Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
File:                     FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft (raw, json)
Hash identifier:          /6ELvR5YAQaHSK0n7Jp3qCCTHqODqd85O2j9MpjCpko=
Subject key identifier:   25:2B:44:CF:9C:C3:CD:FD:BC:C2:70:FE:03:96:10:A7:A0:07:84:83
Authority key identifier: 14:47:0D:33:88:72:EF:1F:1E:5F:E4:FC:E6:E3:F6:83:26:7A:21:F7
Certificate issuer:       /CN=14470d338872ef1f1e5fe4fce6e3f683267a21f7
Certificate serial:       0191580F4A6F3E3A57C9871A9A93823947B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
Manifest number:          056D
Signing time:             Thu 15 Aug 2024 22:01:22 +0000
Manifest this update:     Thu 15 Aug 2024 22:01:22 +0000
Manifest next update:     Fri 16 Aug 2024 22:01:22 +0000
Files and hashes:         1: FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl (hash: 8YhPUz0It2+Skp8bkcRMsLrhHdnigxQmMFqL3w3Gyf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:58:0f:4a:6f:3e:3a:57:c9:87:1a:9a:93:82:39:47:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14470d338872ef1f1e5fe4fce6e3f683267a21f7
        Validity
            Not Before: Aug 15 22:01:22 2024 GMT
            Not After : Aug 16 22:01:22 2024 GMT
        Subject: CN=252b44cf9cc3cdfdbcc270fe039610a7a0078483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6f:44:96:c2:2d:11:37:cf:4b:da:e0:2f:c9:
                    2d:3c:0a:8c:09:39:be:81:ab:c7:60:45:8e:ae:e7:
                    66:14:43:4f:50:db:87:ef:d1:78:bc:04:37:3a:cf:
                    1e:05:aa:ac:1a:2e:bc:fa:82:0a:88:c1:63:96:66:
                    fe:ec:00:13:c8:51:ba:e4:bb:38:e5:7f:93:02:11:
                    31:68:9a:b1:e9:1c:34:6e:30:01:8a:56:0a:91:95:
                    75:f6:ab:21:dd:58:0e:45:3b:9f:a6:57:e9:48:94:
                    8c:54:1b:64:20:6b:42:80:ca:5f:02:49:b1:52:02:
                    0a:0d:23:0f:9e:6c:03:0a:0a:e2:bd:3d:45:02:91:
                    9e:ca:56:95:99:e6:2e:07:b3:68:3c:34:5e:2d:35:
                    49:d0:08:02:0c:2a:77:c2:5f:b2:36:a9:47:65:a7:
                    1e:fb:47:0f:66:dc:18:cf:23:3d:99:07:24:05:3b:
                    13:4e:a9:a6:80:45:98:49:d4:38:df:74:bf:28:d3:
                    d5:4c:e4:c1:07:44:bd:82:42:75:2a:fa:da:0c:1a:
                    f9:0d:15:0d:3d:53:ad:fd:b3:2f:af:6c:7b:8d:11:
                    c0:99:8b:9f:ee:bb:27:e7:3c:b7:41:f0:fc:80:84:
                    43:9c:c1:97:9d:7a:97:ff:bc:83:ab:fa:00:fd:cc:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2B:44:CF:9C:C3:CD:FD:BC:C2:70:FE:03:96:10:A7:A0:07:84:83
            X509v3 Authority Key Identifier:
                keyid:14:47:0D:33:88:72:EF:1F:1E:5F:E4:FC:E6:E3:F6:83:26:7A:21:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:16:6a:30:ac:ab:df:75:77:5e:8c:03:4f:04:a6:00:f8:f5:
         53:7e:54:0b:e4:82:1f:e4:85:a2:01:7a:4f:60:5f:a6:45:a4:
         c9:6f:62:0d:d4:32:34:5f:18:29:d2:c6:c0:93:62:ef:40:ad:
         fc:24:9b:f0:23:1c:e5:0e:69:8b:98:83:0d:bb:bc:dc:3b:e8:
         16:66:ff:b1:b1:84:94:3f:b2:f6:64:20:f7:07:ef:75:ca:0f:
         c2:6a:20:9c:34:34:4b:d4:9a:90:b5:d1:db:ce:fb:b7:9b:3d:
         9c:6c:c2:a3:3f:2f:da:71:6a:fd:fb:d6:b7:dd:41:87:36:ba:
         3e:2d:c3:b5:b9:55:8c:de:e1:72:f4:d5:74:ca:bb:ad:70:75:
         27:f8:5f:35:dd:6c:4d:0e:11:fe:02:98:fc:25:04:47:0f:bb:
         4e:c8:3c:01:f2:55:b2:2f:3e:cd:ca:0d:76:77:56:a9:78:57:
         e8:52:5f:a7:22:8e:ac:33:da:df:e1:d1:62:85:4f:af:64:bc:
         10:ed:7e:5e:ca:e7:90:3e:d0:b8:ad:57:c6:96:85:94:d4:57:
         3d:60:a4:da:93:f3:62:e7:28:74:75:20:f6:72:06:58:dd:56:
         64:52:0d:30:8b:5e:7f:85:dc:05:a3:8c:49:75:7d:d0:1b:84:
         8f:10:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----