Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft
File:                     2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft (raw, json)
Hash identifier:          l8Brcyh35qnEavdZPS4HMVJ9AD2MhXJYHjbx0+uPl2w=
Subject key identifier:   FE:16:0A:B5:4D:A7:13:F0:F6:84:C0:39:5F:7A:5B:D7:DA:E3:29:7E
Authority key identifier: DA:65:8F:77:60:55:6B:02:9D:F5:A2:95:93:37:D5:6B:D5:E0:C7:F9
Certificate issuer:       /CN=da658f7760556b029df5a2959337d56bd5e0c7f9
Certificate serial:       0190C7DF371AD8CF32061C6F44720ED5D2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2mWPd2BVawKd9aKVkzfVa9Xgx_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft
Manifest number:          03D5
Signing time:             Thu 18 Jul 2024 22:03:32 +0000
Manifest this update:     Thu 18 Jul 2024 22:03:32 +0000
Manifest next update:     Fri 19 Jul 2024 22:03:32 +0000
Files and hashes:         1: 2mWPd2BVawKd9aKVkzfVa9Xgx_k.crl (hash: KBKWs7PDQ3yo2VvudPbl/dZiUyXHpV5hUL4sAAaW6Fc=)
                          2: 4m8RdbDy2O9ppSbmqvsPnz3-9co.roa (hash: ssrwmSKmLutaZaOMIVZSv8c/4nI8cm66/w70A2xNEf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:df:37:1a:d8:cf:32:06:1c:6f:44:72:0e:d5:d2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da658f7760556b029df5a2959337d56bd5e0c7f9
        Validity
            Not Before: Jul 18 22:03:32 2024 GMT
            Not After : Jul 19 22:03:32 2024 GMT
        Subject: CN=fe160ab54da713f0f684c0395f7a5bd7dae3297e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:3b:ac:02:ce:53:62:db:ab:ed:52:90:3b:
                    68:f8:57:f8:81:fd:1b:e3:6d:36:e2:82:66:eb:2e:
                    1d:fa:15:50:4b:97:ba:20:e4:f3:d1:82:8e:c0:67:
                    4e:6f:6e:9d:5f:db:79:9a:99:86:91:b4:3a:e9:90:
                    c1:d3:30:01:46:2c:4e:0c:65:53:05:4d:d7:ce:37:
                    07:05:eb:f8:11:89:0a:02:ba:16:21:ba:e1:af:39:
                    ba:8c:71:b8:f9:34:ef:21:da:7f:1c:81:80:37:d0:
                    3a:a7:40:00:5b:2c:69:b3:e8:95:76:68:08:93:8b:
                    34:7a:3d:43:5f:40:07:01:bc:8a:a2:1f:ce:a3:bd:
                    49:eb:2e:2e:96:3b:80:e0:6a:07:b7:b6:fe:25:84:
                    32:a8:a0:89:08:49:c2:cc:4a:7d:40:d3:9b:e2:c1:
                    fa:ac:f2:fd:df:ae:a8:0b:b6:98:fd:aa:dc:d6:0b:
                    92:f1:ca:a8:a9:d0:d0:d0:12:2e:e2:47:08:6c:45:
                    1d:ad:08:14:d6:a6:70:11:22:61:c2:be:84:c9:80:
                    8e:d1:40:c2:a4:52:1f:0f:54:16:ba:46:21:54:de:
                    92:2f:fc:db:e0:02:74:d2:fc:d3:59:00:7c:4b:08:
                    e5:15:f3:f5:13:0a:e9:51:14:8e:fc:6a:0a:09:16:
                    aa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:16:0A:B5:4D:A7:13:F0:F6:84:C0:39:5F:7A:5B:D7:DA:E3:29:7E
            X509v3 Authority Key Identifier:
                keyid:DA:65:8F:77:60:55:6B:02:9D:F5:A2:95:93:37:D5:6B:D5:E0:C7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mWPd2BVawKd9aKVkzfVa9Xgx_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ff87ea-d9a1-49d3-84a9-6751c8cf99b5/1/2mWPd2BVawKd9aKVkzfVa9Xgx_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:7d:4a:90:9b:a6:ce:bd:ed:07:25:e7:63:d1:bf:d0:66:b3:
         a4:52:a6:09:ee:8b:d8:9c:cc:0e:82:1f:3c:a0:49:d4:26:fc:
         f5:20:aa:3b:55:f9:72:fe:5c:24:f0:ca:a5:f6:2e:27:5f:35:
         f0:30:db:f6:b1:57:e5:35:45:be:0f:e0:79:34:d3:65:ac:85:
         7f:7c:bb:31:73:41:2f:8e:8c:6d:9b:71:07:ca:6b:7f:82:3c:
         8f:73:3a:b6:5e:2c:aa:9e:72:98:24:8b:64:f4:95:01:d3:94:
         12:1e:a3:9d:9b:bc:7b:bd:54:c7:22:b7:44:2b:f7:84:15:c8:
         90:4c:4b:98:4f:5b:e9:2d:90:20:f3:fa:4b:50:95:16:d7:73:
         61:79:9c:4e:ff:a0:91:83:e0:08:07:08:7a:49:ba:97:88:24:
         6a:33:42:78:bd:cf:c0:2a:05:a6:f6:08:a2:4f:c3:3b:68:e5:
         41:40:40:5c:4f:f0:48:75:04:9b:97:d5:91:65:89:92:90:2b:
         79:30:d5:09:2e:cb:80:91:9f:80:b2:4b:40:46:74:ec:ee:02:
         0a:d3:9c:66:40:49:b0:e2:10:5d:de:b9:a1:02:f7:9f:2e:a1:
         8b:0c:0f:a7:2f:f6:d9:06:f4:52:2e:e8:11:64:e6:67:17:e2:
         d2:f4:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----