Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a3d6b2-7f95-4043-8a20-fc230d8f0992/1/PcU6TJkizPNmWXO4d7fRFk_fhUc.mft
File:                     PcU6TJkizPNmWXO4d7fRFk_fhUc.mft (raw, json)
Hash identifier:          w9U/jT1bdoRIfaMNw5b5xruDcXMQ0K7MAI/lTxZ9d7M=
Subject key identifier:   4B:4E:69:7A:4C:30:19:9E:5E:5B:5A:1D:2C:68:3B:45:87:D4:08:08
Authority key identifier: 3D:C5:3A:4C:99:22:CC:F3:66:59:73:B8:77:B7:D1:16:4F:DF:85:47
Certificate issuer:       /CN=3dc53a4c9922ccf3665973b877b7d1164fdf8547
Certificate serial:       0193F3D2510029408BE07130F7E1B812F7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcU6TJkizPNmWXO4d7fRFk_fhUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a3d6b2-7f95-4043-8a20-fc230d8f0992/1/PcU6TJkizPNmWXO4d7fRFk_fhUc.mft
Manifest number:          03
Signing time:             Mon 23 Dec 2024 14:01:06 +0000
Manifest this update:     Mon 23 Dec 2024 14:01:06 +0000
Manifest next update:     Tue 24 Dec 2024 14:01:06 +0000
Files and hashes:         1: PcU6TJkizPNmWXO4d7fRFk_fhUc.crl (hash: wu9JK38ypjMykFuSXoX/6IycY2mVogfuLglovVo7Dho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f3:d2:51:00:29:40:8b:e0:71:30:f7:e1:b8:12:f7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc53a4c9922ccf3665973b877b7d1164fdf8547
        Validity
            Not Before: Dec 23 14:01:06 2024 GMT
            Not After : Dec 24 14:01:06 2024 GMT
        Subject: CN=4b4e697a4c30199e5e5b5a1d2c683b4587d40808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:14:51:8b:a7:11:99:ba:27:d9:be:78:bd:
                    19:5b:e2:89:da:ad:ca:f9:57:2e:fc:79:a3:43:d5:
                    63:70:ba:fc:18:cd:4b:2d:3c:16:07:a2:cd:80:28:
                    31:25:66:48:c1:47:96:f2:16:26:a0:0d:79:50:ed:
                    c5:ca:a2:27:8d:f2:4d:57:47:83:2f:90:1b:f5:2f:
                    ce:eb:70:fe:bd:25:11:7c:1b:fc:71:8f:a2:a7:80:
                    9e:aa:0d:33:28:99:8a:42:5b:6b:a7:fc:7d:14:03:
                    af:69:08:df:f8:8f:9d:a4:03:f2:7e:47:6f:ae:72:
                    81:ab:bc:14:80:4e:f8:e6:27:59:ed:33:92:bc:93:
                    b7:b4:bd:e4:ac:ab:f7:78:35:09:db:38:a2:82:a6:
                    5c:4b:e7:bd:9e:16:ca:64:64:c8:0b:63:58:7d:33:
                    b9:58:4b:d0:62:6a:00:09:bd:b7:a2:97:64:59:76:
                    24:cb:4c:01:bb:ae:71:f4:83:7b:6c:a2:09:f1:d2:
                    51:69:71:1d:5b:2d:0b:8d:38:aa:79:ce:6b:41:a0:
                    ff:c7:9a:17:f2:c4:ff:7c:e1:58:d3:21:0a:5c:93:
                    6f:d3:64:ed:a1:25:5a:8d:c2:93:2c:2e:fe:c9:2e:
                    f1:00:86:e8:de:db:18:47:47:ad:0d:7c:bf:ea:c2:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4E:69:7A:4C:30:19:9E:5E:5B:5A:1D:2C:68:3B:45:87:D4:08:08
            X509v3 Authority Key Identifier:
                keyid:3D:C5:3A:4C:99:22:CC:F3:66:59:73:B8:77:B7:D1:16:4F:DF:85:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcU6TJkizPNmWXO4d7fRFk_fhUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a3d6b2-7f95-4043-8a20-fc230d8f0992/1/PcU6TJkizPNmWXO4d7fRFk_fhUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a3d6b2-7f95-4043-8a20-fc230d8f0992/1/PcU6TJkizPNmWXO4d7fRFk_fhUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:18:0b:ff:b6:68:2f:4d:e0:98:87:0d:6f:46:d9:45:0e:de:
         0e:59:e1:07:99:8c:ac:c6:eb:3a:0b:29:1d:f6:53:b7:c2:ff:
         79:f2:10:4b:ea:b6:43:64:92:f4:69:d3:9e:a0:44:c0:89:3a:
         bf:d8:b0:52:25:fa:ab:a4:24:bf:28:d9:ab:d2:10:a1:a7:aa:
         84:15:71:5d:9b:a0:59:cf:1a:34:56:f4:b8:68:f5:ab:c2:91:
         4a:1a:1b:d8:9c:2c:02:4e:1a:82:1e:e1:3e:2e:4a:99:f5:c6:
         1a:19:12:1f:94:77:28:57:74:1f:42:a4:86:35:cb:16:e7:80:
         f7:de:ea:21:bd:68:80:20:44:a3:72:1b:da:c6:b5:c1:ed:f4:
         3c:ec:2d:21:dc:8d:0d:02:1e:e9:14:3e:73:31:7a:23:f7:d0:
         f6:85:d5:8c:12:96:8e:af:66:3e:ba:46:42:00:80:a5:73:18:
         5e:95:fb:57:dd:ed:f8:00:67:22:df:01:07:d5:94:e0:6d:e3:
         83:5f:28:d7:d4:a5:25:97:a5:10:71:31:36:c1:a7:41:ab:85:
         4b:c6:e2:38:2f:28:92:ae:09:37:26:fc:e4:cc:53:50:49:b6:
         52:b9:fb:77:92:ad:94:7c:e2:92:3b:2c:f5:b7:f3:a4:be:43:
         1a:55:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----