Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.mft
File:                     DgaFhoMo7WtZ_bgAhVt1jX6CVhI.mft (raw, json)
Hash identifier:          aefFkOz5k9XOsyW9mDIDoZTaTVtECnba9/xDof5ixjE=
Subject key identifier:   C6:D4:3B:C9:F3:2B:69:BE:2A:C4:79:B1:A5:9B:F0:2D:F5:A8:14:F8
Authority key identifier: 0E:06:85:86:83:28:ED:6B:59:FD:B8:00:85:5B:75:8D:7E:82:56:12
Certificate issuer:       /CN=0e0685868328ed6b59fdb800855b758d7e825612
Certificate serial:       018F96BD369D95BB3DD1C25066896A1D6571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.mft
Manifest number:          0A45
Signing time:             Mon 20 May 2024 16:02:13 +0000
Manifest this update:     Mon 20 May 2024 16:02:13 +0000
Manifest next update:     Tue 21 May 2024 16:02:13 +0000
Files and hashes:         1: DgaFhoMo7WtZ_bgAhVt1jX6CVhI.crl (hash: yZ+7ZFR8cckYZiVYgfcZ8OuLFtJRGzn/wMR4fHam6hE=)
                          2: K_H98QVaInXkYpFD98LSzkBpQBY.roa (hash: lsOWxa/MEVPJgeAkSCYo6nHjSQ6WW0OA/Nv9zGw2Wug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:96:bd:36:9d:95:bb:3d:d1:c2:50:66:89:6a:1d:65:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0685868328ed6b59fdb800855b758d7e825612
        Validity
            Not Before: May 20 16:02:13 2024 GMT
            Not After : May 21 16:02:13 2024 GMT
        Subject: CN=c6d43bc9f32b69be2ac479b1a59bf02df5a814f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:c6:a7:61:63:97:f4:43:cc:d1:07:03:73:
                    78:e0:9f:6b:af:51:34:4c:b0:6c:dc:26:8e:df:6a:
                    65:08:41:8c:f8:56:f0:fa:5e:04:ac:a5:f1:8d:12:
                    a1:8e:a6:b2:15:1a:68:6c:7b:0e:b2:a1:71:ac:15:
                    a7:b7:dd:dd:8c:2a:38:09:09:ef:d9:19:7c:b6:bf:
                    d7:83:04:69:64:da:83:71:40:55:68:b5:4e:6f:69:
                    dd:74:e0:ee:50:29:84:37:e8:b9:ec:c7:12:fd:f8:
                    07:0b:8a:0c:ef:d5:1e:5f:86:7f:89:2e:72:ec:77:
                    34:66:ab:85:70:40:82:d5:d3:4e:bc:62:dc:3e:73:
                    99:1a:68:f9:fd:79:36:93:01:0a:81:b4:1a:6b:f1:
                    3d:77:b1:21:f6:ae:ee:3f:5e:19:3c:03:f6:2d:d1:
                    bf:f7:fc:91:b3:fe:ea:b3:12:c6:8c:16:b5:32:d0:
                    07:1e:25:98:77:7e:87:16:87:ce:02:37:b3:f0:e8:
                    d9:0e:95:d5:2b:06:cf:1b:68:05:8e:01:fd:6f:d7:
                    10:7d:fa:91:8b:25:cb:fe:02:45:ef:1f:b5:04:35:
                    d2:a4:5d:9a:62:63:25:bf:76:f3:e5:01:d8:8f:5f:
                    eb:2d:08:c6:f0:00:09:bd:79:e8:d2:23:71:92:60:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D4:3B:C9:F3:2B:69:BE:2A:C4:79:B1:A5:9B:F0:2D:F5:A8:14:F8
            X509v3 Authority Key Identifier:
                keyid:0E:06:85:86:83:28:ED:6B:59:FD:B8:00:85:5B:75:8D:7E:82:56:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bccf75-c9dd-4cdd-9c12-b66164c7c9c0/1/DgaFhoMo7WtZ_bgAhVt1jX6CVhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:bb:ce:16:f8:ee:91:71:1b:fe:b3:a2:da:bb:c6:55:82:8c:
         2d:de:55:bd:6c:f5:b7:b3:15:bf:7d:e7:d5:54:4e:5c:5a:89:
         e8:26:4f:86:08:da:85:af:01:33:d4:3a:7d:1d:dc:f2:6e:31:
         a2:23:f4:a3:f2:16:e7:b2:3f:60:ab:75:b9:00:47:79:77:bc:
         78:36:ff:bd:f1:9c:80:37:87:8a:64:e0:60:a1:76:43:a1:2b:
         ac:1d:f7:ed:71:ad:9e:4f:fa:6b:ec:73:26:37:ab:05:90:10:
         68:d4:6e:86:49:db:e8:49:ed:1a:4a:c7:2e:af:5c:0c:98:8d:
         32:73:c3:bc:8a:79:52:2a:d6:90:89:86:af:3f:3c:4b:3e:01:
         2f:e6:69:9b:67:68:33:24:fc:97:56:09:79:21:0d:cb:25:20:
         db:fd:d5:c3:07:9e:7e:77:b8:6d:e8:42:24:4a:d2:08:6e:ea:
         02:8b:5d:69:32:6e:e6:a9:58:ca:64:80:db:c4:fa:4e:e3:28:
         5e:c8:b6:16:31:e1:c9:90:fa:53:27:f5:f8:5a:6d:da:16:54:
         06:2e:e4:4c:98:07:f6:3f:ed:c8:a9:29:0f:7f:9b:e2:9a:fa:
         d8:81:e5:6c:3a:4c:2e:e1:a4:ef:e0:1e:c5:25:d3:39:34:5f:
         bf:fb:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----