Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.mft
File:                     ZRaYwM2YN5eRXn15P7bRjEgehMU.mft (raw, json)
Hash identifier:          jKXepJDppKM/4Pxu/vjH9mvD4oTDM+lR7tSXDSuxJWA=
Subject key identifier:   55:46:6C:2A:EB:47:F2:EE:47:14:5F:1F:91:4B:A3:1A:EA:24:F4:9B
Authority key identifier: 65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5
Certificate issuer:       /CN=651698c0cd983797915e7d793fb6d18c481e84c5
Certificate serial:       018EE3C691D577AC1F04A2055CD3C190EA1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.mft
Manifest number:          0918
Signing time:             Mon 15 Apr 2024 22:00:25 +0000
Manifest this update:     Mon 15 Apr 2024 22:00:25 +0000
Manifest next update:     Tue 16 Apr 2024 22:00:25 +0000
Files and hashes:         1: AthXcPN3d2pXTWejaSWFar_6u9E.roa (hash: 0Jc/ucJOlcBUueOWMouhwaZJ1F+vOoQmrzxg5hVfcpE=)
                          2: ZRaYwM2YN5eRXn15P7bRjEgehMU.crl (hash: YqFKvJYbV+puuqU0pNd8AWabO2sXvf8dDQZQi8QNiaA=)
                          3: dMw58yaEhn0NGjCobsDfFLb4i9o.roa (hash: j1fv3a8QyeQcUVjiOZOGd2GmRNeHlSlxb4kIGx9Zd30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e3:c6:91:d5:77:ac:1f:04:a2:05:5c:d3:c1:90:ea:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651698c0cd983797915e7d793fb6d18c481e84c5
        Validity
            Not Before: Apr 15 22:00:25 2024 GMT
            Not After : Apr 16 22:00:25 2024 GMT
        Subject: CN=55466c2aeb47f2ee47145f1f914ba31aea24f49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:a0:54:34:cd:89:69:c7:15:16:d1:ee:d4:
                    19:96:f3:10:22:7f:bb:c2:e9:64:5c:93:ef:33:77:
                    35:2b:e8:a7:aa:7d:dd:43:1a:5e:70:ec:32:3e:dd:
                    db:f9:4d:9f:1d:19:79:6a:b4:23:3c:8f:9c:17:c6:
                    19:90:96:ab:cb:2b:18:9a:21:9c:50:96:2d:51:3d:
                    1f:86:31:d4:ba:77:79:30:e0:ca:fc:52:a9:b0:1f:
                    1b:03:95:b9:93:69:8c:97:ec:34:f3:b1:80:66:c2:
                    ff:ae:83:37:6c:45:9c:bf:98:f6:9c:6d:f8:fa:ef:
                    5e:dc:73:32:23:8f:a8:50:9b:9e:63:4d:2e:08:aa:
                    89:19:58:78:dd:2c:7f:44:24:dc:92:08:fb:de:ce:
                    97:41:bf:f1:36:18:e8:de:83:2d:d6:30:e4:1c:5b:
                    27:fe:64:bc:cd:96:1b:ab:87:c1:ee:c1:98:c8:4b:
                    32:83:01:2d:cf:45:ea:16:b3:f4:cc:60:4b:02:35:
                    b4:ff:bc:f8:f7:02:18:4a:a3:29:9e:aa:69:4d:eb:
                    b5:04:6e:ec:6b:78:84:bd:aa:02:f3:5c:b5:bf:67:
                    2a:2f:21:41:77:97:5e:66:91:fd:fc:44:16:5d:85:
                    6f:3f:9e:ca:31:3c:97:68:6f:95:30:64:77:db:4a:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:46:6C:2A:EB:47:F2:EE:47:14:5F:1F:91:4B:A3:1A:EA:24:F4:9B
            X509v3 Authority Key Identifier:
                keyid:65:16:98:C0:CD:98:37:97:91:5E:7D:79:3F:B6:D1:8C:48:1E:84:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaYwM2YN5eRXn15P7bRjEgehMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ee5d9b-c8e6-499a-aaeb-e5e742f4577f/1/ZRaYwM2YN5eRXn15P7bRjEgehMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7a:0b:ef:a5:4a:a1:03:04:b3:4c:1e:a9:47:9f:38:0d:8a:
         b2:d3:cc:8c:8f:b4:95:63:f0:61:e0:8c:fd:0e:61:fa:55:3d:
         43:97:29:02:a3:d9:a7:14:0f:28:d5:f0:58:f6:e8:42:df:9a:
         b4:dc:00:a5:a1:f1:1d:f0:2d:9f:c8:f2:97:37:72:55:32:b6:
         c8:57:27:0c:c4:3e:ea:53:23:5a:b8:73:63:9d:7b:d7:4e:7d:
         88:c8:26:f5:ca:3e:f3:fc:42:e9:49:c4:0d:e5:b6:93:2e:08:
         e6:d6:ba:f7:0d:75:03:5d:07:f4:ba:89:50:fe:bc:e5:66:ef:
         dd:93:0e:45:48:53:4e:0b:44:f4:0d:29:15:1b:c6:51:2c:eb:
         bb:12:7e:b1:04:7d:8e:da:e9:3b:45:9c:72:67:f7:b7:7d:25:
         8c:b8:99:8c:b9:5f:81:4c:ac:96:f6:0e:f0:86:2b:a0:bd:45:
         90:37:0e:15:5c:39:fd:18:78:1f:4a:1f:3f:05:b1:f2:34:ac:
         6d:ca:5c:30:df:8a:da:86:70:c7:12:ac:6b:88:f8:d5:b3:cc:
         0d:ae:52:aa:5e:b0:74:53:95:01:c3:a2:02:87:50:f4:d7:9b:
         f3:95:fe:1c:1f:77:c2:52:b8:79:ab:76:bf:ad:f4:fd:4a:72:
         9e:24:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----