Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
File:                     fI5W40brqFchH-8PULFNAqt53BE.mft (raw, json)
Hash identifier:          fQkggl0Ie3jWfzZ0+IqILb3XIpHDenyuA5+nUwt6zks=
Subject key identifier:   35:E9:FE:33:3D:D8:42:11:BB:E3:30:8A:5C:40:6D:1B:73:E4:23:5B
Authority key identifier: 7C:8E:56:E3:46:EB:A8:57:21:1F:EF:0F:50:B1:4D:02:AB:79:DC:11
Certificate issuer:       /CN=7c8e56e346eba857211fef0f50b14d02ab79dc11
Certificate serial:       0192B1500676D26F04F3CCAF0CCDC88ED030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft
Manifest number:          0834
Signing time:             Mon 21 Oct 2024 23:01:04 +0000
Manifest this update:     Mon 21 Oct 2024 23:01:04 +0000
Manifest next update:     Tue 22 Oct 2024 23:01:04 +0000
Files and hashes:         1: fI5W40brqFchH-8PULFNAqt53BE.crl (hash: gYRnnlGldJfMSV/gukoT9CISHdeEEKAu77jHCtWqMrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b1:50:06:76:d2:6f:04:f3:cc:af:0c:cd:c8:8e:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8e56e346eba857211fef0f50b14d02ab79dc11
        Validity
            Not Before: Oct 21 23:01:04 2024 GMT
            Not After : Oct 22 23:01:04 2024 GMT
        Subject: CN=35e9fe333dd84211bbe3308a5c406d1b73e4235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:a8:24:8d:c9:db:b7:2e:80:5f:83:30:b5:
                    af:2d:0f:34:36:e7:9b:20:95:61:5a:8b:d5:ff:f5:
                    85:4d:0c:06:21:99:0d:53:a8:52:27:7d:a5:21:de:
                    8e:4c:7b:cb:e7:16:d9:43:c1:5f:4e:b2:ab:bb:89:
                    c2:34:ac:ca:d7:7b:be:1b:bb:19:13:f8:ea:fc:75:
                    ec:82:d2:09:59:ad:c4:c2:6e:54:6c:85:08:fa:b9:
                    0f:68:a4:7e:68:06:40:cc:72:88:12:4f:de:0d:5f:
                    61:11:93:c1:d0:15:75:62:d7:a3:44:d0:ed:64:f2:
                    ad:be:c5:8e:f0:e2:f6:fb:64:65:83:4b:00:89:5c:
                    e1:4b:14:39:c6:41:f1:59:ea:28:bc:62:09:30:3f:
                    ff:d3:2a:97:d3:40:ea:2f:be:bf:e4:18:1f:26:32:
                    c5:80:e7:d8:92:15:c7:99:f7:2f:ee:4e:8c:e6:71:
                    40:1c:e5:af:36:1a:5b:3e:e9:13:2d:70:89:08:ab:
                    7b:d2:0b:cf:85:29:03:e5:f4:16:90:65:06:fc:ae:
                    1a:40:64:72:b7:ee:70:82:70:ff:43:84:cd:ff:b5:
                    55:64:ba:60:a0:bf:39:09:6c:db:3c:6f:12:1f:cd:
                    6e:5c:ad:d7:bf:9f:94:b0:4b:a1:a6:fa:19:e0:fe:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:FE:33:3D:D8:42:11:BB:E3:30:8A:5C:40:6D:1B:73:E4:23:5B
            X509v3 Authority Key Identifier:
                keyid:7C:8E:56:E3:46:EB:A8:57:21:1F:EF:0F:50:B1:4D:02:AB:79:DC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5W40brqFchH-8PULFNAqt53BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/dc4d04-9674-4dd2-adaa-5757524e986b/1/fI5W40brqFchH-8PULFNAqt53BE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:67:5c:d5:6f:2c:b9:13:45:0f:f1:c9:64:2a:a7:30:af:
         79:a9:09:ec:15:4e:59:40:5a:14:22:6e:f8:38:49:6c:a8:22:
         1f:79:f7:9c:dc:5e:50:d9:a4:b5:92:c5:7c:21:e0:ee:d2:a1:
         7b:35:eb:28:75:77:1e:25:ee:cf:6f:7a:3e:b6:82:f2:f0:9a:
         d3:a0:b1:ec:1e:24:a0:ec:e0:d0:1b:86:71:31:06:86:b2:e3:
         f1:6b:63:9f:5d:8d:ab:c1:ed:04:12:b1:22:c0:98:c9:4c:2d:
         73:9f:0f:d9:18:a6:41:ba:53:67:67:16:19:96:86:47:41:33:
         cf:2f:37:27:2a:71:86:3c:a8:d3:10:85:bd:da:4f:73:2a:fe:
         06:55:a6:83:9c:5d:b1:95:34:38:45:e5:3b:bd:ef:de:e9:d0:
         bc:82:11:e9:e9:e3:93:57:f5:41:c1:eb:d3:20:b6:39:a5:17:
         75:f3:b9:0d:d4:68:09:1e:63:2a:0d:26:1c:c4:9d:04:e2:c8:
         92:88:0c:50:7e:ab:bd:26:86:c9:a9:70:88:fe:3f:f4:05:e8:
         ad:1d:27:cd:4f:e4:57:b7:39:ee:fb:ef:b5:bc:f8:40:d9:82:
         69:c0:a4:6a:2d:7b:5f:60:2a:b1:9a:a7:00:0e:2c:77:b8:fb:
         ce:5d:66:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----