Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft
File:                     6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft (raw, json)
Hash identifier:          vJhYm/iZQKJ//qq6bkErMIQpdTLdCP8RoFtC1GgxBLo=
Subject key identifier:   08:66:79:13:65:C5:B0:6A:AA:FD:F5:B3:AC:2A:DB:32:F0:F7:19:74
Authority key identifier: E9:91:25:E9:EA:82:2E:03:46:67:C8:21:A8:5C:A5:AB:14:EC:0A:D8
Certificate issuer:       /CN=e99125e9ea822e034667c821a85ca5ab14ec0ad8
Certificate serial:       0193467145F313423D9A0F39F0FE83E580C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft
Manifest number:          1368
Signing time:             Tue 19 Nov 2024 22:00:48 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:48 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:48 +0000
Files and hashes:         1: 6ZEl6eqCLgNGZ8ghqFylqxTsCtg.crl (hash: WcWPdAXD9+sE9RR7IqBWtY6gDvK7g1Pukl8t+hdjzPk=)
                          2: LqaxSLPsuVzJ-AOUZvX9VjuHLAc.roa (hash: 9AeXW10v8C91oj9hyO04nlEZIWQsNLUZJreVbpUQJMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:45:f3:13:42:3d:9a:0f:39:f0:fe:83:e5:80:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e99125e9ea822e034667c821a85ca5ab14ec0ad8
        Validity
            Not Before: Nov 19 22:00:48 2024 GMT
            Not After : Nov 20 22:00:48 2024 GMT
        Subject: CN=0866791365c5b06aaafdf5b3ac2adb32f0f71974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:ea:1b:04:b6:6a:0b:84:e1:71:f0:e3:34:
                    e5:4d:32:8e:df:af:6f:f5:5b:43:6e:34:68:05:81:
                    10:b2:05:d3:77:c5:a8:e2:98:e3:b3:48:73:9c:62:
                    00:52:b6:26:e4:2a:01:75:85:74:64:cf:6e:a3:c2:
                    9f:73:a0:d7:7c:9c:a4:38:1f:15:76:82:3c:f8:33:
                    f7:f2:18:bb:39:b5:84:b2:21:85:37:41:e6:02:96:
                    a9:2f:34:0b:6d:13:4d:5a:4e:c1:c9:09:e7:e5:50:
                    13:a5:3d:2c:72:67:1c:2d:d2:93:60:0d:98:3f:ae:
                    29:f0:91:f4:26:d6:e3:1b:92:70:cf:82:07:4e:1f:
                    94:01:9a:b4:32:68:ce:7c:dc:68:0e:15:8c:4d:d4:
                    14:65:2b:c1:54:d6:bc:27:27:c1:ef:e7:bb:7c:fc:
                    37:00:f9:69:7d:12:01:12:35:14:69:ca:31:21:bc:
                    ba:40:ea:d9:e6:ad:ff:30:0c:5b:83:39:c1:0b:26:
                    be:46:34:85:b1:87:43:92:ad:f5:b3:57:6c:de:1e:
                    98:98:25:ed:bb:c5:8e:19:15:c6:52:a2:04:8c:09:
                    34:ff:44:17:5f:d9:4f:35:fc:b2:c4:b9:fd:31:e9:
                    a1:38:6c:57:e2:45:95:8a:f6:ec:20:d1:25:51:d3:
                    ec:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:66:79:13:65:C5:B0:6A:AA:FD:F5:B3:AC:2A:DB:32:F0:F7:19:74
            X509v3 Authority Key Identifier:
                keyid:E9:91:25:E9:EA:82:2E:03:46:67:C8:21:A8:5C:A5:AB:14:EC:0A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e2831a-4e74-4ea5-9097-0e445895a172/1/6ZEl6eqCLgNGZ8ghqFylqxTsCtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8c:4b:e9:5e:52:f6:aa:89:86:d6:0b:1a:ff:a1:8b:8e:ce:
         d1:6f:33:3c:1e:7d:e9:20:4b:16:88:f0:f2:0a:a1:a5:f2:a8:
         b8:3e:e5:42:c4:31:f4:43:a5:43:0d:82:6b:23:c2:59:27:a9:
         28:ae:a8:6c:90:58:8e:80:96:a5:6f:fb:dd:a9:08:7b:02:f0:
         3e:ad:1b:52:e6:74:39:46:a2:aa:a8:41:eb:29:7f:e1:b1:5e:
         6d:14:c6:b8:ff:bb:73:d0:d7:1a:33:0e:bf:94:71:12:68:3a:
         cb:36:bf:7d:e0:29:f4:3f:6c:27:82:41:de:66:bf:59:35:10:
         9e:51:d4:a1:59:63:2a:a8:46:bb:99:10:a1:b9:f6:a4:d0:50:
         1d:4e:41:17:2a:c5:a1:e8:12:64:66:6f:48:07:ba:fe:d6:8d:
         bc:76:ca:ac:92:76:50:f2:30:86:7a:0d:55:a3:58:f2:98:08:
         43:95:0c:a9:a1:88:59:85:08:a6:6c:74:91:2c:f4:e4:8a:f0:
         1c:f5:e4:56:91:e1:1c:3c:a5:e2:ad:e7:31:e5:be:81:ac:59:
         2d:d7:9d:01:75:b7:9d:1f:79:eb:89:fa:7d:66:64:56:8b:3e:
         73:88:b1:82:e0:fa:32:03:72:a0:2f:f3:6c:23:72:5b:0e:bc:
         36:81:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----