Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
File:                     3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft (raw, json)
Hash identifier:          qnu38/GVbUBSzY2O3PpRBNTPOfEsyphk+NOmLGwh/a4=
Subject key identifier:   E2:1B:F0:41:EC:E0:43:03:47:9B:31:6C:03:14:18:29:B6:88:93:27
Authority key identifier: DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
Certificate issuer:       /CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
Certificate serial:       01922FEC9C3828E452935919986F4CB7113B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
Manifest number:          0655
Signing time:             Thu 26 Sep 2024 20:01:28 +0000
Manifest this update:     Thu 26 Sep 2024 20:01:28 +0000
Manifest next update:     Fri 27 Sep 2024 20:01:28 +0000
Files and hashes:         1: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl (hash: X8eRR5qkz7Y37CCpyOur80ErhOEIbAYX65K994jW+TQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:ec:9c:38:28:e4:52:93:59:19:98:6f:4c:b7:11:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
        Validity
            Not Before: Sep 26 20:01:28 2024 GMT
            Not After : Sep 27 20:01:28 2024 GMT
        Subject: CN=e21bf041ece04303479b316c03141829b6889327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:f7:6e:70:a6:79:a8:e6:c5:ea:77:a5:0e:
                    4b:e2:26:bc:46:b9:bc:1c:29:6b:a3:b1:92:69:a5:
                    8d:50:51:cc:cc:00:9f:90:56:98:95:00:94:41:1f:
                    c2:9d:89:52:3d:32:52:26:a7:44:d2:b0:ef:82:f8:
                    e7:9d:46:b8:7a:88:c8:80:fd:a6:94:ea:96:b9:ec:
                    14:ab:4e:9a:47:a0:b2:61:31:5c:c3:f0:b3:b9:35:
                    24:73:d9:63:18:91:a3:18:fe:f0:55:a2:96:f5:fc:
                    bc:79:a0:c2:1b:b4:ca:e3:ba:ae:74:b8:a1:d2:77:
                    0c:0b:8d:d5:6a:2e:22:66:c4:e9:bb:04:8a:6d:d7:
                    d9:90:92:b0:18:0b:09:ac:45:79:d0:0d:90:ec:2e:
                    c1:f1:ab:a2:98:fd:44:81:f3:c6:53:29:74:fd:2a:
                    0b:d4:75:bb:2c:e3:5d:05:84:1f:01:d8:3d:bb:84:
                    6f:5e:1c:0c:0d:ad:f7:a5:5e:d3:9c:e9:a4:b8:a7:
                    be:e5:c5:a2:f7:99:ec:a5:2a:b8:2f:b2:a7:a3:11:
                    40:d2:eb:04:01:f5:cb:ff:5f:a2:ed:87:41:b8:01:
                    03:67:7f:55:36:b1:ed:b4:28:b6:9e:e1:39:01:0f:
                    28:ab:fa:f3:72:38:96:a9:55:8d:b1:db:ed:05:66:
                    fa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:F0:41:EC:E0:43:03:47:9B:31:6C:03:14:18:29:B6:88:93:27
            X509v3 Authority Key Identifier:
                keyid:DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e9:99:46:1b:21:af:31:7f:48:60:f4:a5:5c:b2:58:c2:f4:
         a5:d0:88:44:c4:f4:d8:bc:00:6d:33:a1:68:82:71:44:5c:a8:
         8f:f2:d0:e6:05:4b:80:dd:61:22:32:3c:dc:17:26:09:55:7b:
         a0:9d:ea:fc:96:8a:40:f9:6b:ed:16:d3:59:10:54:b8:eb:79:
         f9:60:2b:ab:5e:9e:5f:08:41:20:bc:62:d7:8c:f2:73:c8:8a:
         6f:2b:d8:e7:8b:63:ad:9c:54:08:c6:5d:39:68:72:2c:54:4e:
         f4:92:48:33:48:de:df:ab:8f:04:95:a9:94:47:cd:68:2b:47:
         4f:07:97:57:6c:e2:c9:14:99:7b:84:af:b2:4c:e1:57:75:45:
         a3:4c:a5:4c:05:fc:b8:52:c3:4e:04:4c:12:67:c8:d4:9b:7b:
         74:88:35:36:41:4b:e1:f2:f0:35:a6:c2:58:9e:57:07:f6:37:
         d5:ae:d1:88:46:1c:75:cb:6f:5d:d7:6f:31:52:79:6f:89:44:
         7c:43:d6:37:92:61:24:1c:d6:a8:e2:c3:50:dd:01:b5:9d:b8:
         bb:a9:8d:a3:b0:ef:26:0f:c5:63:64:7e:75:39:38:d4:fe:bc:
         34:69:bd:ae:07:8c:4a:46:5e:27:a2:ce:bf:47:8f:8c:dc:1c:
         b6:05:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----