Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/DbLejg38stCyW3UGJDJYtzkEQJg.mft
File:                     DbLejg38stCyW3UGJDJYtzkEQJg.mft (raw, json)
Hash identifier:          jMSO6wVC2cbqeO69NS366XFxGp8B2AjFZJSvhnd/ZAI=
Subject key identifier:   78:C6:87:BE:D0:92:B0:6E:D2:92:37:0B:5C:DF:25:7E:D0:D6:D3:60
Authority key identifier: 0D:B2:DE:8E:0D:FC:B2:D0:B2:5B:75:06:24:32:58:B7:39:04:40:98
Certificate issuer:       /CN=0db2de8e0dfcb2d0b25b7506243258b739044098
Certificate serial:       018E5AE080DF7677B9E8021537B19DBADAF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbLejg38stCyW3UGJDJYtzkEQJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/DbLejg38stCyW3UGJDJYtzkEQJg.mft
Manifest number:          037F
Signing time:             Wed 20 Mar 2024 08:00:46 +0000
Manifest this update:     Wed 20 Mar 2024 08:00:46 +0000
Manifest next update:     Thu 21 Mar 2024 08:00:46 +0000
Files and hashes:         1: DbLejg38stCyW3UGJDJYtzkEQJg.crl (hash: O0X1G+979WmYAbBkw3weeLhDwVx0oGy7yuwZ43PlW4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5a:e0:80:df:76:77:b9:e8:02:15:37:b1:9d:ba:da:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db2de8e0dfcb2d0b25b7506243258b739044098
        Validity
            Not Before: Mar 20 08:00:46 2024 GMT
            Not After : Mar 21 08:00:46 2024 GMT
        Subject: CN=78c687bed092b06ed292370b5cdf257ed0d6d360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:36:88:68:09:9a:20:96:60:40:76:9b:cb:
                    7d:02:45:dc:8d:52:f9:61:5d:0d:ec:87:07:c2:6a:
                    08:36:ba:df:79:be:c9:11:c6:d3:88:80:8a:e1:8e:
                    20:32:22:c5:cc:d4:73:00:fe:78:90:59:4d:e4:0c:
                    76:44:74:4b:75:dd:db:74:91:b6:4b:c6:eb:dc:3b:
                    f8:88:a7:8a:90:2d:48:19:87:17:16:ed:82:b0:5f:
                    88:87:9d:62:80:73:1b:3a:e6:53:bc:a1:dd:ac:29:
                    d4:dd:5f:1d:ff:a4:2a:23:24:d7:5b:50:ee:1d:c9:
                    19:cc:da:11:0c:69:38:0f:d7:77:3f:84:3d:81:c6:
                    c8:e0:ee:e3:52:fc:8d:38:e9:5f:60:ef:17:13:7a:
                    0a:bb:54:5b:92:e9:0e:e8:9a:c2:77:f4:4b:07:18:
                    b5:12:52:05:bb:2f:45:cc:f6:cf:eb:66:2e:25:87:
                    7a:c5:1c:30:3c:c7:98:ea:ba:2e:49:dc:9b:9c:ba:
                    fa:b7:79:8b:0f:8b:87:7d:ea:01:c1:66:d8:f9:a5:
                    a4:fb:2d:98:80:e2:67:1d:78:d2:a6:af:7f:e4:f2:
                    b1:11:ac:b2:c2:10:7a:98:8b:68:c8:c0:a4:b8:09:
                    2d:21:bd:99:91:b7:03:96:78:88:70:12:19:4c:18:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C6:87:BE:D0:92:B0:6E:D2:92:37:0B:5C:DF:25:7E:D0:D6:D3:60
            X509v3 Authority Key Identifier:
                keyid:0D:B2:DE:8E:0D:FC:B2:D0:B2:5B:75:06:24:32:58:B7:39:04:40:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbLejg38stCyW3UGJDJYtzkEQJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/DbLejg38stCyW3UGJDJYtzkEQJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/253e39-8e52-498e-b27e-c8b89e0f300d/1/DbLejg38stCyW3UGJDJYtzkEQJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ae:3b:6e:d7:a4:af:d2:23:3b:5f:95:29:02:01:ce:51:e1:
         2d:c9:c4:06:44:97:1d:df:c6:9a:4f:59:9f:b4:12:76:75:fa:
         2b:4f:96:c0:ac:3a:ab:5c:99:e1:f7:6d:86:23:af:4b:c9:d9:
         f7:12:3d:85:7f:8e:5e:72:ac:59:15:d4:50:95:5c:b0:cb:50:
         49:2b:01:fe:fa:b5:ba:27:67:32:4c:1e:f8:e6:02:24:0e:40:
         e1:7d:00:f6:b1:fb:22:09:64:8b:aa:65:b6:ed:ae:9b:2a:53:
         55:69:71:6c:5d:a8:5b:71:a1:94:e9:7f:bb:82:ff:7d:a6:b3:
         02:bb:8a:66:25:97:fc:2d:27:50:f9:dc:90:62:fe:7f:b9:f3:
         0f:d3:d5:26:ad:11:d6:1d:05:cf:52:3e:ec:63:8f:70:e7:96:
         70:01:91:2a:24:43:d6:4e:87:bb:d9:6f:35:a4:2a:9c:d1:f9:
         8f:4e:57:48:d5:64:1b:16:5b:c0:65:22:5a:f5:99:8d:15:b6:
         31:21:51:81:08:a4:63:d4:98:fb:4a:84:d1:dc:2a:48:5b:af:
         87:31:a2:61:30:07:03:1e:9f:19:9e:4e:87:5f:b0:17:40:80:
         33:e8:6d:3d:d8:2d:87:03:58:48:9a:77:cb:bb:11:4a:37:87:
         55:62:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----