Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf34fe-5260-47d3-9160-91c3e3a0ae16/1/6Z0tvAE9H4QRZHpSi-Y0aC_0US4.mft
File:                     6Z0tvAE9H4QRZHpSi-Y0aC_0US4.mft (raw, json)
Hash identifier:          ii8x7ic9jfbLQGsTqdGEPn0w8zT+ghBgVjVAW55sDD0=
Subject key identifier:   E5:92:13:45:44:5F:44:2F:5A:E0:1A:8E:93:33:F0:AE:EB:C1:72:81
Authority key identifier: E9:9D:2D:BC:01:3D:1F:84:11:64:7A:52:8B:E6:34:68:2F:F4:51:2E
Certificate issuer:       /CN=e99d2dbc013d1f8411647a528be634682ff4512e
Certificate serial:       018EBC8444995321D0D8AD7255488F7282B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Z0tvAE9H4QRZHpSi-Y0aC_0US4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/cf34fe-5260-47d3-9160-91c3e3a0ae16/1/6Z0tvAE9H4QRZHpSi-Y0aC_0US4.mft
Manifest number:          0B07
Signing time:             Mon 08 Apr 2024 07:02:48 +0000
Manifest this update:     Mon 08 Apr 2024 07:02:48 +0000
Manifest next update:     Tue 09 Apr 2024 07:02:48 +0000
Files and hashes:         1: 6Z0tvAE9H4QRZHpSi-Y0aC_0US4.crl (hash: b27hdTQ5bi8aZO2hMwif4PkqtUP4If8VUO5xsQl2cLs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:bc:84:44:99:53:21:d0:d8:ad:72:55:48:8f:72:82:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99d2dbc013d1f8411647a528be634682ff4512e
        Validity
            Not Before: Apr  8 07:02:48 2024 GMT
            Not After : Apr  9 07:02:48 2024 GMT
        Subject: CN=e5921345445f442f5ae01a8e9333f0aeebc17281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:28:c5:e2:a9:ac:7f:6f:a1:8a:58:90:7d:56:
                    44:65:4f:46:58:dd:89:fa:e9:c0:bc:fa:59:b5:7f:
                    77:71:6c:bd:5e:5c:fb:08:f2:46:e6:e2:a9:8d:de:
                    9f:cd:b0:87:9e:e3:a7:f6:f9:d8:c4:14:21:da:c9:
                    33:fe:7b:10:a9:40:c8:d8:1a:e0:bf:de:bc:6c:0e:
                    81:99:66:9c:3f:58:d8:a0:be:18:28:66:da:87:3c:
                    d4:b9:84:94:78:65:e7:35:ff:92:98:b3:ea:8b:22:
                    7c:70:aa:9c:ab:b6:e6:3f:45:18:0e:a4:e1:2c:bd:
                    16:71:45:12:63:84:7b:6a:dc:89:d4:34:7a:86:50:
                    b7:b6:14:b2:3f:78:b5:f9:b6:3a:52:78:f4:90:c5:
                    f0:b9:25:6b:80:b8:9a:bf:80:c9:4f:2f:3a:ed:b0:
                    34:47:aa:61:8a:f4:76:6f:80:6d:41:01:75:84:b1:
                    68:54:35:a3:59:8d:76:cb:e6:1b:f8:4e:e7:ce:ed:
                    3d:7f:53:44:9e:45:79:93:28:c1:c1:80:5b:1d:2a:
                    f9:a5:c9:a7:ef:67:18:71:1f:d8:1b:83:50:0c:5d:
                    f2:9d:84:27:0e:1a:45:fc:72:17:8d:d3:18:07:28:
                    eb:65:16:28:d2:3a:a0:ce:1c:3c:e9:3c:a7:23:58:
                    75:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:13:45:44:5F:44:2F:5A:E0:1A:8E:93:33:F0:AE:EB:C1:72:81
            X509v3 Authority Key Identifier:
                keyid:E9:9D:2D:BC:01:3D:1F:84:11:64:7A:52:8B:E6:34:68:2F:F4:51:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Z0tvAE9H4QRZHpSi-Y0aC_0US4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf34fe-5260-47d3-9160-91c3e3a0ae16/1/6Z0tvAE9H4QRZHpSi-Y0aC_0US4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf34fe-5260-47d3-9160-91c3e3a0ae16/1/6Z0tvAE9H4QRZHpSi-Y0aC_0US4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3e:d2:bb:fb:15:ec:3d:25:5e:10:75:9d:f4:06:2f:f7:f3:
         d3:a5:35:4a:ed:58:1e:f4:58:53:93:48:08:41:2d:7d:6d:01:
         39:60:34:1c:33:96:61:b5:7e:66:4d:c1:ac:41:86:a8:60:6e:
         c7:ec:85:22:b0:6e:e1:bd:bf:05:7f:cb:f6:aa:8b:98:33:b5:
         3e:67:d6:ff:82:ed:97:3f:94:6d:8b:58:05:a4:5e:de:25:50:
         34:38:18:5f:63:79:a1:df:ae:85:84:b0:32:98:8e:e5:9e:06:
         ca:0e:2f:3e:23:ea:0b:ee:ae:48:cb:a1:f3:f5:8b:07:cb:86:
         51:43:75:b5:49:32:25:a7:3c:fc:37:be:4b:9d:13:f4:6e:21:
         73:99:c4:49:00:fc:5c:8c:d6:9e:d7:2d:bd:8b:80:e1:10:c7:
         a0:79:80:83:e6:c7:a9:16:6a:25:f9:35:1d:fc:a9:77:8f:92:
         bd:4b:a0:1e:ee:a7:65:d6:ad:c4:3b:d0:dd:51:38:ad:32:5a:
         bc:ee:02:20:58:3f:b3:04:74:44:99:70:dc:26:25:30:19:cc:
         e5:dd:ba:dc:78:35:76:73:c9:50:82:df:64:f4:e2:a1:6c:8e:
         6d:d9:69:c0:60:f8:ad:1d:4c:d9:9f:68:15:66:66:d5:bb:72:
         06:ce:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----