Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/fLm6DGX6cx62X7zhJlEg90W6vGU.mft
File:                     fLm6DGX6cx62X7zhJlEg90W6vGU.mft (raw, json)
Hash identifier:          fMWFoxr4UNc3JVi53QP5pFHOLN/AJA6uAXy7hP800q0=
Subject key identifier:   C3:6B:D1:26:BE:5C:A8:11:FE:78:CD:13:E1:AE:C8:CA:F4:2B:76:82
Authority key identifier: 7C:B9:BA:0C:65:FA:73:1E:B6:5F:BC:E1:26:51:20:F7:45:BA:BC:65
Certificate issuer:       /CN=7cb9ba0c65fa731eb65fbce1265120f745babc65
Certificate serial:       018ECAAB8E02FE179D62D09B8BED063974D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLm6DGX6cx62X7zhJlEg90W6vGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/fLm6DGX6cx62X7zhJlEg90W6vGU.mft
Manifest number:          0E35
Signing time:             Thu 11 Apr 2024 01:00:24 +0000
Manifest this update:     Thu 11 Apr 2024 01:00:24 +0000
Manifest next update:     Fri 12 Apr 2024 01:00:24 +0000
Files and hashes:         1: fLm6DGX6cx62X7zhJlEg90W6vGU.crl (hash: ikO5AhTqlu5drWBBWEODWXbaSRKBTguPCq1uBIYzfHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ca:ab:8e:02:fe:17:9d:62:d0:9b:8b:ed:06:39:74:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb9ba0c65fa731eb65fbce1265120f745babc65
        Validity
            Not Before: Apr 11 01:00:24 2024 GMT
            Not After : Apr 12 01:00:24 2024 GMT
        Subject: CN=c36bd126be5ca811fe78cd13e1aec8caf42b7682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ca:6f:49:85:71:cd:e4:a9:d8:89:af:dd:eb:
                    66:e9:d4:0f:7d:6b:ed:a2:4b:1f:e8:8b:10:6a:19:
                    49:cf:a0:a0:c6:f5:4c:49:19:2b:ce:b6:c3:19:1a:
                    91:e6:d2:f9:27:37:a7:98:f2:56:99:a4:64:51:5a:
                    aa:9b:80:b2:e2:ec:5e:a8:b2:24:1b:f4:c0:2d:d6:
                    93:02:0b:b5:14:94:79:bd:96:46:6f:7b:04:d1:92:
                    9d:79:3b:ca:0d:fb:ce:a5:8f:d0:a5:91:8b:8c:b1:
                    1b:6d:e6:e1:ff:b7:9c:4b:4b:41:0b:aa:8f:26:92:
                    98:db:61:ca:ec:e2:02:d1:86:a4:4a:47:cc:a9:31:
                    8f:de:f1:da:1a:10:4e:47:0b:dc:4c:e5:d9:b0:e0:
                    78:a1:a7:7a:da:b5:86:ce:df:c3:57:85:05:f6:50:
                    ee:29:89:cc:4b:f1:e3:fa:56:ad:1b:8a:7f:93:b0:
                    84:ca:a5:9f:53:74:54:3b:f1:cd:d2:75:88:b3:1e:
                    2b:09:09:38:85:e9:09:70:31:20:d9:b7:2d:cb:43:
                    53:c0:0f:a1:65:11:c1:ea:9b:3b:4c:21:c2:e6:fd:
                    9d:43:1e:c3:bd:51:46:4b:f6:b5:01:52:9e:3a:af:
                    aa:00:bf:66:39:8b:be:3d:e0:19:c6:9f:c2:7b:7d:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6B:D1:26:BE:5C:A8:11:FE:78:CD:13:E1:AE:C8:CA:F4:2B:76:82
            X509v3 Authority Key Identifier:
                keyid:7C:B9:BA:0C:65:FA:73:1E:B6:5F:BC:E1:26:51:20:F7:45:BA:BC:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLm6DGX6cx62X7zhJlEg90W6vGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/fLm6DGX6cx62X7zhJlEg90W6vGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5499c3-6239-44b0-aa74-551625741efe/1/fLm6DGX6cx62X7zhJlEg90W6vGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:76:45:bd:60:37:64:c7:50:08:50:f2:32:da:0a:da:5b:
         32:e8:ac:44:e9:e6:36:0d:bf:5e:d6:30:f7:b1:d7:11:49:4b:
         bc:1e:08:c3:b2:41:41:1b:cb:03:aa:62:82:42:d3:a5:9c:db:
         65:dd:f7:7e:ad:ea:96:7e:e1:af:be:46:aa:19:83:69:f0:05:
         65:fb:7f:00:e3:f4:40:92:97:ba:c0:46:e6:af:e4:f1:e9:55:
         fd:5a:b6:ef:dd:cb:d1:53:0e:46:e9:e4:15:91:af:3f:da:88:
         80:7a:8c:91:f0:3a:9a:75:0c:28:da:74:da:c7:bb:4c:e4:61:
         5c:cd:22:4c:18:74:93:7f:c8:c9:3f:cc:61:1a:eb:e2:04:8e:
         9d:ff:ea:ab:6f:99:b0:ee:2d:6e:49:d2:56:fd:76:55:71:35:
         62:f3:a8:66:4f:f2:3f:cd:22:aa:28:70:1b:ea:ad:b8:02:c2:
         9e:73:35:55:a9:0f:72:99:8c:fd:51:7a:cc:b4:9e:64:09:c4:
         5f:0f:39:50:d1:0d:8b:85:2f:77:cb:05:20:53:c8:d6:29:a6:
         c0:9d:ff:58:54:af:b0:e4:fa:ee:50:11:bb:da:6f:86:93:1f:
         99:0b:c3:0b:32:02:ea:a1:d5:3d:65:6a:e8:a6:60:1a:71:94:
         57:c1:38:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----