Manifest

$ rpki-client -vvf rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.mft
File:                     D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.mft (raw, json)
Hash identifier:          7ANDpQ6ynlW8mQ0a7AoH5SopZI/2MBD5l8I8WQrTsi0=
Subject key identifier:   AD:18:8B:4F:4D:3C:BD:F1:EE:DB:AD:B9:BB:4E:D8:CE:53:8E:66:67
Authority key identifier: D8:8D:FD:D9:DE:BF:6F:DB:DD:F9:40:9E:4D:09:C0:86:CC:04:86:FC
Certificate issuer:       /CN=d88dfdd9debf6fdbddf9409e4d09c086cc0486fc
Certificate serial:       6AD42071F2BCF5ACD92AB676554E2DFB7BF3D962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2I392d6_b9vd-UCeTQnAhswEhvw.cer
Subject info access:      rsync://rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.mft
Manifest number:          029E
Signing time:             Thu 26 Sep 2024 23:25:39 +0000
Manifest this update:     Thu 26 Sep 2024 23:20:39 +0000
Manifest next update:     Sat 28 Sep 2024 01:17:39 +0000
Files and hashes:         1: D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.crl (hash: CmGdekIB9iRffWHi8vyUhJOtoPZYCimHZnvFvnNWsPo=)
                          2: AS202939.asa (hash: I0UYMaAy+a9DZhRqvCRFI8goFAoHIAlv9eVa8eqVoqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d4:20:71:f2:bc:f5:ac:d9:2a:b6:76:55:4e:2d:fb:7b:f3:d9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d88dfdd9debf6fdbddf9409e4d09c086cc0486fc
        Validity
            Not Before: Sep 26 23:20:39 2024 GMT
            Not After : Sep 28 01:17:39 2024 GMT
        Subject: CN=AD188B4F4D3CBDF1EEDBADB9BB4ED8CE538E6667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:27:b6:7e:18:9f:dc:d3:27:7e:8a:6a:48:
                    17:77:5b:2b:c5:6f:5d:65:ef:55:7c:a6:e0:f2:7b:
                    f0:ef:a1:db:76:2c:f9:40:d3:0a:61:5f:ed:ea:ee:
                    f5:1e:d9:1d:f9:48:7a:7b:7e:91:dc:19:7f:df:3f:
                    e2:24:27:1a:0e:d1:a9:b5:bf:1a:c4:11:f1:97:6d:
                    a7:23:48:9b:03:78:5e:0d:ea:11:c6:21:f8:23:74:
                    79:ec:6b:5f:61:24:f8:c5:3b:95:12:01:4a:37:1e:
                    c6:9d:2c:f8:7a:c8:9d:08:64:c6:61:da:48:18:e2:
                    7a:ca:56:ac:3c:bd:24:60:e6:78:43:d8:08:de:31:
                    83:15:98:9d:28:84:0c:26:91:a1:85:43:d7:ee:2f:
                    1a:18:14:af:25:1b:c2:96:fc:01:1d:54:b7:15:b0:
                    5d:63:2b:d5:df:d6:83:5a:81:d6:21:3d:8b:dd:6b:
                    0c:0c:d5:3c:56:e8:57:e2:89:11:ac:28:55:9f:7a:
                    4c:b0:34:9f:16:d5:d0:e2:c8:c0:c9:3e:db:01:1d:
                    30:ea:28:df:39:a0:05:1d:40:58:5f:a6:18:a5:51:
                    89:dd:78:00:83:52:a9:1e:48:20:9c:14:39:90:20:
                    e3:63:36:7f:2c:b3:c5:37:e2:32:a8:69:c3:f5:3f:
                    e2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:18:8B:4F:4D:3C:BD:F1:EE:DB:AD:B9:BB:4E:D8:CE:53:8E:66:67
            X509v3 Authority Key Identifier:
                keyid:D8:8D:FD:D9:DE:BF:6F:DB:DD:F9:40:9E:4D:09:C0:86:CC:04:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2I392d6_b9vd-UCeTQnAhswEhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202939/0/D88DFDD9DEBF6FDBDDF9409E4D09C086CC0486FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:15:35:83:b2:78:7a:d8:22:1f:65:56:3a:7b:40:bc:9c:22:
         32:04:c4:fc:03:3a:de:63:fe:a4:bc:70:24:01:76:f1:43:36:
         17:3b:af:6f:c7:a5:68:de:61:f9:1f:d9:f6:f4:32:91:6d:e7:
         b8:30:08:40:b7:61:50:5d:e6:50:59:64:3a:ac:68:f9:49:a8:
         8f:48:1c:68:6f:68:b3:47:97:13:65:d3:e1:f3:25:c8:8b:26:
         10:4f:a5:52:ca:ff:e7:12:9b:e0:62:10:c4:34:d9:65:9c:bf:
         7f:97:c3:09:38:19:fe:2c:c5:26:fd:fe:95:39:cd:49:7d:39:
         f6:89:c5:bb:74:19:57:52:af:fb:27:b5:ba:9d:38:47:60:51:
         73:af:4f:08:54:e5:93:ed:47:f0:8e:af:0f:c8:92:63:2a:01:
         58:b2:0a:ee:b0:b7:48:ba:ac:9b:3c:a5:0e:c5:52:06:54:f8:
         b7:44:fa:36:c6:29:5e:e3:b4:dd:cc:f6:0d:8f:fb:cd:6e:9c:
         0b:f0:68:a1:9f:d8:a0:a8:9d:e8:99:61:9e:da:df:15:63:e5:
         09:ec:a1:1c:dc:fc:7c:00:c4:4e:57:c8:e1:d0:66:3b:6e:bb:
         1e:4a:0a:ab:00:1b:53:85:20:14:75:87:1a:57:ec:32:55:6b:
         7d:ca:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----