Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
File:                     9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft (raw, json)
Hash identifier:          nwmb33ws6CEL/nQoFoZotxpzJn04ecXBHSZBsk/YIXM=
Subject key identifier:   E4:B0:DE:21:D9:36:0D:75:8C:65:EB:4F:BD:A4:85:F1:4D:FF:6F:A9
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Certificate issuer:       /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial:       01934639E94C4418DC96BD8FB6020EC3C47D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
Manifest number:          0829
Signing time:             Tue 19 Nov 2024 21:00:20 +0000
Manifest this update:     Tue 19 Nov 2024 21:00:20 +0000
Manifest next update:     Wed 20 Nov 2024 21:00:20 +0000
Files and hashes:         1: 9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl (hash: Kjq856ciuYdlcTa2fTMaIbB7F03J668iACJQvaDyAFY=)
                          2: UkS8SUInkzgsqSzfJ181bF1GZME.roa (hash: 6vfQ7YliVT6CTDwHmHx/uDZzV3zdAmKUnuH1ENcvF+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:39:e9:4c:44:18:dc:96:bd:8f:b6:02:0e:c3:c4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
        Validity
            Not Before: Nov 19 21:00:20 2024 GMT
            Not After : Nov 20 21:00:20 2024 GMT
        Subject: CN=e4b0de21d9360d758c65eb4fbda485f14dff6fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:66:8b:f2:3c:f0:7c:69:0b:f1:61:c9:04:
                    3d:cc:14:bd:b0:1a:d7:39:f1:9e:a8:55:8e:d8:65:
                    fe:02:dd:1b:3b:1b:da:17:c1:76:4c:85:ce:c0:b2:
                    a0:70:fc:80:6c:a5:09:c5:1f:f0:55:ca:82:91:43:
                    18:eb:d9:16:3f:fc:e9:a6:d7:33:17:6b:32:90:2e:
                    7b:11:61:08:e0:2a:6d:31:dc:69:30:04:0f:fa:0b:
                    fa:11:4d:3e:4d:7b:b8:9f:17:a3:2f:a6:d2:de:07:
                    e8:e5:ec:f5:02:8b:66:f4:db:9b:64:f0:ef:b9:31:
                    4b:7d:95:b9:0a:8c:4f:4f:89:bf:90:b1:c3:cd:a9:
                    a7:0a:6e:8f:22:fe:0a:d0:44:e1:7c:30:4d:b3:2a:
                    12:3e:07:7a:c2:79:d1:f7:18:93:e1:f6:d0:eb:d3:
                    6f:a4:1e:5e:c6:c1:26:b1:86:20:1e:b4:23:a8:39:
                    0c:6c:be:57:13:01:01:82:44:bc:63:f6:48:4d:18:
                    19:ea:7e:fe:5c:05:d9:ad:d3:75:10:f0:a9:f6:86:
                    21:71:14:02:7c:0a:54:07:ce:df:e9:a7:a4:95:da:
                    87:49:cb:ff:21:81:fb:7a:85:dc:8f:ff:02:e7:67:
                    28:25:2e:28:dd:03:c8:13:5a:aa:90:34:0a:9f:75:
                    f6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B0:DE:21:D9:36:0D:75:8C:65:EB:4F:BD:A4:85:F1:4D:FF:6F:A9
            X509v3 Authority Key Identifier:
                keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:43:a5:1d:e5:ef:6c:31:f2:c8:60:1b:84:32:de:ae:7f:a8:
         5e:5f:5b:c5:78:15:c4:3c:33:cf:40:2d:e5:97:99:4c:56:06:
         65:cd:ef:18:ab:c9:f1:ea:c4:40:55:29:7f:a7:ef:de:5e:38:
         2a:97:fb:a3:bf:d2:3d:1f:f5:ea:c9:37:6f:d7:d4:c9:1b:9b:
         34:b5:67:53:90:55:39:ee:22:93:78:65:35:cc:5b:ff:bd:c8:
         a5:b4:90:68:61:15:ae:04:75:0d:d2:c0:2d:c7:fe:b8:aa:6f:
         ee:3f:cb:4f:31:4c:d0:41:fa:b9:a0:c7:65:59:f9:85:51:fc:
         3c:6f:b1:cf:9e:f1:4c:fe:ca:28:2c:4d:21:bd:26:fd:65:7b:
         9d:d6:33:7d:e5:33:31:7a:eb:05:5c:e1:5d:45:f9:b5:f4:e3:
         1f:78:0a:c0:d9:39:2a:91:1b:6e:46:7a:77:5e:2d:8f:32:c4:
         c0:22:42:52:79:a5:be:80:11:ab:a8:b1:6f:63:60:ec:ac:75:
         83:47:dc:9a:fe:03:24:56:d6:bf:1e:b0:21:71:00:f9:0d:f7:
         4b:24:82:91:ec:b7:6a:3a:0d:97:e1:f3:66:1b:22:8e:1f:73:
         67:5d:c7:8f:6d:71:e4:33:ac:ff:d6:ba:f8:24:76:e7:01:3a:
         23:8d:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----