Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f303d3-059b-4d57-b445-af1578a956ac/1/Vv753Z-0NIdSY6LuM0WyuYPeZWE.mft
File:                     Vv753Z-0NIdSY6LuM0WyuYPeZWE.mft (raw, json)
Hash identifier:          gdgIUWdLT6bR+FUkkUPMRt5kJw8CEHiVUmglrURChhM=
Subject key identifier:   64:93:86:CA:13:0F:36:93:89:A0:C8:BE:EC:93:55:6B:CA:D0:8A:F5
Authority key identifier: 56:FE:F9:DD:9F:B4:34:87:52:63:A2:EE:33:45:B2:B9:83:DE:65:61
Certificate issuer:       /CN=56fef9dd9fb434875263a2ee3345b2b983de6561
Certificate serial:       0192D14AC1F7BD2B3EC13E5C95E9198966FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vv753Z-0NIdSY6LuM0WyuYPeZWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f303d3-059b-4d57-b445-af1578a956ac/1/Vv753Z-0NIdSY6LuM0WyuYPeZWE.mft
Manifest number:          0228
Signing time:             Mon 28 Oct 2024 04:03:10 +0000
Manifest this update:     Mon 28 Oct 2024 04:03:10 +0000
Manifest next update:     Tue 29 Oct 2024 04:03:10 +0000
Files and hashes:         1: Vv753Z-0NIdSY6LuM0WyuYPeZWE.crl (hash: Rw5onvEMFwDwM/w0GUGsbG8vcQrEMOIyR7OgaWsT7BM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d1:4a:c1:f7:bd:2b:3e:c1:3e:5c:95:e9:19:89:66:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56fef9dd9fb434875263a2ee3345b2b983de6561
        Validity
            Not Before: Oct 28 04:03:10 2024 GMT
            Not After : Oct 29 04:03:10 2024 GMT
        Subject: CN=649386ca130f369389a0c8beec93556bcad08af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cc:ba:35:21:94:c6:43:98:75:5e:83:f5:a2:
                    9a:09:36:64:3c:13:4a:e8:eb:a6:fa:af:af:d4:48:
                    cd:2c:78:1a:e1:b2:d6:1b:c4:65:c5:74:9e:9b:bb:
                    ec:3f:34:72:7b:90:e3:07:46:31:ea:d8:64:99:40:
                    e1:02:68:9d:5b:63:72:f3:4b:16:b2:1c:f6:4c:be:
                    93:6e:90:7c:91:e8:91:a3:e6:21:8e:90:8b:ef:32:
                    81:a1:51:d2:99:e7:b5:db:fa:28:19:4e:b3:ad:d0:
                    cc:7f:2c:aa:af:74:6e:f1:66:cc:19:82:b4:48:aa:
                    a9:0d:70:66:d0:67:2b:3c:aa:41:3d:8b:54:aa:ad:
                    24:fa:e3:30:76:68:5f:c3:ec:94:df:46:24:ae:1d:
                    14:60:ca:ea:c4:3f:5c:bd:62:f3:db:55:23:4a:d0:
                    65:f7:d5:6f:c6:14:87:85:4d:db:10:68:73:a0:ff:
                    f6:ac:69:78:8c:a1:c1:44:6c:0a:6f:e9:6d:3a:65:
                    cc:55:5f:4c:1b:12:ba:dc:ae:a6:6a:36:3a:3c:7d:
                    7e:be:e4:1a:26:4c:8c:8a:99:f2:40:c0:47:88:28:
                    96:6d:52:2a:3f:a3:bf:16:7e:d3:97:e3:26:2b:e7:
                    6c:08:fd:55:0c:27:61:af:24:b0:10:1d:4b:50:ea:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:86:CA:13:0F:36:93:89:A0:C8:BE:EC:93:55:6B:CA:D0:8A:F5
            X509v3 Authority Key Identifier:
                keyid:56:FE:F9:DD:9F:B4:34:87:52:63:A2:EE:33:45:B2:B9:83:DE:65:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vv753Z-0NIdSY6LuM0WyuYPeZWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f303d3-059b-4d57-b445-af1578a956ac/1/Vv753Z-0NIdSY6LuM0WyuYPeZWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f303d3-059b-4d57-b445-af1578a956ac/1/Vv753Z-0NIdSY6LuM0WyuYPeZWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:eb:75:c7:95:65:cb:d0:5d:eb:82:21:e4:e8:9b:e4:85:a2:
         48:32:e1:a0:80:94:d6:ba:28:5d:79:e3:43:6d:d8:bf:c3:ab:
         2c:8d:ac:62:a3:f6:c5:0e:40:2a:07:98:df:2d:01:74:04:72:
         4a:45:61:d2:b1:04:0d:86:f4:09:8c:32:a0:ed:a3:c6:79:10:
         81:03:8c:3e:77:9a:ea:01:cd:9f:54:bb:eb:6b:86:fb:76:51:
         1c:af:61:e0:e5:7c:aa:56:83:08:ea:07:10:b9:53:15:46:a9:
         2c:db:14:81:95:de:43:a2:f8:d6:17:a3:89:13:98:26:b4:2b:
         ac:c2:27:13:db:0b:bc:62:01:b5:c9:a2:32:83:6c:7b:ad:ef:
         38:09:99:ad:69:01:0e:cd:c0:b2:9b:dc:f9:58:3f:87:93:99:
         28:26:e0:5f:ce:8d:a0:9c:87:08:35:25:6a:ab:81:2e:d2:3d:
         7d:dc:64:6a:8a:42:b4:fd:c5:0e:19:c3:57:b5:6d:b5:b3:34:
         53:06:88:5c:52:03:42:60:3a:38:c6:ad:20:c1:c1:67:e2:31:
         96:2f:3c:b5:71:57:9d:88:05:b4:0b:c0:61:28:55:cc:9a:09:
         23:36:65:a8:ee:94:44:9f:93:1f:e8:ce:93:fd:ca:40:3f:c0:
         32:15:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----