Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/JzqIxXgWaYhQbhNkKtsS9jHgo8I.mft
File:                     JzqIxXgWaYhQbhNkKtsS9jHgo8I.mft (raw, json)
Hash identifier:          baQLoBcpPRFGokJp62t5VC9eNlVTXrgMa+7DxDFZb5Y=
Subject key identifier:   6B:FE:4B:C2:FD:F0:44:1E:89:16:FB:DD:69:C0:58:F2:F7:86:43:AA
Authority key identifier: 27:3A:88:C5:78:16:69:88:50:6E:13:64:2A:DB:12:F6:31:E0:A3:C2
Certificate issuer:       /CN=273a88c578166988506e13642adb12f631e0a3c2
Certificate serial:       01922FB55131B59FC53564EE35A1093252B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzqIxXgWaYhQbhNkKtsS9jHgo8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/JzqIxXgWaYhQbhNkKtsS9jHgo8I.mft
Manifest number:          07CD
Signing time:             Thu 26 Sep 2024 19:01:04 +0000
Manifest this update:     Thu 26 Sep 2024 19:01:04 +0000
Manifest next update:     Fri 27 Sep 2024 19:01:04 +0000
Files and hashes:         1: JzqIxXgWaYhQbhNkKtsS9jHgo8I.crl (hash: k6kO5lthplRK7QwnKDfrR4k1I3+iMmYlWtrY1/OE93I=)
                          2: _UuX_Ize67uv6hm3cpD7Znpn75Y.roa (hash: GwLOvZW9hDd3C91XgY84JoWU1rTPfsE4qit5bHzxQbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:b5:51:31:b5:9f:c5:35:64:ee:35:a1:09:32:52:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273a88c578166988506e13642adb12f631e0a3c2
        Validity
            Not Before: Sep 26 19:01:04 2024 GMT
            Not After : Sep 27 19:01:04 2024 GMT
        Subject: CN=6bfe4bc2fdf0441e8916fbdd69c058f2f78643aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:2c:f6:06:e4:dc:2f:79:5c:a3:48:bb:4e:
                    68:a7:45:94:87:93:ca:f1:f2:fb:f0:5e:90:ac:2c:
                    cd:a1:19:83:ea:69:a7:23:e1:0b:24:20:f9:c7:60:
                    bf:a0:53:1d:0b:24:bf:00:fd:71:51:bb:7e:a9:18:
                    c2:3c:fd:61:63:9e:5e:7e:75:61:b1:e8:d3:a6:82:
                    72:5d:09:43:87:1b:60:03:49:ca:dd:6d:c3:f5:fe:
                    05:9d:48:61:7c:81:bb:e4:8a:32:7c:52:78:53:7a:
                    7e:da:71:a0:b6:56:a5:fe:ae:a2:00:12:07:f9:e5:
                    6c:f5:84:82:56:09:18:d1:4b:2d:22:f6:8f:d0:c3:
                    34:e7:2e:1f:e7:32:9c:47:d4:b2:6a:3e:57:3c:64:
                    88:ff:72:cb:e6:8c:eb:0a:b3:8f:8b:24:a1:eb:b6:
                    23:81:f7:a8:2d:42:2e:dc:20:14:c4:cf:15:95:cf:
                    02:56:a2:77:51:c9:0c:f6:84:b7:b6:a9:19:ef:54:
                    00:a9:34:28:70:63:f4:0c:38:d0:02:85:8b:ea:11:
                    6c:bf:8c:92:f7:60:66:13:79:65:fb:3b:9a:75:78:
                    d0:80:a7:39:4d:47:c7:41:96:b0:f1:24:b7:f0:46:
                    8c:ac:a6:c3:34:61:07:c3:27:bc:bb:1f:95:5c:a0:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:4B:C2:FD:F0:44:1E:89:16:FB:DD:69:C0:58:F2:F7:86:43:AA
            X509v3 Authority Key Identifier:
                keyid:27:3A:88:C5:78:16:69:88:50:6E:13:64:2A:DB:12:F6:31:E0:A3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzqIxXgWaYhQbhNkKtsS9jHgo8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/JzqIxXgWaYhQbhNkKtsS9jHgo8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9b4b96-2bdd-4bf5-a022-ee7896e5cc95/1/JzqIxXgWaYhQbhNkKtsS9jHgo8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:40:b5:d3:f1:d5:8b:09:d1:32:e8:a6:be:46:8e:df:de:9b:
         f7:16:3d:31:9a:97:d4:c5:cb:49:43:8b:ee:3a:a2:b6:8f:a1:
         dc:14:c9:e1:86:26:fc:0a:12:ef:be:7a:15:59:a0:6d:a1:95:
         b0:fc:07:ec:6f:05:bd:43:4c:46:80:25:49:21:4f:4c:8f:2c:
         19:a0:37:3d:43:6a:82:ae:70:3c:ca:3a:d0:04:bb:d3:29:bc:
         e5:ea:1a:12:ff:26:f1:01:a7:ee:60:eb:e1:50:78:52:f2:85:
         90:68:6e:74:70:11:e2:c9:6a:a1:dd:2f:2e:84:d7:86:6a:36:
         76:7d:77:50:54:2a:ce:02:17:93:f2:b6:15:8c:25:92:00:07:
         26:75:55:c9:94:01:7d:9d:64:40:cb:c7:00:bd:df:97:f4:df:
         84:f6:d0:66:cb:11:aa:59:12:30:41:e6:bf:46:75:16:2c:54:
         b2:2e:67:2f:a8:f7:4b:21:29:e4:93:2f:04:43:92:79:30:24:
         36:2e:7b:d1:b5:60:42:aa:03:8e:a8:90:95:ad:4f:83:3d:6f:
         40:39:1d:1a:c4:81:94:f0:59:d5:93:69:80:4e:88:19:9f:7f:
         da:13:19:0e:e1:a8:42:86:63:cf:4f:e8:50:52:04:c9:62:e9:
         45:2f:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----