Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/34T3WaZh9p8qzxtyM_rclEkgxVc.mft
File:                     34T3WaZh9p8qzxtyM_rclEkgxVc.mft (raw, json)
Hash identifier:          bwFC6nnfOZxtOmz+tK3bTfHh8WdTD+Pz7Xz8UmZLB9Y=
Subject key identifier:   86:F3:7D:2A:AB:F4:2D:A4:73:80:04:B3:67:1C:0D:AB:52:23:37:AF
Authority key identifier: DF:84:F7:59:A6:61:F6:9F:2A:CF:1B:72:33:FA:DC:94:49:20:C5:57
Certificate issuer:       /CN=df84f759a661f69f2acf1b7233fadc944920c557
Certificate serial:       018F0E42DAB51DEAFA01526182FF07431F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34T3WaZh9p8qzxtyM_rclEkgxVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/34T3WaZh9p8qzxtyM_rclEkgxVc.mft
Manifest number:          0470
Signing time:             Wed 24 Apr 2024 04:00:13 +0000
Manifest this update:     Wed 24 Apr 2024 04:00:13 +0000
Manifest next update:     Thu 25 Apr 2024 04:00:13 +0000
Files and hashes:         1: 34T3WaZh9p8qzxtyM_rclEkgxVc.crl (hash: oA+EimJNCUxgY01/dGkR3lkpUZw/HAEh9TgyH1igxBg=)
                          2: pe6xw2omWx6on3q-tqYL-u5-32o.roa (hash: Jf50+02RldWtxZVPY5RA1zYaqr0jPM/fEijEw25UaNg=)
                          3: yEufTejDOePfTdDHEJFmxZmQuTw.roa (hash: sO0RAagvFCoXnnNdKSKavf0j46h+ueZzJ1F4+mepg6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0e:42:da:b5:1d:ea:fa:01:52:61:82:ff:07:43:1f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df84f759a661f69f2acf1b7233fadc944920c557
        Validity
            Not Before: Apr 24 04:00:13 2024 GMT
            Not After : Apr 25 04:00:13 2024 GMT
        Subject: CN=86f37d2aabf42da4738004b3671c0dab522337af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:4b:b7:e2:92:33:41:b1:27:34:fc:c5:1a:
                    52:10:c4:43:7a:7a:8b:ad:e0:dc:a1:4d:b4:15:f5:
                    5f:e4:c1:df:b6:07:99:27:73:8b:48:92:d2:8c:9d:
                    96:90:02:13:13:70:0b:e7:fb:f4:9a:9e:e2:06:68:
                    55:e6:30:da:4f:78:22:3c:b6:96:91:dd:c0:c3:a3:
                    ed:9e:a0:25:ed:f9:37:70:6e:96:00:07:de:09:21:
                    1a:b7:9e:1d:d2:df:19:19:59:28:7b:ea:6a:94:08:
                    5b:ed:3b:2a:7c:95:8c:71:33:30:e9:f2:19:a7:70:
                    60:0e:36:28:e9:ae:e8:e2:05:69:4e:cb:e9:4b:1b:
                    d7:41:56:34:7e:34:dd:45:31:a3:66:a3:4f:57:54:
                    9f:70:d2:da:b4:fb:f1:a0:8b:ef:ab:1f:30:3e:55:
                    86:17:bf:cb:e4:c2:0d:a0:89:28:fb:a2:42:c9:f3:
                    ee:9c:c7:95:ea:d2:81:96:f6:19:e8:7e:fc:0d:9f:
                    cd:d1:81:df:7f:98:f9:d3:ec:89:8f:63:a1:c4:14:
                    47:59:14:8b:e3:a1:28:7c:bc:11:6a:8c:a7:2e:29:
                    1c:47:bc:ad:66:ae:2f:28:06:e5:f2:4b:71:f8:3f:
                    44:82:15:3f:c6:47:04:e1:2f:08:08:7c:72:22:c7:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:7D:2A:AB:F4:2D:A4:73:80:04:B3:67:1C:0D:AB:52:23:37:AF
            X509v3 Authority Key Identifier:
                keyid:DF:84:F7:59:A6:61:F6:9F:2A:CF:1B:72:33:FA:DC:94:49:20:C5:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34T3WaZh9p8qzxtyM_rclEkgxVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/34T3WaZh9p8qzxtyM_rclEkgxVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/34T3WaZh9p8qzxtyM_rclEkgxVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:14:97:a3:6f:59:4a:30:d6:ef:fc:91:0e:33:1d:3e:ca:39:
         92:cb:53:1e:60:ff:f2:c8:7e:fe:0e:9b:4a:45:b4:6d:1a:10:
         21:dc:f8:3c:ee:b6:06:d2:30:ee:ee:18:89:d7:cc:e6:e0:79:
         55:2f:56:16:69:95:7c:25:ae:92:94:40:cd:13:86:5e:0e:34:
         da:f3:b8:71:2c:78:f9:63:10:07:e3:33:81:ba:3e:d4:63:a1:
         f2:35:7a:30:82:bd:2c:2e:f0:2e:74:e3:ce:f4:7a:25:4e:fd:
         20:cd:e0:32:1c:aa:14:ec:62:5d:08:f9:0e:d3:b6:ff:48:4e:
         4e:cb:17:ad:b4:f9:50:06:08:f0:a6:66:f1:54:a0:04:0e:41:
         c2:43:1f:e5:7c:de:38:16:98:33:65:6b:c3:8e:99:35:c0:5c:
         33:a3:af:cf:34:10:f8:a3:ad:79:98:94:cb:7e:47:22:d9:95:
         c6:d9:aa:be:e9:a5:53:fc:61:ce:b8:ea:85:32:3a:6b:f0:08:
         be:14:d8:0d:36:65:b6:27:a3:da:94:93:77:65:cb:c4:23:1e:
         2f:67:a0:05:93:da:2f:c2:3b:8d:c8:bf:83:4e:e0:1c:da:fe:
         d6:09:fb:07:32:17:75:e8:bc:e0:a5:03:f1:14:c3:8b:55:53:
         af:93:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----