Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
File:                     ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft (raw, json)
Hash identifier:          NemlznT6X2ezbfnXgWs6mCazsioers5AYtPBDG3sLmc=
Subject key identifier:   C4:DE:62:06:EB:3B:89:2B:99:28:02:A0:89:E7:B2:38:33:22:F0:E2
Authority key identifier: 79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA
Certificate issuer:       /CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
Certificate serial:       019156C5B28EB39B3D9095D06CAEFA5B93F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft
Manifest number:          0696
Signing time:             Thu 15 Aug 2024 16:01:22 +0000
Manifest this update:     Thu 15 Aug 2024 16:01:22 +0000
Manifest next update:     Fri 16 Aug 2024 16:01:22 +0000
Files and hashes:         1: QsSb-NXqwEGb998W4IJ1akflpGQ.roa (hash: E+sjG2tbeo9BE+9T7qmdsWOB8p2SprY6F82jSXEqJIs=)
                          2: ed8QfWvxzMgY9m2NqN2F7pJKDOo.crl (hash: 19VJYGv9/SWXC9BaSCvRUfYBeCbQgfQZmVBcFhGH67k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:56:c5:b2:8e:b3:9b:3d:90:95:d0:6c:ae:fa:5b:93:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df107d6bf1ccc818f66d8da8dd85ee924a0cea
        Validity
            Not Before: Aug 15 16:01:22 2024 GMT
            Not After : Aug 16 16:01:22 2024 GMT
        Subject: CN=c4de6206eb3b892b992802a089e7b2383322f0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:32:f1:70:74:d1:03:ea:6b:73:1c:b5:54:
                    91:30:cd:ef:f5:07:c1:94:c4:69:e2:cb:e9:74:57:
                    8c:6f:8c:c5:b2:2a:d8:6e:dc:c4:72:bb:61:7c:5b:
                    fb:bc:34:80:97:30:60:40:a8:60:d1:7e:38:f1:78:
                    69:b8:a0:32:66:33:24:38:ed:5a:4d:6a:eb:0b:a4:
                    b3:97:35:1b:11:03:38:0a:96:41:15:a5:a7:86:44:
                    b9:70:d8:26:4c:96:4c:bc:35:6d:4c:2a:aa:27:46:
                    6b:f8:fb:81:06:22:22:c8:f4:eb:f9:c9:f3:fa:e3:
                    a9:9d:35:c2:7b:2e:05:12:d8:73:43:fd:ba:f0:d3:
                    1e:8f:0b:97:73:ee:97:02:93:4b:7a:d1:33:f9:43:
                    00:6a:9a:97:3e:4c:c6:b4:86:34:9a:af:a4:9c:59:
                    25:61:81:96:3b:86:c4:6d:93:5d:6b:78:ee:46:1e:
                    a2:d3:50:ad:54:9c:7d:cf:66:cc:07:cd:60:a1:2c:
                    e2:a1:12:6e:01:4e:0a:7b:c8:d3:37:ab:63:4b:6f:
                    00:4c:5f:ed:e1:b7:10:85:1c:08:19:42:b0:ec:f1:
                    a3:8f:35:f5:51:90:10:3f:39:fa:80:e2:3f:7c:cd:
                    a2:68:a9:9c:ac:5f:17:1f:4b:80:7e:52:d8:fb:f7:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DE:62:06:EB:3B:89:2B:99:28:02:A0:89:E7:B2:38:33:22:F0:E2
            X509v3 Authority Key Identifier:
                keyid:79:DF:10:7D:6B:F1:CC:C8:18:F6:6D:8D:A8:DD:85:EE:92:4A:0C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8QfWvxzMgY9m2NqN2F7pJKDOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/20bc6d-8c8d-4e27-89c7-f512c2dac4c4/1/ed8QfWvxzMgY9m2NqN2F7pJKDOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:32:a1:41:f1:97:67:14:51:5e:d6:21:60:73:23:ff:87:61:
         dd:42:a6:15:a6:8f:8e:3b:14:43:86:70:8e:5a:7a:b7:89:a1:
         06:c5:c6:fc:fe:27:ae:74:e5:93:6a:48:93:8c:30:9b:2c:73:
         22:d2:1f:cb:11:be:46:c2:b8:0e:d5:3f:e7:0b:83:f9:f0:0b:
         dd:8a:1d:3d:42:f1:ae:ee:04:e8:8c:d7:9e:a5:58:bc:43:3b:
         23:c5:0a:f1:10:6e:ce:82:d9:ec:2d:d5:c5:3e:a8:ec:3c:c8:
         60:53:82:53:5b:c3:a1:c4:17:7d:fd:29:36:7d:1d:0d:66:6c:
         23:87:83:3d:2f:60:d4:0f:7f:b6:c6:3a:57:7e:cd:1b:a4:28:
         de:49:4f:b7:fb:8b:33:c7:d4:62:5b:a3:cb:f8:6c:4f:54:08:
         53:5d:e5:93:15:2c:f9:d6:c9:5a:16:0e:e4:c6:aa:97:6d:ab:
         74:29:79:c7:6d:23:a7:1e:78:d8:02:c1:f7:e0:a5:a5:56:b7:
         b5:36:51:c6:ab:0d:86:ea:41:68:62:d2:9e:b6:de:d3:29:2d:
         a4:61:d5:fa:2a:6a:85:b4:26:80:10:e9:b4:6a:44:3f:31:3d:
         6c:2b:39:8c:2d:fb:a8:82:db:79:61:0d:3e:cc:78:65:a5:57:
         e0:d9:dc:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFWxbKOs5s9kJXQbK76W5PzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZGYxMDdkNmJmMWNjYzgxOGY2NmQ4ZGE4ZGQ4NWVlOTI0
YTBjZWEwHhcNMjQwODE1MTYwMTIyWhcNMjQwODE2MTYwMTIyWjAzMTEwLwYDVQQD
EyhjNGRlNjIwNmViM2I4OTJiOTkyODAyYTA4OWU3YjIzODMzMjJmMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J4y8XB00QPqa3MctVSRMM3v9QfB
lMRp4svpdFeMb4zFsirYbtzEcrthfFv7vDSAlzBgQKhg0X448XhpuKAyZjMkOO1a
TWrrC6SzlzUbEQM4CpZBFaWnhkS5cNgmTJZMvDVtTCqqJ0Zr+PuBBiIiyPTr+cnz
+uOpnTXCey4FEthzQ/268NMejwuXc+6XApNLetEz+UMAapqXPkzGtIY0mq+knFkl
YYGWO4bEbZNda3juRh6i01CtVJx9z2bMB81goSzioRJuAU4Ke8jTN6tjS28ATF/t
4bcQhRwIGUKw7PGjjzX1UZAQPzn6gOI/fM2iaKmcrF8XH0uAflLY+/dhNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTeYgbrO4krmSgCoInnsjgzIvDiMB8GA1UdIwQY
MBaAFHnfEH1r8czIGPZtjajdhe6SSgzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWQ4UWZXdnh6TWdZOW0yTnFOMkY3cEpLRE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yMGJjNmQtOGM4ZC00ZTI3LTg5Yzct
ZjUxMmMyZGFjNGM0LzEvZWQ4UWZXdnh6TWdZOW0yTnFOMkY3cEpLRE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yMGJjNmQtOGM4ZC00ZTI3LTg5YzctZjUxMmMyZGFjNGM0
LzEvZWQ4UWZXdnh6TWdZOW0yTnFOMkY3cEpLRE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjKhQfGX
ZxRRXtYhYHMj/4dh3UKmFaaPjjsUQ4Zwjlp6t4mhBsXG/P4nrnTlk2pIk4wwmyxz
ItIfyxG+RsK4DtU/5wuD+fAL3YodPULxru4E6IzXnqVYvEM7I8UK8RBuzoLZ7C3V
xT6o7DzIYFOCU1vDocQXff0pNn0dDWZsI4eDPS9g1A9/tsY6V37NG6Qo3klPt/uL
M8fUYlujy/hsT1QIU13lkxUs+dbJWhYO5Maql22rdCl5x20jpx542ALB9+ClpVa3
tTZRxqsNhupBaGLSnrbe0yktpGHV+ipqhbQmgBDptGpEPzE9bCs5jC37qILbeWEN
Psx4ZaVX4Nnc6Q==
-----END CERTIFICATE-----