Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft
File:                     Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft (raw, json)
Hash identifier:          C6dC1J+UYAOERvTAb0XIlVA5hRWQkhg0So6ZCtjO8m0=
Subject key identifier:   F5:AE:50:CD:0B:0A:7C:C0:F1:13:A8:61:BA:1A:03:26:11:13:82:78
Authority key identifier: 02:1F:87:C4:25:BD:6F:98:5B:FC:63:E8:28:2F:D1:AC:8C:94:DA:C0
Certificate issuer:       /CN=021f87c425bd6f985bfc63e8282fd1ac8c94dac0
Certificate serial:       0191FE23FB3FC0DF281F81577591BAAB9B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft
Manifest number:          0D06
Signing time:             Tue 17 Sep 2024 04:00:56 +0000
Manifest this update:     Tue 17 Sep 2024 04:00:56 +0000
Manifest next update:     Wed 18 Sep 2024 04:00:56 +0000
Files and hashes:         1: Ah-HxCW9b5hb_GPoKC_RrIyU2sA.crl (hash: ESEPorTD/tCyu8i0RkpxmSZfBV8m8HgI2ePbdKZVqgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fe:23:fb:3f:c0:df:28:1f:81:57:75:91:ba:ab:9b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021f87c425bd6f985bfc63e8282fd1ac8c94dac0
        Validity
            Not Before: Sep 17 04:00:56 2024 GMT
            Not After : Sep 18 04:00:56 2024 GMT
        Subject: CN=f5ae50cd0b0a7cc0f113a861ba1a032611138278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:22:45:73:d8:59:92:6c:e4:15:1c:82:45:68:
                    0a:5b:86:47:72:58:06:82:2c:0d:62:05:d5:91:3e:
                    5c:95:71:9c:7e:1c:17:80:57:8a:ec:ae:1c:a2:be:
                    bf:d6:f5:ba:6f:27:f8:52:7b:c3:cc:ba:b5:54:76:
                    c4:a1:b7:31:68:eb:49:64:bc:37:8d:56:e3:61:7f:
                    a3:9e:12:9e:69:fc:fa:f3:6c:d3:82:50:ef:7c:ff:
                    f3:be:53:1b:85:e5:fa:32:d7:70:7f:2d:59:a8:1d:
                    3c:96:86:f2:6d:17:47:84:4f:ee:86:68:ef:ad:85:
                    6b:cb:fe:57:49:3e:77:97:82:3c:e1:26:26:99:24:
                    ec:ee:e8:c1:17:dc:15:2c:c6:8b:1c:db:3c:36:03:
                    e4:2a:ff:9d:e7:3e:c4:48:c0:7c:86:36:c8:b6:3f:
                    cc:73:4e:cb:b5:83:83:7a:11:72:75:66:03:a8:8c:
                    57:0f:8c:dc:40:1a:82:7d:b8:ba:b1:16:32:81:65:
                    c5:2c:79:ef:4c:36:ef:88:fc:b0:0d:86:6c:8d:f2:
                    d4:7c:c1:45:62:db:a3:44:a8:54:b0:8f:b0:5b:07:
                    c4:33:82:5e:00:57:c1:3a:4b:f8:54:79:55:79:ef:
                    0c:ec:d6:9e:a3:1d:a0:2c:2b:e3:d5:ae:89:bb:f0:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AE:50:CD:0B:0A:7C:C0:F1:13:A8:61:BA:1A:03:26:11:13:82:78
            X509v3 Authority Key Identifier:
                keyid:02:1F:87:C4:25:BD:6F:98:5B:FC:63:E8:28:2F:D1:AC:8C:94:DA:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b76a25-6c25-4933-a101-0e99e3e43886/1/Ah-HxCW9b5hb_GPoKC_RrIyU2sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:31:9d:5a:5a:80:93:2f:a6:09:f1:9e:e6:d5:19:59:7f:13:
         16:78:4a:6a:ea:71:f2:31:e5:a8:4a:44:fc:8d:e6:c7:1e:ca:
         ba:38:b8:2f:47:53:96:b0:91:39:5d:a3:fd:f2:d4:43:52:cb:
         f9:25:f3:93:12:21:8e:9b:6f:52:5e:9a:cd:20:f4:c4:90:83:
         5a:59:57:13:e2:9f:4b:aa:4f:e3:bc:59:55:1e:14:d0:46:fa:
         73:17:07:17:38:af:1b:5f:c5:31:f2:16:e3:af:3a:e4:d5:74:
         ee:b2:c0:b0:d7:78:e2:8e:bf:2c:26:ca:2e:62:1d:6b:f9:8d:
         5a:98:0e:52:85:50:65:ca:c2:3e:84:24:1a:2b:5f:22:37:e4:
         31:b2:1c:98:67:ab:9f:c1:27:d4:02:cd:ea:0e:c1:4a:01:4c:
         6b:ae:71:27:ce:37:75:6e:1d:ae:82:84:5d:4e:21:37:8f:7b:
         fb:4a:0a:62:c3:fe:56:b4:c4:26:4b:fc:42:11:94:ba:60:80:
         f2:63:c3:e5:44:24:d9:08:f0:c7:0e:99:1a:4b:83:3a:7a:bb:
         4d:3b:30:f4:99:bb:9c:66:71:92:e8:4f:06:4f:fd:6e:53:09:
         3f:13:32:dc:21:fe:e1:c3:99:41:94:1d:4a:c9:9f:0e:09:6e:
         4f:77:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----