Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
File:                     Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft (raw, json)
Hash identifier:          LMBcm8dtYzAHzgHAja025/F8Se5kJJyU6Ci+hYGEy18=
Subject key identifier:   4E:25:04:2D:CA:9A:71:22:83:AB:D7:06:2F:BC:C0:AD:81:B8:41:02
Authority key identifier: 0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE
Certificate issuer:       /CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
Certificate serial:       0193264253839E331F3110716A8F0FF589E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft
Manifest number:          135A
Signing time:             Wed 13 Nov 2024 16:01:41 +0000
Manifest this update:     Wed 13 Nov 2024 16:01:41 +0000
Manifest next update:     Thu 14 Nov 2024 16:01:41 +0000
Files and hashes:         1: Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl (hash: dmkKgGOcO7xI2SHxlPN7faWRGSWzEm8vpckRpKJ/M2s=)
                          2: jGqpvp4ibA-qeZOiAqe2cEHLf8w.roa (hash: pyieLE18ftE6LzfZes4vYUtIgC7LyMgyCYlfRnjefBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:42:53:83:9e:33:1f:31:10:71:6a:8f:0f:f5:89:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1fb63628fe3a11065189bdcf1357fbfc06dade
        Validity
            Not Before: Nov 13 16:01:41 2024 GMT
            Not After : Nov 14 16:01:41 2024 GMT
        Subject: CN=4e25042dca9a712283abd7062fbcc0ad81b84102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:37:d3:eb:38:52:4f:23:de:7f:f3:c8:4c:
                    a6:c5:d4:43:49:96:1a:85:9d:80:c8:db:08:43:de:
                    a0:c0:5f:bb:8f:c2:84:70:2c:4e:79:69:26:b2:97:
                    af:56:74:b7:b9:64:bb:6d:fb:23:0f:c5:2c:05:f0:
                    b9:a0:5b:72:5d:a1:40:e8:77:d4:60:f6:58:43:90:
                    f3:17:a2:d9:83:0c:86:02:8f:92:2b:17:b5:20:85:
                    c2:3f:aa:54:71:d8:c6:6b:a0:0e:fb:ad:0a:8b:01:
                    81:e0:4e:cf:6a:f9:83:6a:e1:b5:4a:e7:a3:ba:80:
                    a8:a1:27:ca:68:52:3e:79:e1:cc:cd:17:cf:e1:3e:
                    dd:77:78:7d:c5:5b:43:c5:bf:4e:33:19:24:c6:8b:
                    5d:2b:ee:e4:56:85:41:37:db:ad:f5:8d:72:4a:ca:
                    a8:72:60:16:7e:5b:b5:df:fc:51:c4:e0:2a:f3:b8:
                    c0:ce:42:7b:75:16:64:b9:f5:07:4e:6a:51:4a:99:
                    ea:42:c4:94:d0:27:4c:2f:f9:c4:4d:a6:c1:60:21:
                    3c:4c:2c:e2:56:27:a4:04:78:e3:c2:50:a1:17:1b:
                    95:90:2e:5f:37:cd:51:43:27:8f:46:6a:11:43:02:
                    b6:16:44:2e:c3:f7:e4:f6:a1:65:f9:85:93:e5:d6:
                    a2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:25:04:2D:CA:9A:71:22:83:AB:D7:06:2F:BC:C0:AD:81:B8:41:02
            X509v3 Authority Key Identifier:
                keyid:0E:1F:B6:36:28:FE:3A:11:06:51:89:BD:CF:13:57:FB:FC:06:DA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/207b40-5fff-4f43-8b82-103b9f327924/1/Dh-2Nij-OhEGUYm9zxNX-_wG2t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:e5:f8:83:53:d0:eb:b9:22:0c:fe:04:fa:d0:a1:84:85:
         3f:e8:5b:d9:b5:56:b3:68:ee:dc:62:fd:ab:76:5c:4c:96:e8:
         0d:c1:0c:60:5d:d1:40:2a:97:7f:ec:19:90:78:cd:b2:50:93:
         da:67:4f:bb:8e:49:15:00:f6:c0:8a:b3:b9:d5:fc:07:1a:5b:
         a7:12:d3:98:b3:b0:99:18:b7:a9:52:6a:4c:71:45:0d:d1:2f:
         27:a5:fe:a4:95:4c:23:80:d7:fa:c2:4e:71:3d:81:5c:8c:99:
         44:81:91:fc:32:66:f3:4f:c2:14:e3:82:62:ad:d8:7c:f2:2a:
         a2:a1:d8:43:f7:ca:5a:a4:7e:95:7d:61:7b:82:fb:36:77:8e:
         98:c9:ec:cc:6d:97:d4:ef:e5:0c:72:a8:d0:16:66:f1:79:73:
         99:94:57:42:77:41:da:36:08:ab:71:33:ed:a0:98:bb:79:07:
         c2:73:5a:ee:a0:5b:f8:8b:c5:74:0e:6f:5e:4b:2c:27:de:fa:
         d1:4a:3f:12:ce:1d:c5:d6:47:4b:f9:9e:91:d2:d2:69:f4:ed:
         69:f8:01:f9:9e:ee:f5:c9:6f:30:21:9d:44:0b:40:f6:39:c2:
         38:87:01:47:17:e4:07:bb:fc:5c:5d:84:ec:e6:09:bb:d4:80:
         e8:40:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----