Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.mft
File:                     1-WUpAejF4KZ84SEoSYDkWhfKCeM.mft (raw, json)
Hash identifier:          DOIU0qvYbJGzn5hhdC/ACiG9YhNPgD8h3HHxOgmQwYA=
Subject key identifier:   42:B2:8B:37:A3:6E:E8:32:B9:B4:7A:4D:46:D7:49:51:26:A3:EB:7A
Authority key identifier: F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3
Certificate issuer:       /CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
Certificate serial:       018F27CC66622C9E4390EA6ED804384DA680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.mft
Manifest number:          07DC
Signing time:             Mon 29 Apr 2024 03:00:57 +0000
Manifest this update:     Mon 29 Apr 2024 03:00:57 +0000
Manifest next update:     Tue 30 Apr 2024 03:00:57 +0000
Files and hashes:         1: 1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl (hash: f1zIqzpFQP1LszX9aDD6vmNQJv1nG8rwccqjEPfc9Bg=)
                          2: 6LBMlikC2FyFwVkwjqVHHWz7Crk.roa (hash: pJxe5mPlybGwwxGzg4SjRalEOawepUUxg9rnTpsgzcw=)
                          3: wDzZ7WPM5hZIkj9NV-I92u5VeBs.roa (hash: 5esGp9L2WG+ktwTSpoaMB7Gdksf3rV9O0WOKZXDuHiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:27:cc:66:62:2c:9e:43:90:ea:6e:d8:04:38:4d:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9652901e8c5e0a67ce121284980e45a17ca09e3
        Validity
            Not Before: Apr 29 03:00:57 2024 GMT
            Not After : Apr 30 03:00:57 2024 GMT
        Subject: CN=42b28b37a36ee832b9b47a4d46d7495126a3eb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:55:21:38:9b:3c:46:c0:52:a9:88:32:ac:
                    62:b4:7a:86:10:5c:01:5a:93:22:91:c4:7e:5a:a5:
                    f3:c1:cc:f3:b6:81:9b:cf:8c:c0:44:cf:65:58:84:
                    19:48:ae:cd:28:ae:8a:ba:4c:bf:9f:c5:72:d9:e1:
                    ba:26:af:b0:5d:ac:34:99:60:e9:df:50:e2:11:86:
                    31:13:0a:9a:92:11:d4:c1:6b:53:df:7b:6a:d5:40:
                    b4:5f:6d:ab:30:38:2e:6d:64:b5:04:52:00:21:7c:
                    7b:ac:31:7b:6e:1c:9a:96:16:72:5f:0b:e7:2f:2c:
                    8d:be:06:e9:7f:5e:5f:c1:e6:03:8f:6a:51:d0:05:
                    38:e5:bb:3e:fb:68:e0:1f:1b:92:fd:2e:b7:dc:dc:
                    e1:fd:48:b0:73:53:69:dc:36:8e:54:01:83:55:eb:
                    57:b2:47:0b:1a:d7:e6:be:ee:37:61:84:3b:30:1e:
                    e2:74:b0:9d:6f:b0:d0:6a:cb:6f:92:c4:3a:cc:47:
                    35:05:9b:96:5a:4b:e7:db:00:fd:71:8f:a2:03:df:
                    5a:6c:06:9e:66:c1:b0:17:28:c9:55:e0:1c:18:96:
                    87:9c:da:11:8c:bf:b6:c2:d9:d4:b2:00:d9:f5:07:
                    fa:05:2e:0e:9b:87:61:3c:0a:74:10:1d:29:c7:07:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B2:8B:37:A3:6E:E8:32:B9:B4:7A:4D:46:D7:49:51:26:A3:EB:7A
            X509v3 Authority Key Identifier:
                keyid:F9:65:29:01:E8:C5:E0:A6:7C:E1:21:28:49:80:E4:5A:17:CA:09:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WUpAejF4KZ84SEoSYDkWhfKCeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ca7eb7-0917-43f9-b193-b19f4d175f1f/1/1-WUpAejF4KZ84SEoSYDkWhfKCeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:d1:72:58:af:fc:f7:b4:d4:46:93:36:e2:72:f7:79:6c:
         a1:99:a7:cd:69:ed:5b:59:98:e2:c6:e0:16:1c:a1:c4:9c:a9:
         a5:41:a4:47:a5:43:f1:95:00:9c:a1:fd:d1:84:00:b3:a8:88:
         8d:1b:87:4e:a2:8f:47:6d:93:b1:fb:17:a4:f9:36:cc:51:ea:
         5e:83:fa:05:45:6b:1c:2d:29:e9:1f:81:a9:46:3f:0a:a5:ea:
         76:4b:2f:2e:ec:55:9a:81:4c:ae:91:e6:3c:0a:11:a8:df:38:
         b5:27:d9:ae:86:5d:bc:46:1a:1f:89:71:28:bc:92:2b:10:39:
         fd:f0:9c:41:a6:63:1a:e1:08:2a:c5:81:16:95:8a:76:f7:30:
         78:d4:55:ce:df:7c:c9:ef:98:be:62:13:fe:5c:de:87:9d:b4:
         c4:76:0a:cd:0f:98:0f:77:7d:6c:bf:81:06:66:2f:07:20:b6:
         be:43:77:7f:f2:12:8d:39:18:f5:23:53:7c:89:11:c0:96:30:
         f5:1e:b9:a5:78:9a:3c:65:c9:27:65:4a:a8:25:8b:9d:1d:5f:
         d9:fd:2f:fb:ec:db:39:a1:e8:71:8e:af:30:f5:7b:66:0c:13:
         6e:1d:49:20:35:03:6f:09:fb:69:cc:e0:62:3c:63:7d:a5:27:
         41:05:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----