Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.mft
File:                     xmBI6dItZx7nLrNzrjVr1a19Zk8.mft (raw, json)
Hash identifier:          V/wieok86zlDuJeWPq4WExKHh9BJ00j2WpJl3eGhnUk=
Subject key identifier:   F9:1C:4A:62:6B:76:FC:DB:1C:1E:03:A4:96:DB:ED:6E:53:E7:82:7A
Authority key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Certificate issuer:       /CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Certificate serial:       018D8D50AE580FBE6E069CE568704CEBB805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.mft
Manifest number:          0865
Signing time:             Fri 09 Feb 2024 10:01:31 +0000
Manifest this update:     Fri 09 Feb 2024 10:01:31 +0000
Manifest next update:     Sat 10 Feb 2024 10:01:31 +0000
Files and hashes:         1: b2WTWYv4PsrqxtT3Grj60usaiSI.roa (hash: s1/2v1+XrsNzYphurL6cdH57mHmsY3fmKHldJHT4TRs=)
                          2: n0mKIPhm4gxvNL_RQ51t3h2f2mk.roa (hash: xFfGgu9Pp2lSGwo6JnnVDHgJp9Fn1Jd+Y+8MMInXcUw=)
                          3: xmBI6dItZx7nLrNzrjVr1a19Zk8.crl (hash: oECeQbBgj+iE0SL/7McMh8WDDNzJ0uEduq0BPHqEEoA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8d:50:ae:58:0f:be:6e:06:9c:e5:68:70:4c:eb:b8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
        Validity
            Not Before: Feb  9 10:01:31 2024 GMT
            Not After : Feb 10 10:01:31 2024 GMT
        Subject: CN=f91c4a626b76fcdb1c1e03a496dbed6e53e7827a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:89:42:ce:b1:53:5b:00:f2:b1:72:e3:23:11:
                    85:cf:b0:be:5b:ad:53:00:fc:ce:27:2f:08:b8:72:
                    18:f9:4e:e2:5b:02:fd:ec:ff:a1:b5:1a:dc:2e:c7:
                    e9:b0:a5:52:3a:0c:0d:2f:9f:fd:8a:ef:6a:00:27:
                    bf:60:03:df:2d:4a:2a:c9:14:7d:6a:dc:fa:7e:b3:
                    32:1a:d5:ca:38:ad:8f:48:e8:c9:46:49:18:e9:5b:
                    f0:14:75:c5:2d:92:e5:ed:0a:f4:5a:3e:b3:61:4b:
                    71:14:fa:d4:7e:8c:e0:ba:fc:88:7e:5f:84:e0:0b:
                    2b:32:b3:a9:cf:40:84:1f:2a:b8:3d:d9:10:39:91:
                    60:28:ac:ba:77:ac:17:1b:0c:7a:48:2a:2c:52:08:
                    c7:63:72:80:eb:2b:7a:e7:5b:40:90:ce:98:4d:55:
                    07:ef:02:d5:54:1a:f9:ea:26:0e:a0:0d:b8:59:d9:
                    6d:81:97:ec:79:7d:c9:5f:c3:10:a5:40:83:aa:4a:
                    a9:8f:18:46:0f:56:94:28:eb:38:34:f7:75:a7:36:
                    9f:a4:74:18:43:31:cd:37:85:5a:eb:b2:6e:80:0b:
                    b4:8f:fe:f4:0b:02:fd:f0:89:60:ee:f6:33:8d:38:
                    f7:7f:04:9e:cd:e7:bc:90:4d:a9:8f:71:a7:b6:73:
                    65:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1C:4A:62:6B:76:FC:DB:1C:1E:03:A4:96:DB:ED:6E:53:E7:82:7A
            X509v3 Authority Key Identifier:
                keyid:C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:50:12:71:c9:5c:94:7e:54:0a:02:11:d1:bf:f2:7c:85:e3:
         df:e1:0c:3b:dd:d1:69:a4:e3:59:76:1b:44:90:58:65:b7:44:
         79:b8:9e:39:c8:fe:f1:a7:46:eb:05:fc:ed:7c:79:94:06:0e:
         62:3e:fb:5a:f8:3d:8b:63:3e:d5:42:24:88:f8:e5:da:f6:98:
         95:cc:9a:25:fd:73:05:bf:69:a6:23:de:ff:6a:8d:c0:53:ee:
         a2:5f:69:cb:44:27:a0:fd:a1:2a:17:c3:78:18:f0:2f:8c:20:
         92:2d:e2:47:56:94:9c:93:90:af:d6:50:c7:ee:42:bc:d1:e4:
         37:cd:fa:1a:ff:44:b4:ca:d5:bb:c7:78:5c:de:fb:53:55:2e:
         8c:cd:53:c3:43:5b:9b:34:87:87:74:da:f0:93:b0:de:71:45:
         ec:06:7e:40:f9:1b:89:74:97:fd:c1:af:57:20:91:6e:56:aa:
         95:9a:16:78:59:d4:d9:3f:8c:11:03:a2:de:96:c0:62:d0:c9:
         c8:f2:d8:4a:f6:d0:d9:1a:59:3a:6b:bf:93:b2:60:09:cc:40:
         96:b4:86:2a:57:41:c6:41:3d:20:74:74:6b:44:f4:8c:fa:ce:
         f3:e3:78:a7:f6:3f:13:98:c6:5f:d6:29:87:77:c8:2e:93:ea:
         c5:fe:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----