Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
File:                     0eAM_O2eO6VceewiWB7xs0vgHK4.mft (raw, json)
Hash identifier:          GOzES/S/DefrkXsKY6wJVEig4YED5TY2DEN2j/O5abU=
Subject key identifier:   5F:49:6D:93:5A:F1:DF:68:0D:85:2A:C2:22:1E:B1:39:86:DE:BB:D3
Authority key identifier: D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE
Certificate issuer:       /CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
Certificate serial:       018DACDB0C1116A53987200280090E256701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft
Manifest number:          0872
Signing time:             Thu 15 Feb 2024 13:00:53 +0000
Manifest this update:     Thu 15 Feb 2024 13:00:53 +0000
Manifest next update:     Fri 16 Feb 2024 13:00:53 +0000
Files and hashes:         1: 0eAM_O2eO6VceewiWB7xs0vgHK4.crl (hash: 6Av5oEXSWFZ9CFdj+KmT+/7q3I6e61MByuwN0+IObXI=)
                          2: 1-e8XIT1Z3N7FkE6antYfwBKkpzw.roa (hash: zVNjPnCC1reYEwi0hBdkwfOGcT4yDr6RLJ+k6m72QQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ac:db:0c:11:16:a5:39:87:20:02:80:09:0e:25:67:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e00cfced9e3ba55c79ec22581ef1b34be01cae
        Validity
            Not Before: Feb 15 13:00:53 2024 GMT
            Not After : Feb 16 13:00:53 2024 GMT
        Subject: CN=5f496d935af1df680d852ac2221eb13986debbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:be:47:21:b9:de:c9:67:ba:b3:2c:19:5b:
                    14:a8:57:27:ce:fc:20:0e:5d:a4:79:9f:0d:9a:ae:
                    2c:11:8b:2f:0f:63:f9:35:a7:ef:fe:41:95:6d:2f:
                    e8:2a:b7:c0:30:c5:9e:83:ba:c1:46:05:ca:ad:24:
                    d6:0b:c3:60:42:a5:bd:b2:a3:34:88:09:6b:58:c0:
                    5e:70:7f:61:4d:cd:93:1b:ab:8a:08:8b:ca:77:44:
                    6c:3f:87:99:8f:99:d6:8b:3f:59:9c:75:a0:cf:7d:
                    48:73:93:0a:63:d4:2f:3d:21:bb:87:af:88:bf:35:
                    0b:32:21:18:38:79:aa:b0:a0:3c:5e:bb:79:29:fa:
                    3f:a0:29:c5:75:25:19:7a:73:55:48:09:0c:b8:31:
                    b7:27:56:c4:d8:2b:21:39:6d:08:39:66:be:8f:78:
                    1e:92:8b:5f:77:e1:e6:de:ca:2d:6b:ff:e9:67:80:
                    96:39:38:9a:22:de:f0:75:14:46:37:2f:99:ae:43:
                    41:5d:4c:1d:55:99:f6:69:cf:57:c1:d2:cf:a5:57:
                    a7:e1:0a:6e:d3:54:72:bf:18:72:d8:74:b9:1f:cc:
                    f3:ea:98:a5:03:52:9d:18:2f:5d:69:25:aa:60:b8:
                    1b:f9:a0:c8:dc:68:c2:f0:d9:31:8e:f8:a9:a9:26:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:49:6D:93:5A:F1:DF:68:0D:85:2A:C2:22:1E:B1:39:86:DE:BB:D3
            X509v3 Authority Key Identifier:
                keyid:D1:E0:0C:FC:ED:9E:3B:A5:5C:79:EC:22:58:1E:F1:B3:4B:E0:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAM_O2eO6VceewiWB7xs0vgHK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c8a364-e897-446f-89f7-5df99d28eb4b/1/0eAM_O2eO6VceewiWB7xs0vgHK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:2a:2e:dc:8d:91:ab:6d:7e:79:0c:34:b7:9a:94:46:42:
         5f:ec:76:1a:b2:57:8e:d6:61:7f:e7:45:a8:d8:9c:2d:21:1b:
         ce:98:17:a0:cf:95:97:5d:a7:e3:3b:ee:05:91:64:c8:ab:80:
         6a:2c:3b:06:3f:e8:ad:79:dd:f8:f0:45:2b:87:3e:b3:b8:ba:
         7f:09:d1:8f:fa:0e:89:97:c4:c8:f5:85:11:a0:57:1a:11:b8:
         61:e8:ff:32:99:01:8f:65:33:09:18:46:44:96:14:a1:ce:86:
         d3:6e:32:05:33:f6:18:89:69:bf:a7:75:cb:2d:83:21:54:60:
         2f:4a:32:c8:8f:fa:68:e3:9c:db:9e:61:4f:21:f1:0f:7f:66:
         e1:d4:33:89:c3:2c:74:ec:f5:77:36:d1:5d:07:38:fb:bf:2a:
         3e:48:bc:c7:b6:6f:26:20:f9:68:99:a4:14:fa:83:6a:30:61:
         e7:f0:e8:67:b5:b8:28:5d:6f:7a:3b:8e:de:7e:3e:36:d8:25:
         ce:81:6f:1b:82:20:9c:c9:4c:0f:20:e8:4c:b8:19:d0:b2:6a:
         17:b2:45:1d:47:e5:8f:b4:b6:ba:25:3a:26:9e:6d:a2:ec:2b:
         a9:67:c3:2e:97:83:36:7a:a9:3b:45:6f:7b:f1:d0:3a:5e:96:
         a1:62:47:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----