Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
File:                     KxRai98ryhUPJe1Uone49lPv2z4.mft (raw, json)
Hash identifier:          m8UEgx7cYWnqSPfZgW8Be8DSA68+PHd6OsniMLcKEY0=
Subject key identifier:   CD:A7:C9:58:BA:2D:13:F5:59:3A:DB:8A:A8:FA:15:06:E0:B8:E7:1D
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       018F005047AC5071722AF588C764CFFDB8AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft
Manifest number:          08F9
Signing time:             Sun 21 Apr 2024 11:00:12 +0000
Manifest this update:     Sun 21 Apr 2024 11:00:12 +0000
Manifest next update:     Mon 22 Apr 2024 11:00:12 +0000
Files and hashes:         1: 2oQ6OJeMPFxNRYZuirFRK11PFc4.roa (hash: 3RKYu26oRFdKcoqtDIw6pKj+0uzjBxKgPxk0OO9s/lA=)
                          2: AeTSAcejn8lbaSO2JjoYbXuDK4c.roa (hash: pQ9xbGK2moEn3IfuKTBko2h5GfLKBplW+0iaUz3mx4I=)
                          3: Au6YhOckxXKm83TU1SCm8QmoS0I.roa (hash: xkdM9qtmwVDxqCcLLseP5k1iAcS5yge3LABwySYUQjo=)
                          4: B4Y2FHA1Lvmy8M5JP3LRgQKE_oE.roa (hash: PLwPXLjWjDK1O7fUKxvefVQAmcv9qNXXMSKcYv5BP5c=)
                          5: D5oPAAmD5ByypKLeDyO1Nz0HGQw.roa (hash: vPqMg8jyM3FAvV6mydCXT5qVW5GRyv9raN2ZIN8UYVA=)
                          6: G6DPjeY_9qav4ZQjtAxmr4sCCCk.roa (hash: T39rWQmJNE70lldr0pTcOGxN7CB18wByjccPAU0MZM4=)
                          7: HeERyIm7-22QxngFzHU3quyj-JU.roa (hash: HNPCtM6YReH4+ftd8Y7g8lOwga/W7n6N3Nr9TuogWns=)
                          8: HlhGwox0aJb61kfrs7BuaHN-VF8.roa (hash: nRY8bcQaWh/p9xvzrHmxNhz/hf9aCkl2wUIjrSIMcQ0=)
                          9: KxRai98ryhUPJe1Uone49lPv2z4.crl (hash: 6PMvxC274OgphayoUWLu6U7SauYbRr93wH+9Hzi9uaQ=)
                          10: MLLuWCsw8gXQ4Pda3Sf9CtSuioY.roa (hash: PFz1gf/oEYsn/ZKET5vcjhlwTkCR8updlURoP4JxD2U=)
                          11: OMiyhPplRHkt9YoTrgktuy91CnI.roa (hash: X+05qQ5SdlYh7nnt9vMTHCMCxBNPKCmT1hAd5v49DBM=)
                          12: OeC2mKxdppI7CNdBAWN8tYpFeQg.roa (hash: drKkoHdZXgSJkzVjrQIT5Fkk3JhI7immksZLt2fCsYc=)
                          13: RrIM0EYcHdgxu1lWdrevEHj-Hqo.roa (hash: 1Q9RQ2UexCUHpfpqf1dI+ZPEx0sqLqmYAyGcT/wH/PI=)
                          14: UzcEcSoQN5I84zI7NjV23frCT1Q.roa (hash: BAdUepfvPtF7nusCXo+GN6vnkbTWVcdzgLfeKF7xkN4=)
                          15: W9usx42TEgcgZCKwPQ2mu_akMeg.roa (hash: QktvNEqaqcl8FkW4q9eOrZpVqVwfFsD4iltoOooXlBU=)
                          16: WQ-RzHJGHl0L5rOYEVqrfqbHzGs.roa (hash: 8QInsJEHQOKg2G51+dyLy04B1gRuxdluGOwGuZqcHW8=)
                          17: f1rTv_IThnKFCb1aBgyKclbpYww.roa (hash: 0l3/QRiN5Bjf1+H4l72sOlSy4RSkPa3MDqTG4rhZcsU=)
                          18: jxF6JrhxGTXaRE0yiIgcn19LCtg.roa (hash: 5RsZhlFsw8Yz67xN4L9UibzcEmzkFFfPAYSnqz4iY98=)
                          19: k1I5LKerBjqrx2OT9VblwXHXPKk.roa (hash: 8boRgeVtN8opDbZed62EjIoKXgldbzgTf/F9hIlF5jw=)
                          20: oDwSFcY0odLaDJKrXT16RvMwb2M.roa (hash: 7sVdyhFq647I09oqD5tpRmlyARqgKc1mDDYvbygl3WM=)
                          21: tH54a5u8InlwFx3uoH0av8rprKs.roa (hash: W+A0CAQJXLGWRwH0wHfGcN3s8kCCYsoo0Iy+7Ii/InA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:50:47:ac:50:71:72:2a:f5:88:c7:64:cf:fd:b8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Apr 21 11:00:12 2024 GMT
            Not After : Apr 22 11:00:12 2024 GMT
        Subject: CN=cda7c958ba2d13f5593adb8aa8fa1506e0b8e71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:1e:52:14:bf:66:92:58:cb:0a:15:9c:9a:
                    4d:8e:37:7e:a6:91:41:77:ad:c6:64:63:e5:fe:64:
                    53:42:eb:aa:22:1b:9b:07:9a:b3:21:c1:ed:e3:da:
                    80:2d:be:b8:7a:db:4f:04:b4:f8:42:b2:b5:b7:94:
                    64:35:74:1d:e5:a1:44:ab:bf:53:e7:84:21:9f:92:
                    0f:c8:6e:91:15:9f:e0:c3:a1:a7:3a:38:2e:b8:89:
                    d7:b4:a9:1c:15:1d:9d:c3:03:a0:11:ff:31:45:a4:
                    72:76:a7:76:cd:61:5e:25:59:92:ec:61:85:ea:ef:
                    91:f2:60:29:c9:f6:17:45:b3:35:b5:eb:35:51:9f:
                    5b:16:9d:96:6c:94:cd:d4:d5:f7:3b:cf:b8:ec:db:
                    c1:3a:e5:74:bf:ec:9b:a6:e3:05:b1:61:57:02:19:
                    aa:c4:80:fc:eb:4e:8c:b3:cb:7d:c3:78:2d:23:97:
                    7a:99:cf:67:36:f7:97:1a:f0:f7:fc:46:c1:e7:76:
                    4f:fa:8e:83:f2:1c:7d:71:ff:c4:0a:2f:09:ad:8d:
                    4e:e4:44:7c:0b:2e:5f:c9:f3:31:9c:34:72:34:be:
                    76:f7:df:a7:34:ad:cb:83:52:b4:23:f9:ad:16:a7:
                    2c:9f:70:b4:75:bb:85:d3:e7:a6:52:b5:4e:6a:2e:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:C9:58:BA:2D:13:F5:59:3A:DB:8A:A8:FA:15:06:E0:B8:E7:1D
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:09:cd:5a:db:ce:59:19:0f:5d:67:b4:63:c1:4b:a9:0c:d3:
         95:1f:04:56:af:2f:2c:87:f9:78:5a:e8:ec:75:6e:8f:7d:d6:
         33:35:8a:d9:5a:4c:cc:18:49:d6:a3:15:ea:52:ff:ea:6a:ec:
         9b:33:c0:10:14:a1:fb:82:02:2f:8f:2d:6b:b0:e0:58:ec:ff:
         ae:68:0e:18:2b:26:e2:65:af:28:eb:5c:26:67:24:18:ae:ea:
         d3:61:a7:fc:16:43:4f:72:e0:bb:9f:61:4d:3c:33:74:c1:4b:
         06:7b:ff:0f:eb:9b:46:51:55:c2:59:b5:d8:4c:bb:5a:ab:93:
         84:ca:c8:c1:7f:48:1e:bb:81:98:f6:80:07:12:18:9c:e7:cf:
         48:5d:7d:93:a4:43:42:a0:af:8b:bf:9e:91:4d:0c:c9:18:5a:
         af:73:f5:8c:93:50:96:9f:e6:b1:6a:57:f8:b7:b1:8e:3a:82:
         36:e4:aa:c4:d0:f6:55:a7:03:63:59:1a:07:30:c6:28:d5:a3:
         23:76:01:23:c6:b1:9c:ff:51:ed:84:82:0b:67:5a:69:5d:7b:
         43:bb:17:7a:10:ee:68:b2:eb:ce:57:d6:67:fb:32:60:69:d2:
         20:f4:a0:c8:54:a8:78:64:79:e0:60:34:54:52:cd:7b:ea:d7:
         11:59:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----