Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft
File:                     w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft (raw, json)
Hash identifier:          LnUSxITe+c47UycMPwVtNkWDvdA3QOohAcdtKxCpMeg=
Subject key identifier:   4C:62:9C:F5:3B:97:33:E4:10:D7:E9:6F:D2:12:53:66:6C:BF:6C:61
Authority key identifier: C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7
Certificate issuer:       /CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
Certificate serial:       0193463A40462D0708A86F86FD2098AAE402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft
Manifest number:          04D4
Signing time:             Tue 19 Nov 2024 21:00:42 +0000
Manifest this update:     Tue 19 Nov 2024 21:00:42 +0000
Manifest next update:     Wed 20 Nov 2024 21:00:42 +0000
Files and hashes:         1: EyDvH0uBJ9QJkqjXfWZa4XqNdG4.roa (hash: QvtHnmGfnryJpbqn3yjanMcZb0o3HqBC919l0nHf8gA=)
                          2: aVhvh8nOxUteryHLBGXv9ZJjT9o.roa (hash: KPhlDtt412fTLo/HDpy1qG2Y7e+hjTp1F5+vQgOeS2I=)
                          3: w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl (hash: 8oyg9nnSkpUdiR4nKc1Y+JiNmpZRlLgbFiLwnyth88w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:3a:40:46:2d:07:08:a8:6f:86:fd:20:98:aa:e4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a3c2bd16f8318bdd9c3eb20a8a8a701f3e27c7
        Validity
            Not Before: Nov 19 21:00:42 2024 GMT
            Not After : Nov 20 21:00:42 2024 GMT
        Subject: CN=4c629cf53b9733e410d7e96fd21253666cbf6c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:58:1c:42:bf:a5:78:46:5f:28:3f:5b:e2:96:
                    3b:10:d1:54:1b:06:e4:e2:eb:8b:d5:72:f7:bd:a3:
                    cb:0c:88:ca:1b:ee:89:28:dc:42:bf:b6:43:ea:38:
                    b5:81:01:aa:09:61:d1:6b:e1:f6:58:a2:5a:84:16:
                    71:5b:e1:28:5f:03:cb:b8:80:27:67:e6:e9:2a:d0:
                    88:78:1c:c9:e1:86:51:74:b6:3c:2d:fb:e3:ae:11:
                    47:9a:ad:e7:40:41:a8:11:97:2c:f3:43:d6:6c:8b:
                    5c:91:2a:15:92:1a:e7:c6:37:a1:44:40:44:7e:78:
                    f3:a2:6c:3c:20:ff:8c:32:53:ae:52:54:0b:f3:02:
                    01:01:73:96:18:94:47:bc:c5:67:aa:3d:ce:4d:15:
                    29:5e:43:a5:f4:fb:1d:b9:7a:0c:17:01:c5:fe:fc:
                    5d:e5:c2:a8:f4:b0:5b:15:d1:bb:9c:ab:9e:36:b7:
                    3c:5b:1c:b0:b7:5e:89:3c:d4:74:b1:bf:cc:3c:83:
                    c6:57:e3:8c:da:f8:7a:7b:b5:59:39:70:e7:4b:f6:
                    25:bf:49:a5:ca:91:b2:25:f0:11:fd:d9:23:d0:82:
                    d7:1e:05:6f:5c:e9:db:fe:38:b0:d8:1a:89:80:0e:
                    0d:2b:8f:99:dd:dc:9e:a9:84:3a:74:1f:d2:f8:75:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:62:9C:F5:3B:97:33:E4:10:D7:E9:6F:D2:12:53:66:6C:BF:6C:61
            X509v3 Authority Key Identifier:
                keyid:C3:A3:C2:BD:16:F8:31:8B:DD:9C:3E:B2:0A:8A:8A:70:1F:3E:27:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PCvRb4MYvdnD6yCoqKcB8-J8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b49460-c42f-4186-a556-b2426736c1e5/1/w6PCvRb4MYvdnD6yCoqKcB8-J8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:d6:53:1d:06:2c:85:9a:49:01:21:36:0e:9e:ac:4a:6a:
         9e:c2:b4:cb:e7:01:48:56:2d:d1:c3:2c:08:ca:ef:6a:e3:37:
         4c:9d:85:85:d6:f4:f8:87:3b:01:64:2c:07:f6:bd:52:ca:0c:
         f2:07:00:1c:ef:fc:c7:ce:47:b8:d6:01:5e:ec:fb:8c:36:df:
         c7:90:87:cd:0b:57:d4:95:2d:5b:fb:f7:60:d9:23:17:e6:0d:
         1f:16:d9:5d:13:9e:50:4c:88:e6:f1:4b:b4:81:a9:d4:da:98:
         05:72:40:39:d6:84:d0:6b:ae:63:f9:c1:0f:29:d7:a5:5f:bd:
         55:99:6d:b9:f5:da:41:13:4d:03:7d:0c:e3:58:60:90:0a:39:
         4a:14:cd:9c:8a:4d:42:d4:ee:96:ba:43:72:a4:67:c4:6b:07:
         54:2c:f9:4a:e5:0f:a3:54:53:ec:b3:08:a9:eb:fe:b5:47:63:
         bc:a2:10:a6:db:d8:ca:46:0c:8d:bd:03:d8:f2:e5:20:ec:7e:
         fb:3b:1e:4a:bc:dd:54:a3:49:c1:e6:21:77:7a:26:c2:99:e9:
         8b:f1:4e:bb:19:97:0e:1c:73:5a:60:df:78:77:35:83:0f:3b:
         b5:ba:f6:ce:c6:24:84:7a:30:c0:4f:45:cb:60:75:7d:17:93:
         c8:05:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----