Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.mft
File:                     De0g5c_qDXlqs_c7mM0kvvHFzJo.mft (raw, json)
Hash identifier:          f7fEJcpgkE9FPZS0PJ9d0Qa/7829yYberF+UhLr+gbw=
Subject key identifier:   7D:24:0B:A2:2B:D7:17:D3:98:26:FB:5D:D1:AC:5B:80:FC:19:47:EE
Authority key identifier: 0D:ED:20:E5:CF:EA:0D:79:6A:B3:F7:3B:98:CD:24:BE:F1:C5:CC:9A
Certificate issuer:       /CN=0ded20e5cfea0d796ab3f73b98cd24bef1c5cc9a
Certificate serial:       01922F1079F9C9D1676A30FC1DEABB4E66AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/De0g5c_qDXlqs_c7mM0kvvHFzJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.mft
Manifest number:          12DA
Signing time:             Thu 26 Sep 2024 16:01:01 +0000
Manifest this update:     Thu 26 Sep 2024 16:01:01 +0000
Manifest next update:     Fri 27 Sep 2024 16:01:01 +0000
Files and hashes:         1: De0g5c_qDXlqs_c7mM0kvvHFzJo.crl (hash: x2ewI9i+4KxENqn7wLi3NMGJM7T0C1xLd8dYPqeXSMw=)
                          2: owwdxqBAqbJxnpeaEpqsNAzrfBk.roa (hash: O1YwLdWOVxNvwf7QXInMg67U3uMDFFu3a+vVMP4Sd1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:10:79:f9:c9:d1:67:6a:30:fc:1d:ea:bb:4e:66:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ded20e5cfea0d796ab3f73b98cd24bef1c5cc9a
        Validity
            Not Before: Sep 26 16:01:01 2024 GMT
            Not After : Sep 27 16:01:01 2024 GMT
        Subject: CN=7d240ba22bd717d39826fb5dd1ac5b80fc1947ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:69:26:c1:e4:0e:08:fe:96:63:39:9e:53:
                    df:79:bf:b3:31:97:fd:b3:92:a3:4e:0d:9a:7e:ee:
                    43:83:17:4b:51:99:69:84:cb:04:fd:63:06:ba:56:
                    ec:d1:33:cb:c1:19:24:56:1f:e0:eb:87:8b:64:0d:
                    8c:06:a8:76:32:08:ed:13:54:9f:ca:25:7f:75:fd:
                    e9:67:a8:cb:b4:61:b6:1c:43:07:0b:07:d8:d1:0c:
                    5b:ae:54:ee:27:09:05:a4:0e:aa:02:75:61:35:d2:
                    1d:20:bc:b8:bb:e1:ee:2f:7c:31:f5:b8:21:19:79:
                    8f:ca:55:69:8a:45:8f:77:da:52:c6:b5:ea:9d:16:
                    f6:16:85:27:99:35:ca:18:b5:45:43:e5:c5:38:ed:
                    7e:aa:3e:8b:22:a9:d7:fb:1a:4a:47:80:b4:b8:64:
                    a7:60:b2:a7:d5:d6:61:55:41:76:da:45:e0:5d:dc:
                    a8:93:51:20:c3:31:a7:4b:ba:58:4b:e9:44:d3:fe:
                    be:3b:e2:72:0b:4d:da:65:b7:79:82:b3:71:82:80:
                    b8:a9:2a:5d:07:59:5e:8c:ee:c0:ed:11:32:9c:f4:
                    4f:6d:21:33:f6:a3:1c:ae:74:fe:93:44:fa:49:5a:
                    31:b0:c2:a5:f2:99:1b:56:35:dc:98:ef:7e:22:3b:
                    64:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:24:0B:A2:2B:D7:17:D3:98:26:FB:5D:D1:AC:5B:80:FC:19:47:EE
            X509v3 Authority Key Identifier:
                keyid:0D:ED:20:E5:CF:EA:0D:79:6A:B3:F7:3B:98:CD:24:BE:F1:C5:CC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De0g5c_qDXlqs_c7mM0kvvHFzJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1a44b7-9c4b-40b9-b6ac-d6930c97e967/1/De0g5c_qDXlqs_c7mM0kvvHFzJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:69:35:cf:5c:eb:f8:ee:47:6c:33:09:bb:2e:39:05:ba:
         3c:33:2d:24:be:88:a6:ef:d0:02:22:59:68:24:51:22:a1:39:
         d9:20:0a:26:7c:d6:1e:5d:30:a3:51:df:fe:97:19:e1:be:ef:
         d4:93:01:bc:f7:df:4d:a1:30:6d:68:4b:f3:db:63:ad:7a:56:
         92:a1:33:50:d6:47:4c:20:ef:56:ab:28:f2:40:e5:5a:dd:e1:
         c3:50:53:e4:e0:ff:16:ae:c3:41:82:4e:bf:9f:8d:e2:a5:67:
         5a:d3:dd:aa:05:f4:d8:f9:d1:23:bb:f1:3d:f5:56:52:4f:16:
         44:68:f3:94:3d:e5:12:e6:34:85:46:36:e9:80:f8:2d:b0:74:
         d6:ca:88:b8:63:56:ab:b5:03:2f:79:45:ef:95:a2:7f:af:d8:
         f8:3b:bd:92:80:34:dd:c7:18:c4:e3:27:de:7c:56:4c:fe:41:
         06:23:73:be:b0:9f:04:4c:e9:9c:63:b9:1c:2b:b9:87:3f:24:
         bd:7c:57:5b:ac:18:4d:6c:b1:eb:c4:35:6a:3c:4b:65:71:40:
         36:07:45:23:eb:02:63:30:95:fe:ff:3c:8c:f7:bf:06:a7:dd:
         ef:54:bf:aa:e3:c2:d0:61:46:2d:c0:f4:f0:dc:09:b2:52:98:
         83:db:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----