e:1e:14:
                    d5:6e:32:64:08:db:10:eb:74:e6:f0:2d:27:0a:79:
                    6e:f8:a3:28:e5:9d:a2:62:e1:04:f1:78:ea:66:74:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:F6:F8:46:60:E9:92:67:1C:48:1C:CA:82:2C:77:F1:1B:AC:5A
            X509v3 Authority Key Identifier:
                keyid:B0:AB:FF:F8:85:CA:54:BB:25:26:38:0F:72:50:51:D5:3E:72:13:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKv_-IXKVLslJjgPclBR1T5yE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2daf90-9c17-44c6-8082-3450f0d7afdd/1/sKv_-IXKVLslJjgPclBR1T5yE8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:22:3e:c4:49:05:d9:f9:73:a5:d7:2f:13:56:78:02:38:
         59:ef:82:fb:16:ef:e9:8c:46:c3:e5:c0:f3:dd:ef:07:1b:b5:
         78:70:37:be:ee:79:e4:97:58:2d:9a:a3:6e:21:81:7e:39:fd:
         d4:1c:6e:c5:82:0a:37:d9:5e:48:21:0b:97:5e:4a:e8:87:e4:
         9b:17:7d:44:04:f7:4c:d3:93:9d:77:99:f2:a2:40:a6:af:77:
         44:63:94:bc:9e:6b:a3:8d:b3:a2:6a:eb:e2:6a:2c:38:f1:3a:
         05:32:51:d5:1f:7c:98:ff:84:2e:64:b3:69:22:bd:3a:9a:66:
         e8:22:7d:8e:58:55:57:af:2b:d1:50:79:66:28:a4:4a:c9:70:
         b1:72:f4:7c:9b:22:25:23:d1:31:db:78:e1:45:ea:9c:0f:4d:
         88:1c:c6:c6:ba:e5:ad:34:a7:f8:93:ec:53:fd:ad:22:bf:f3:
         ac:14:17:24:e1:57:ea:ea:1d:be:41:e8:d5:7d:31:45:9b:1b:
         56:4a:3b:97:c1:9d:34:75:a3:16:46:06:df:0d:b2:79:7f:af:
         cf:79:06:0f:ec:ee:24:24:c0:1c:64:aa:f4:c3:5b:ac:cd:eb:
         d3:d5:82:69:8f:b7:44:57:ce:01:1c:ed:22:0d:2e:c2:e7:94:
         d7:dc:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----