Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.mft
File:                     6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.mft (raw, json)
Hash identifier:          j5RW6qRly0fe/lqNnTZXoIuDC5ZxOHn7K3eZOG6A/tI=
Subject key identifier:   31:FC:8B:AE:9F:DC:80:6B:F4:5A:6F:B2:49:D3:FA:B5:58:B4:0B:D9
Authority key identifier: E8:D9:37:77:56:72:01:5D:9D:D6:07:55:54:A1:AD:F8:BB:6C:CA:6C
Certificate issuer:       /CN=e8d937775672015d9dd6075554a1adf8bb6cca6c
Certificate serial:       018E369D421FF0FFDA0308F5D53D32ED3D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.mft
Manifest number:          0723
Signing time:             Wed 13 Mar 2024 07:00:59 +0000
Manifest this update:     Wed 13 Mar 2024 07:00:59 +0000
Manifest next update:     Thu 14 Mar 2024 07:00:59 +0000
Files and hashes:         1: 6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.crl (hash: Mmm8wi8XAQoxnZcR6XGs0Ywy6vVItmqaElFeQvc8+SA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:36:9d:42:1f:f0:ff:da:03:08:f5:d5:3d:32:ed:3d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d937775672015d9dd6075554a1adf8bb6cca6c
        Validity
            Not Before: Mar 13 07:00:59 2024 GMT
            Not After : Mar 14 07:00:59 2024 GMT
        Subject: CN=31fc8bae9fdc806bf45a6fb249d3fab558b40bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:56:81:64:e5:7d:4d:4e:0a:c7:29:c4:8b:
                    94:ab:03:e0:7f:83:88:ec:b6:e0:49:8e:8b:ae:e0:
                    5c:54:bd:04:87:de:59:51:66:a9:43:c9:90:ae:18:
                    bf:8b:40:25:46:ad:e8:79:1d:b2:99:db:9a:2b:0b:
                    b6:1b:3b:2e:35:0a:f3:88:05:6d:d0:b8:64:92:65:
                    d9:9d:50:83:39:70:ea:2d:53:7b:b4:76:ea:54:6b:
                    02:be:8e:b1:ca:96:b9:76:71:38:5d:cb:5e:89:4c:
                    16:bb:6a:57:e8:65:2f:31:0f:b0:40:6d:a1:1c:f6:
                    22:6b:9a:03:00:fa:a0:a4:b4:8b:73:be:1d:95:7e:
                    66:25:b2:5d:bf:f3:26:0a:83:25:a3:89:a2:70:7c:
                    6c:e0:8b:11:eb:b7:c8:ba:12:a5:76:a1:a1:c6:b7:
                    1f:80:61:4d:70:d6:ed:c5:98:ba:b9:52:ba:fc:e8:
                    0c:f3:f6:3f:45:8a:88:a4:b4:3f:03:43:89:36:dc:
                    cf:bd:0c:52:93:78:cb:f3:4d:17:df:19:82:47:9d:
                    bb:27:57:17:d9:4c:74:49:6d:c5:bf:6d:57:92:ad:
                    b4:9d:29:d5:03:af:ba:ff:a5:2d:99:62:eb:ed:46:
                    86:9c:48:78:dd:91:8e:f8:7c:69:1e:b7:2f:f7:30:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FC:8B:AE:9F:DC:80:6B:F4:5A:6F:B2:49:D3:FA:B5:58:B4:0B:D9
            X509v3 Authority Key Identifier:
                keyid:E8:D9:37:77:56:72:01:5D:9D:D6:07:55:54:A1:AD:F8:BB:6C:CA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/6Nk3d1ZyAV2d1gdVVKGt-Ltsymw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a3:78:a5:a8:23:db:fe:9a:b5:d4:09:ab:26:45:2d:b4:88:
         8e:06:9c:a2:a9:82:82:46:d2:0b:a3:c9:fb:f1:ae:94:d1:f0:
         e8:fa:2d:fb:e6:cf:ea:13:12:e5:5e:d1:df:d6:24:3e:71:a2:
         c3:80:f3:36:aa:52:39:6e:51:8b:41:50:61:e2:7f:d2:bb:ee:
         89:e1:7b:58:df:e3:9f:bc:33:98:26:4d:9a:62:df:c3:a8:5c:
         d0:99:60:68:8e:a2:bc:6b:0a:27:b5:76:dd:52:1c:b2:28:b8:
         2a:9b:c2:eb:99:6e:2d:a4:25:b8:8d:f6:1d:42:d0:d7:f7:18:
         8b:f5:24:83:d6:a3:a4:e2:66:12:2a:e8:4e:8a:6a:1a:80:6b:
         e1:b5:84:54:46:e0:d4:6a:32:bc:ae:06:84:3d:43:0a:0a:06:
         0d:1e:c1:2e:ac:b4:17:bd:58:56:49:f9:ec:86:3e:8f:1c:b4:
         40:99:93:51:1e:94:23:af:93:1a:ac:cf:2c:47:c9:5b:88:60:
         24:93:1e:d1:48:a7:89:bd:95:03:e1:8b:4b:df:8c:8f:35:0d:
         16:80:42:a5:0a:4a:e9:c6:cc:1b:82:a0:95:2c:64:87:f9:63:
         7e:d1:46:c5:b0:07:1b:4c:ce:4f:e7:de:76:d3:94:05:ac:c9:
         50:c6:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----