Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.mft
File:                     PWlfr9YSbRH98CAO1zJYWY-XvS0.mft (raw, json)
Hash identifier:          /BVNa0AtmRq+TOdMes1tHmp/zWSNVDAud4GRZdHoCiw=
Subject key identifier:   2F:1E:5A:ED:D7:7F:04:5D:12:D6:5E:63:31:E5:2D:E5:B5:88:88:E7
Authority key identifier: 3D:69:5F:AF:D6:12:6D:11:FD:F0:20:0E:D7:32:58:59:8F:97:BD:2D
Certificate issuer:       /CN=3d695fafd6126d11fdf0200ed73258598f97bd2d
Certificate serial:       018E2CBE19FDBC596488DA43C9B713A09A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWlfr9YSbRH98CAO1zJYWY-XvS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.mft
Manifest number:          0FF2
Signing time:             Mon 11 Mar 2024 09:00:39 +0000
Manifest this update:     Mon 11 Mar 2024 09:00:39 +0000
Manifest next update:     Tue 12 Mar 2024 09:00:39 +0000
Files and hashes:         1: PWlfr9YSbRH98CAO1zJYWY-XvS0.crl (hash: nQzL/YUmd5+QZhhydl6AS6Or5BnVuf+FEnRCBlbe6tQ=)
                          2: wiAsjydN1KvwXxX2Jq2Se6CT_ts.roa (hash: BGioDIR49f4TgX7pRteW9880NqbpVpni0TEKZOAgmTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2c:be:19:fd:bc:59:64:88:da:43:c9:b7:13:a0:9a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d695fafd6126d11fdf0200ed73258598f97bd2d
        Validity
            Not Before: Mar 11 09:00:39 2024 GMT
            Not After : Mar 12 09:00:39 2024 GMT
        Subject: CN=2f1e5aedd77f045d12d65e6331e52de5b58888e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:85:90:96:d0:04:6a:77:c6:67:7d:6e:11:
                    28:d4:a7:ea:9f:66:0c:04:0d:78:f7:e4:0e:21:59:
                    33:f9:df:38:9e:16:6f:9d:c3:7b:fd:94:db:66:6d:
                    a6:10:02:3c:a7:2f:4f:21:bd:55:d3:f5:61:a2:2b:
                    93:e0:3e:b1:b9:ca:b1:13:7a:bc:39:c4:30:51:61:
                    7e:58:f3:e5:c9:a0:a8:09:f2:ed:2d:31:41:82:ef:
                    a7:ab:59:22:55:5b:31:64:d6:40:0c:26:1d:f1:71:
                    0b:13:90:42:3e:92:4e:0b:9c:e0:55:57:31:09:ca:
                    86:bb:15:c5:11:b4:c6:e4:94:37:da:d9:16:8d:f9:
                    aa:aa:73:1a:62:f5:cf:43:7e:bb:4c:61:84:bb:9d:
                    24:0e:3e:71:5b:08:29:f5:3b:f4:e9:82:76:8a:4a:
                    d9:ff:12:fe:33:97:b4:33:90:b5:c4:5a:de:67:21:
                    13:ae:b8:ff:9c:e2:ae:83:d1:f0:e6:c9:82:0a:bf:
                    7b:64:a2:40:78:9b:3e:1e:39:3f:7b:7b:1b:e4:55:
                    a6:85:17:bf:91:95:ec:2d:dc:ba:d1:30:60:61:2a:
                    09:27:d7:ff:59:95:dd:ca:1e:e9:4e:24:52:30:f7:
                    f4:bc:c0:5f:ae:78:20:2d:d8:e2:35:3c:24:fa:22:
                    89:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:5A:ED:D7:7F:04:5D:12:D6:5E:63:31:E5:2D:E5:B5:88:88:E7
            X509v3 Authority Key Identifier:
                keyid:3D:69:5F:AF:D6:12:6D:11:FD:F0:20:0E:D7:32:58:59:8F:97:BD:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWlfr9YSbRH98CAO1zJYWY-XvS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:79:41:0a:54:f7:84:d6:23:d4:1b:7c:57:5a:9e:dd:61:c5:
         cd:8c:23:a9:4b:d1:de:ba:62:76:5f:16:f6:37:69:8c:58:a7:
         1d:0d:59:c4:c2:8e:81:87:5a:cf:9f:88:6e:ae:1b:30:61:e3:
         e3:d6:02:1c:6e:44:d3:ae:7b:f2:77:fc:55:ea:15:d0:a9:39:
         1c:9e:05:f2:99:b0:3a:cf:78:88:cc:6a:53:a2:a6:4b:71:bb:
         73:18:13:56:72:cc:97:65:3a:83:d8:28:89:1b:f1:06:6c:17:
         7e:b0:01:7d:da:bc:2e:47:89:4c:67:50:f9:37:65:58:27:c1:
         dc:bd:b9:83:28:81:55:96:da:9f:62:a9:60:69:59:93:83:25:
         b7:47:ec:9c:94:17:04:e9:7c:eb:c2:9f:2d:81:51:9b:a1:23:
         b3:24:db:eb:ef:99:e0:83:e4:59:7e:0c:44:09:cb:f6:ed:54:
         e7:de:b9:52:03:a1:76:fd:7a:1b:1a:ac:8a:ee:29:a6:1e:36:
         e0:6c:06:84:3a:8c:65:81:c6:1f:c0:ae:ee:aa:8a:d6:3f:ff:
         53:16:ed:d0:d8:1e:60:6d:22:da:12:e8:fa:12:b3:54:6e:01:
         1f:ef:79:08:b4:16:04:67:4e:4d:cf:21:a1:53:d0:6e:54:fa:
         4e:96:98:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----