Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
File:                     NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft (raw, json)
Hash identifier:          t4pc1d1IxE8YMHSc2rzZyqZzIBsUbcYp3mKY1UPkeUE=
Subject key identifier:   79:F1:91:1E:42:A8:AF:0A:9A:81:2A:E0:D7:97:1E:D7:97:32:CA:C3
Authority key identifier: 34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96
Certificate issuer:       /CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
Certificate serial:       018FE5EA8314063417C4D47D253752B209FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft
Manifest number:          11B2
Signing time:             Wed 05 Jun 2024 01:01:42 +0000
Manifest this update:     Wed 05 Jun 2024 01:01:42 +0000
Manifest next update:     Thu 06 Jun 2024 01:01:42 +0000
Files and hashes:         1: 1hwrFPr-J6BWBsBUT12V2WGgMY4.roa (hash: 7sY5jJx3P1fc3zohk2olNo5Zn3q8JNnR2MNQ0qIbJPc=)
                          2: 7r6ABkmqlrzoW4VTRM-CW6hYxuA.roa (hash: FG0OIBH/uyR6TVHSRxR/xOAzJSI/URcNB7oXx1C0fOY=)
                          3: NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl (hash: /f5ml2rNY2cebGu8nIrzojpQnOX/EQhx5+Vl0sSGH3Y=)
                          4: VhPLtAqzbTMeQR55fPFvhophf4s.roa (hash: eP5Ig4UHeUIRBr7bhkGTISE0eYa+I/YV3hJHz+eia1c=)
                          5: jwvGELKolrBywJsluTeDcxVs1bU.roa (hash: qW0PWWEpa9RXg2U7YcJZeNBDd9V1U2bcQCs4w02oAJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e5:ea:83:14:06:34:17:c4:d4:7d:25:37:52:b2:09:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3406d2c439ccbcb78a82d5cb2b4c3ff6e9934b96
        Validity
            Not Before: Jun  5 01:01:42 2024 GMT
            Not After : Jun  6 01:01:42 2024 GMT
        Subject: CN=79f1911e42a8af0a9a812ae0d7971ed79732cac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:c6:03:96:89:06:77:c5:45:fd:79:07:1d:
                    9d:f9:5e:cb:cb:05:98:3f:29:6a:89:b1:14:a1:71:
                    91:27:73:2c:85:73:f0:28:07:8d:f2:94:6e:42:12:
                    02:f7:98:df:30:11:53:9f:47:77:a1:5e:9e:f8:4b:
                    cb:72:24:07:3a:06:64:b6:8c:0c:a9:6d:e3:b7:8b:
                    41:b7:5b:2c:97:72:81:ff:e0:15:b4:af:76:85:88:
                    e3:b9:0b:d1:fa:15:a3:5a:5e:d9:77:be:c0:6b:ce:
                    51:ce:7d:f1:2c:ec:7f:1e:37:89:d1:c1:71:cc:5c:
                    3c:29:79:ba:2e:b2:85:f6:15:ce:f3:f5:ad:05:70:
                    ec:1a:23:72:c5:ef:dd:99:50:fe:94:8e:f4:b9:20:
                    6e:63:6f:55:5b:51:fc:ac:8b:b2:99:1e:67:18:f1:
                    33:77:14:78:dc:68:ec:2f:48:82:6f:98:73:af:c9:
                    25:9c:9b:9f:de:3c:7c:b1:e4:40:60:05:f2:ed:7a:
                    de:6b:20:d8:93:74:75:b3:6f:ed:ca:78:e5:b2:29:
                    4c:a6:cb:7b:bf:d9:5e:0f:89:18:fc:1d:c3:5b:e4:
                    0f:a2:7e:4d:97:c7:08:02:ed:3a:e1:cd:6b:61:83:
                    60:09:e2:9a:27:9d:28:38:31:08:90:40:85:ee:15:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F1:91:1E:42:A8:AF:0A:9A:81:2A:E0:D7:97:1E:D7:97:32:CA:C3
            X509v3 Authority Key Identifier:
                keyid:34:06:D2:C4:39:CC:BC:B7:8A:82:D5:CB:2B:4C:3F:F6:E9:93:4B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAbSxDnMvLeKgtXLK0w_9umTS5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0a3a0f-60f8-4a1c-bba0-7b880c063367/1/NAbSxDnMvLeKgtXLK0w_9umTS5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:64:e7:e4:86:19:80:29:30:5e:75:88:b1:4a:b2:9d:57:30:
         6b:da:05:d9:7f:2d:7c:15:a7:3f:f3:d2:5f:01:dd:dc:a1:83:
         4b:5d:24:77:a2:13:9c:6f:23:65:9b:5f:63:1c:e6:33:27:fd:
         07:68:70:dd:68:6c:c3:46:06:ce:dd:9e:2c:b9:4a:cf:3c:d1:
         99:44:61:77:6d:87:ca:93:93:ac:b2:cd:9f:4b:b9:f8:6b:22:
         7b:ec:20:fc:a6:d8:c3:f6:22:1a:0a:34:de:d9:bb:01:a3:f0:
         4d:5c:5c:02:11:16:74:5a:87:54:d6:af:cb:84:16:75:7a:58:
         cc:fa:cc:e6:d1:0a:39:b6:56:c4:1c:5b:83:d3:33:f4:37:fd:
         7a:c3:3b:ca:d9:5f:72:5a:bf:c6:11:19:1c:d7:4e:b5:09:40:
         88:e4:2e:45:44:a5:4c:ac:c1:76:ff:37:51:86:fd:8b:20:82:
         d8:66:c2:0e:75:00:d9:9f:cd:96:86:45:6c:68:0f:35:77:3a:
         8a:99:03:ba:c2:3b:a1:68:39:ed:c0:3a:f6:99:66:62:45:67:
         d8:3e:e5:75:e0:30:05:aa:e5:7a:a5:87:a7:17:fa:7b:e9:89:
         74:d9:21:01:6e:5b:a1:b0:77:72:7f:b0:1c:d1:ae:03:c8:63:
         0c:cf:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----