Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
File:                     0D_r_VN-Mgy77CtOImd7muZvYE4.mft (raw, json)
Hash identifier:          /jkbjRr1ErCOKF/F90dTL6nXr/ZrLK5OLQYVr2Bn85g=
Subject key identifier:   AD:A3:89:1A:15:E6:B3:82:76:6F:08:1B:7B:9F:92:52:5E:58:C2:48
Authority key identifier: D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E
Certificate issuer:       /CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
Certificate serial:       018E59604E4B65ABEA4257031651FE36ADF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft
Manifest number:          08D2
Signing time:             Wed 20 Mar 2024 01:01:07 +0000
Manifest this update:     Wed 20 Mar 2024 01:01:07 +0000
Manifest next update:     Thu 21 Mar 2024 01:01:07 +0000
Files and hashes:         1: 0D_r_VN-Mgy77CtOImd7muZvYE4.crl (hash: GRyPC+dVZgZhrVDtUaClGnPPFiTMs4HAs0USM2mBHA8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:59:60:4e:4b:65:ab:ea:42:57:03:16:51:fe:36:ad:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03febfd537e320cbbec2b4e22677b9ae66f604e
        Validity
            Not Before: Mar 20 01:01:07 2024 GMT
            Not After : Mar 21 01:01:07 2024 GMT
        Subject: CN=ada3891a15e6b382766f081b7b9f92525e58c248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:a5:e5:05:2b:61:7b:8d:9f:97:fa:c3:ee:
                    b1:92:70:be:92:97:6a:c7:2c:79:5b:1f:4c:2c:1f:
                    e8:67:c6:76:9c:38:9d:a1:1e:fb:f6:ae:66:20:2c:
                    ce:85:f0:0c:01:0b:40:6a:9d:06:ae:2b:dc:8c:ef:
                    e6:93:d8:cb:d9:71:0b:2a:fd:e8:4e:9d:8c:f5:e9:
                    a6:60:50:fe:8e:1b:ba:d1:e0:02:b0:3a:0a:69:69:
                    35:9d:62:55:11:da:ee:e4:06:b2:da:d3:f2:43:51:
                    25:05:e8:2f:eb:c0:56:1f:d0:41:4e:2c:c8:9d:bc:
                    a9:0f:96:61:32:49:3c:ad:c3:7d:ef:fd:fc:49:2d:
                    09:8b:b8:38:a4:d3:7d:c0:cb:aa:4b:ec:ac:53:06:
                    29:38:61:38:19:f2:90:78:e2:da:f0:37:ed:46:0b:
                    2b:7f:f9:dd:d0:d1:f1:31:71:3d:83:7b:a9:f5:0c:
                    b4:6e:33:90:9c:fa:b9:b9:5c:84:21:ed:57:54:8f:
                    ba:99:35:18:54:e9:5d:31:a0:0e:36:31:8a:f0:d0:
                    b9:39:25:2f:d6:6d:d9:e1:0f:34:74:7f:0c:88:3a:
                    1a:1e:3e:54:b1:35:b0:97:b5:c8:16:1b:fe:95:f2:
                    c1:24:3f:cc:9c:39:74:38:18:d4:84:9a:22:5e:bb:
                    e5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A3:89:1A:15:E6:B3:82:76:6F:08:1B:7B:9F:92:52:5E:58:C2:48
            X509v3 Authority Key Identifier:
                keyid:D0:3F:EB:FD:53:7E:32:0C:BB:EC:2B:4E:22:67:7B:9A:E6:6F:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0D_r_VN-Mgy77CtOImd7muZvYE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a11567-259e-4d1b-bfcb-281fade2834b/1/0D_r_VN-Mgy77CtOImd7muZvYE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fd:a9:07:71:2b:e3:f7:0d:25:6b:21:37:66:2f:ab:c0:83:
         f5:90:f0:01:46:56:57:24:81:c8:f6:88:13:ac:92:79:ae:b2:
         45:3b:ad:4a:32:ae:2a:40:d5:a4:ab:c0:45:15:3c:eb:b5:7f:
         fb:80:32:cf:f0:62:65:ea:b1:0d:2a:b7:03:71:57:3b:f2:2c:
         8a:72:da:9a:f2:ab:70:3b:c8:78:35:32:5b:03:ae:04:a5:f6:
         e7:af:f7:28:c5:ac:0c:4b:5f:e5:88:39:48:8a:2a:99:a5:7f:
         44:01:71:f0:a5:42:69:15:37:c0:dd:54:f1:9c:8e:2b:83:28:
         a8:28:ab:03:a6:3f:64:a0:b6:59:b2:fb:ce:d4:22:02:5c:8f:
         34:11:55:51:ab:c4:4d:fd:f1:d9:dd:63:4d:46:a9:22:c5:76:
         3a:b3:53:d9:1a:40:91:97:70:7d:f2:47:51:aa:c8:8a:c2:66:
         36:db:26:4f:c0:91:1c:d0:51:ea:c7:66:c2:8d:55:d4:0c:c6:
         47:c9:b6:25:c9:e3:b3:26:08:70:2b:91:f1:e6:82:11:cf:c3:
         59:21:fc:c0:ce:5d:21:fc:9b:7d:44:f4:04:94:00:c4:63:c9:
         ca:ba:93:8d:82:5b:34:1c:37:83:fe:bf:35:c1:9d:da:85:70:
         62:73:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----