Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.mft
File:                     1x7lMzeh0FuqR-AJy1up8sRXAUQ.mft (raw, json)
Hash identifier:          Vyl9MuiyD5FQY0/Q6NmKYfbiGyqk8/aRWS86fqteyXc=
Subject key identifier:   B0:9D:AC:6D:7E:3D:E4:73:A4:E1:87:7E:93:24:F8:C7:3A:26:C2:A9
Authority key identifier: D7:1E:E5:33:37:A1:D0:5B:AA:47:E0:09:CB:5B:A9:F2:C4:57:01:44
Certificate issuer:       /CN=d71ee53337a1d05baa47e009cb5ba9f2c4570144
Certificate serial:       018E3177DD445EAEB54302A04C756651FA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1x7lMzeh0FuqR-AJy1up8sRXAUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.mft
Manifest number:          0826
Signing time:             Tue 12 Mar 2024 07:02:02 +0000
Manifest this update:     Tue 12 Mar 2024 07:02:02 +0000
Manifest next update:     Wed 13 Mar 2024 07:02:02 +0000
Files and hashes:         1: 1qJINAfRQkZowMbeezub-dmmVm0.roa (hash: HS91k4ZoWzHpKO0liRqxNenQucHTisgLQosOcXm46rc=)
                          2: 1x7lMzeh0FuqR-AJy1up8sRXAUQ.crl (hash: OETbB5FyGWICi4gSuTAi06xr/jB+aidXMqTIGI4E/ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:31:77:dd:44:5e:ae:b5:43:02:a0:4c:75:66:51:fa:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d71ee53337a1d05baa47e009cb5ba9f2c4570144
        Validity
            Not Before: Mar 12 07:02:02 2024 GMT
            Not After : Mar 13 07:02:02 2024 GMT
        Subject: CN=b09dac6d7e3de473a4e1877e9324f8c73a26c2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:fe:c7:5c:17:c1:b0:bb:e6:0a:0d:3e:c4:
                    97:f1:2c:40:ff:f8:e7:22:6a:6c:5c:58:5a:9a:1f:
                    ff:47:3c:a6:e3:22:25:89:51:b2:df:65:1e:8c:b3:
                    b1:4f:43:a2:b9:1e:2d:c8:5c:23:27:1e:a6:be:0e:
                    81:21:f2:b1:75:88:d8:d9:ee:9f:21:5b:60:4b:1b:
                    d9:da:6e:3f:e6:f6:f6:84:c1:f0:44:12:14:20:66:
                    67:5f:b7:65:8c:7d:7a:32:dd:b6:f9:99:86:ff:44:
                    c3:52:f2:3b:6f:5a:1d:0e:50:2c:e2:27:4e:ee:16:
                    26:03:1a:a5:96:47:cd:21:3d:c1:6a:b7:27:34:cd:
                    e9:97:0e:2c:32:83:27:ab:49:97:b7:8b:0e:7b:c5:
                    43:0e:43:5e:a2:57:9c:5e:52:4c:b7:cc:7b:02:5f:
                    30:18:31:5a:4f:cb:ca:c8:ab:82:3b:bb:74:a9:73:
                    24:a8:fa:ac:d5:97:b6:99:06:e4:8f:a1:1b:c4:97:
                    b6:e1:28:26:f7:af:cf:52:fa:7b:13:7b:21:89:20:
                    22:63:00:51:8b:56:02:ee:6c:1e:4e:e4:42:4d:82:
                    d6:98:86:f2:98:5e:dd:15:dc:71:f7:0c:bc:69:ff:
                    a8:29:47:81:cf:16:e3:3f:26:79:b4:60:f5:ed:54:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:AC:6D:7E:3D:E4:73:A4:E1:87:7E:93:24:F8:C7:3A:26:C2:A9
            X509v3 Authority Key Identifier:
                keyid:D7:1E:E5:33:37:A1:D0:5B:AA:47:E0:09:CB:5B:A9:F2:C4:57:01:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x7lMzeh0FuqR-AJy1up8sRXAUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:00:33:86:6b:6c:f7:84:e1:13:bc:16:44:41:c3:68:2d:98:
         03:a2:d3:f8:f5:4e:2d:15:a8:5d:bf:64:33:2e:b0:af:5f:98:
         8d:fc:2b:6c:34:1a:35:0e:3f:52:8c:0d:35:96:04:76:55:f5:
         dd:84:7b:79:6c:3a:5c:72:33:4e:77:bf:5d:73:2e:92:55:2e:
         40:5d:e2:34:c9:ae:1b:51:42:63:9d:b1:e5:4b:43:79:f8:f1:
         e1:99:17:2d:14:2a:aa:32:6f:a5:0d:4a:b5:7d:92:05:8e:90:
         de:a3:19:b4:14:29:8d:72:53:d3:ec:2b:cc:44:e4:62:cc:49:
         57:bb:d1:8a:23:86:83:ae:21:54:cc:76:e2:46:9d:da:14:54:
         08:42:90:c6:92:9e:2c:47:10:c3:a4:66:27:39:54:de:e6:75:
         9a:dc:3f:ef:04:1b:21:fa:09:b1:6f:0f:11:ba:b4:aa:3e:b5:
         37:e4:3e:e1:19:50:54:a9:b8:3a:e6:38:14:79:f4:71:68:1a:
         87:83:6e:4b:e1:91:16:1a:ee:0a:c7:fc:36:47:01:77:c4:29:
         ab:57:73:23:19:fe:32:b1:ce:af:1c:bd:fb:a5:42:50:a6:cb:
         b0:2d:61:0d:7d:7d:33:9a:03:10:8d:78:78:78:88:76:5e:27:
         60:51:8e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----