Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft
File:                     884jUQitVrDzUIAkc5kLZc0cRSg.mft (raw, json)
Hash identifier:          OF8gSMhUNB+gVE8YE2R1ZMZ9LgoPfq1QDeZrt9mediE=
Subject key identifier:   B8:4B:33:68:03:75:DA:53:40:BA:4E:4C:13:65:1D:A7:EF:11:56:29
Authority key identifier: F3:CE:23:51:08:AD:56:B0:F3:50:80:24:73:99:0B:65:CD:1C:45:28
Certificate issuer:       /CN=f3ce235108ad56b0f350802473990b65cd1c4528
Certificate serial:       01909A5F5720C795EF31C8DB05B621035D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/884jUQitVrDzUIAkc5kLZc0cRSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft
Manifest number:          03C6
Signing time:             Wed 10 Jul 2024 02:00:57 +0000
Manifest this update:     Wed 10 Jul 2024 02:00:57 +0000
Manifest next update:     Thu 11 Jul 2024 02:00:57 +0000
Files and hashes:         1: 884jUQitVrDzUIAkc5kLZc0cRSg.crl (hash: 54K47STcb8mYHl443mf7NEE+f2WBakhtppY9YRwsUk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:5f:57:20:c7:95:ef:31:c8:db:05:b6:21:03:5d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ce235108ad56b0f350802473990b65cd1c4528
        Validity
            Not Before: Jul 10 02:00:57 2024 GMT
            Not After : Jul 11 02:00:57 2024 GMT
        Subject: CN=b84b33680375da5340ba4e4c13651da7ef115629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d2:87:d7:97:1a:c6:17:c0:01:f2:a0:ae:68:
                    05:fb:2b:95:4b:7e:3b:73:8d:60:3b:68:82:6a:df:
                    32:40:8a:09:84:3e:c9:72:bf:1d:1d:f7:60:39:6c:
                    29:f7:7b:54:d5:70:db:fe:de:08:ce:8d:b0:ab:f7:
                    2f:13:4d:ad:9e:d1:71:13:b7:f5:35:d0:fc:28:19:
                    b4:c1:e0:1f:a2:49:ee:8b:3c:cc:df:d4:1c:11:8f:
                    2e:1e:5f:b5:50:99:14:47:61:22:f9:ad:02:27:a3:
                    07:e8:47:f1:9b:df:1b:f8:ee:c5:d8:e3:4c:45:79:
                    6f:fe:a3:21:c1:b2:2d:02:b9:88:c6:06:4e:c0:7e:
                    fe:a5:09:19:36:c8:9e:c5:c3:77:d6:49:25:88:f2:
                    2c:79:ed:05:65:c1:4c:e3:bb:a2:00:d1:49:d5:27:
                    19:ea:23:95:54:de:cd:f9:d0:15:b4:ae:9a:19:b4:
                    b4:7b:66:cd:72:d7:47:a7:7b:2a:f0:7f:02:aa:4a:
                    dc:25:01:b7:d4:81:35:f5:c1:d7:26:ea:6e:93:60:
                    77:d5:59:22:fc:2f:22:4d:83:53:59:76:d7:26:01:
                    07:c9:0b:64:45:1a:bd:3d:10:2c:2b:0b:45:74:ea:
                    50:90:1a:2b:e1:a3:fc:5d:ed:51:8d:53:31:c3:b5:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:33:68:03:75:DA:53:40:BA:4E:4C:13:65:1D:A7:EF:11:56:29
            X509v3 Authority Key Identifier:
                keyid:F3:CE:23:51:08:AD:56:B0:F3:50:80:24:73:99:0B:65:CD:1C:45:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/884jUQitVrDzUIAkc5kLZc0cRSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8c1e3-4a84-4b39-a3a9-97a267c756b7/1/884jUQitVrDzUIAkc5kLZc0cRSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:30:41:db:b8:d1:e6:d9:6e:6c:83:93:be:51:d7:02:d3:c8:
         91:d8:37:14:be:7f:ea:c6:04:08:60:b5:6c:47:00:0a:ce:36:
         f0:b7:80:7f:d3:61:be:0f:5e:57:38:45:72:1d:45:83:60:2a:
         cf:d4:52:a0:0f:1f:ef:72:8e:fe:ef:e5:7e:85:66:cc:07:da:
         28:00:44:00:b5:e4:45:cd:2a:81:c6:32:3a:43:b1:a0:24:31:
         22:cb:f3:c2:cf:b3:74:bb:d6:29:86:79:28:3d:09:c7:16:e5:
         fb:90:18:8a:e4:ab:43:61:ba:5f:de:10:f8:d8:58:07:88:5d:
         a9:95:67:b7:37:b1:b7:6d:6b:b3:03:3c:da:e4:cd:78:1f:68:
         b1:90:f3:55:e3:23:9f:4e:54:e1:f1:ac:0e:34:90:45:09:99:
         95:a5:c1:79:1e:0b:08:34:75:f9:d5:a1:2d:90:f3:66:83:54:
         a5:c5:03:5c:56:f5:ac:1c:b0:d3:50:66:dd:91:2a:da:85:cd:
         1d:4c:86:a6:f6:43:0e:b5:a3:e4:9e:ba:bd:8d:2a:c9:c6:91:
         a0:3c:dc:31:dd:1d:7d:9e:d4:15:bc:52:c6:a5:e1:cc:a6:fe:
         fb:68:fa:c9:98:af:9c:86:96:5b:81:2e:78:00:19:73:08:ef:
         eb:bd:3e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----