Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft
File:                     ysjinzVYO1sqlnPddqJZA7NexZM.mft (raw, json)
Hash identifier:          2x4gZV2RLtO7P1b0+ArBxbH6H/1XYGdhiKPSgkF9zXA=
Subject key identifier:   9A:FF:E0:AE:B7:9A:A2:58:A4:3A:8E:27:E6:9B:81:18:3D:62:12:F1
Authority key identifier: CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93
Certificate issuer:       /CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
Certificate serial:       01916D15D8CD8E3FA67D811B04F2A69C9FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft
Manifest number:          98
Signing time:             Tue 20 Aug 2024 00:00:33 +0000
Manifest this update:     Tue 20 Aug 2024 00:00:33 +0000
Manifest next update:     Wed 21 Aug 2024 00:00:33 +0000
Files and hashes:         1: 0daZaVn9kohnZi4AjxcLOI2dYTA.roa (hash: mhVNRU2/gx3nhr590ysq6mvg1YqKqke+tmcwMSUQ8lk=)
                          2: p8qS_oodmksqVdd_ZwecyVfKjpA.roa (hash: TXKeBdWiOxBf8NWGaXcUPZ5K4/QyvWiKOTcGQtcqmt4=)
                          3: ysjinzVYO1sqlnPddqJZA7NexZM.crl (hash: xBlyvaN8RQ8qXDyxD83the4Ad5rZfByb85D5rv6yN18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:6d:15:d8:cd:8e:3f:a6:7d:81:1b:04:f2:a6:9c:9f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac8e29f35583b5b2a9673dd76a25903b35ec593
        Validity
            Not Before: Aug 20 00:00:33 2024 GMT
            Not After : Aug 21 00:00:33 2024 GMT
        Subject: CN=9affe0aeb79aa258a43a8e27e69b81183d6212f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:e5:eb:db:97:d8:7d:f5:d7:b7:84:6a:e9:
                    e1:94:97:a3:6e:40:81:c6:b5:e5:1d:a0:f3:9e:64:
                    c1:4d:93:67:45:35:1a:d1:65:57:27:b7:7d:b5:36:
                    e3:cf:8f:db:48:f8:94:e1:76:7f:06:43:af:14:1f:
                    67:2d:bd:b0:1d:25:93:38:af:46:1f:e0:c6:df:90:
                    d8:ca:93:4c:91:a0:dc:78:04:d0:90:7c:a5:26:e3:
                    d0:66:51:ed:c3:a7:7e:a8:b0:4a:11:5b:dd:f1:d4:
                    6d:80:73:28:27:2b:e4:87:ba:48:9d:52:80:e9:37:
                    a8:b5:ac:fe:71:76:37:d0:61:11:94:76:91:4d:d2:
                    1f:59:f1:83:1d:b2:48:5b:1a:64:d5:5b:fe:16:6e:
                    b5:69:83:c2:d3:1a:01:52:f1:ae:9d:b0:be:c5:fb:
                    2b:73:ce:58:6b:8f:d7:59:37:7c:37:87:ef:fe:c3:
                    f3:3d:48:a8:07:20:b3:e2:1e:bd:ce:f0:7c:13:4a:
                    41:60:99:b2:12:53:29:20:fd:a8:e3:7c:27:d7:ad:
                    21:82:1b:da:03:b6:b8:7c:b9:4b:78:ab:1c:59:0e:
                    a9:ec:23:8d:4b:63:3d:90:88:b2:e6:9a:24:47:f4:
                    52:e3:2b:1c:d9:8b:29:cf:07:78:49:b1:bb:35:ee:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FF:E0:AE:B7:9A:A2:58:A4:3A:8E:27:E6:9B:81:18:3D:62:12:F1
            X509v3 Authority Key Identifier:
                keyid:CA:C8:E2:9F:35:58:3B:5B:2A:96:73:DD:76:A2:59:03:B3:5E:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysjinzVYO1sqlnPddqJZA7NexZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/07ade3-be80-4a87-9617-a16aebb8c9ef/1/ysjinzVYO1sqlnPddqJZA7NexZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:54:82:d0:60:af:00:cc:d2:cd:dc:bc:b4:9f:70:c2:ef:
         0a:ef:44:d2:8d:2b:be:01:53:32:f9:d4:dc:de:7f:e4:2b:7c:
         f3:d8:7e:5b:64:89:35:18:c9:e4:f1:f4:fd:80:b8:3c:e9:68:
         f4:2b:03:80:65:fd:b7:2f:bb:d9:ce:b1:b2:f0:1d:a0:df:5d:
         f2:33:01:09:ae:ce:b8:a2:32:e1:48:19:a1:ad:c6:6e:7a:ae:
         c8:5e:3d:e1:46:cc:39:8a:cb:4c:3e:c7:7a:00:a9:23:d7:0a:
         31:e5:95:58:1c:e5:1c:d7:c0:82:b0:40:33:1a:e4:eb:1b:3e:
         c1:ec:3b:94:91:41:b1:2b:a1:4a:25:eb:8a:66:30:4b:71:28:
         10:9c:fd:8a:d8:ec:d8:2d:d6:93:2d:00:aa:94:94:5a:69:4e:
         1b:9f:48:42:fc:f6:e2:f0:a7:6a:60:7d:0c:4c:c1:a5:51:9d:
         8c:b4:22:7d:8d:70:af:16:3c:20:50:66:fa:81:2a:29:0b:8c:
         e7:66:02:16:ca:fe:c6:5f:73:0e:08:de:30:b4:04:74:94:45:
         6a:94:ad:50:9c:e0:db:ac:2d:a0:b9:64:c3:71:76:c6:f7:3a:
         d1:8f:35:ab:3e:19:d4:4b:f1:89:9a:86:ac:d2:41:f0:af:ce:
         7e:75:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----