Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.mft
File:                     6ir2zyJg7hm3oCo5Ij_E4i6aYq4.mft (raw, json)
Hash identifier:          vEWJGhKrxOd3oq8t2+qKyH4gSkisU5KwNvodAEhMwf4=
Subject key identifier:   28:5A:EA:C3:A2:10:AA:10:A4:EE:55:3F:FA:81:82:36:BC:70:6C:F7
Authority key identifier: EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE
Certificate issuer:       /CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
Certificate serial:       018CEDAB651EEE017274C68F7C138A933C63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.mft
Manifest number:          0812
Signing time:             Tue 09 Jan 2024 10:01:21 +0000
Manifest this update:     Tue 09 Jan 2024 10:01:21 +0000
Manifest next update:     Wed 10 Jan 2024 10:01:21 +0000
Files and hashes:         1: 6ir2zyJg7hm3oCo5Ij_E4i6aYq4.crl (hash: /m7RLZ64ICLChV2k71hVRTx11+MNLp/mun5Y+3r1NtQ=)
                          2: zRq1AsKz6guKDH8M_O8JK4YJ0Wk.roa (hash: P0kGpfGmctElcabCmea6dywJDPySZ58B39fy6Zb6vOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:ab:65:1e:ee:01:72:74:c6:8f:7c:13:8a:93:3c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2af6cf2260ee19b7a02a39223fc4e22e9a62ae
        Validity
            Not Before: Jan  9 10:01:21 2024 GMT
            Not After : Jan 10 10:01:21 2024 GMT
        Subject: CN=285aeac3a210aa10a4ee553ffa818236bc706cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:6d:86:05:a5:22:9b:84:7a:6e:ff:f5:10:
                    5b:6a:b1:fc:3f:ce:42:ec:72:07:20:fe:24:d2:47:
                    23:50:25:2e:83:64:3b:22:5b:d5:45:80:05:6c:f4:
                    ae:c6:a7:ab:10:bc:72:ee:90:46:90:20:f0:ed:93:
                    02:1f:86:ef:15:a8:0e:62:c1:1c:32:41:7d:8d:09:
                    23:dd:ea:96:2e:c3:7d:1b:93:8e:d5:55:e8:c6:cf:
                    04:6f:b7:bb:72:46:2e:6d:9c:69:0f:d1:38:4c:b4:
                    0e:20:3c:7d:d0:4a:ef:68:74:5f:c1:94:be:1f:f0:
                    d8:33:de:24:fb:b4:a3:6e:aa:e9:d0:f2:b5:c3:8f:
                    ca:ee:10:dc:78:6d:eb:93:e5:f7:c5:cb:f3:aa:e3:
                    45:ce:9a:6c:eb:33:c1:10:08:49:8f:32:42:7e:da:
                    40:f4:4c:c3:2d:8a:32:30:24:88:67:48:df:c3:f9:
                    38:ce:05:0e:e2:17:17:97:b7:d0:de:82:56:88:47:
                    5d:52:f2:1b:d7:1c:fa:49:ac:21:62:7b:13:c4:6c:
                    e9:a1:66:62:06:38:62:dd:b2:dc:15:f3:92:0c:bb:
                    05:04:29:f7:f5:d4:52:b2:d2:39:9c:dc:b2:e8:74:
                    1c:87:37:7a:e9:23:0b:b0:0b:5c:2b:dd:19:18:0e:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:EA:C3:A2:10:AA:10:A4:EE:55:3F:FA:81:82:36:BC:70:6C:F7
            X509v3 Authority Key Identifier:
                keyid:EA:2A:F6:CF:22:60:EE:19:B7:A0:2A:39:22:3F:C4:E2:2E:9A:62:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9db3e5-1972-4c8d-8c4e-4a8f824972ce/1/6ir2zyJg7hm3oCo5Ij_E4i6aYq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:54:b2:be:a7:aa:1d:f6:24:b1:ff:14:c3:7b:b0:48:8e:
         df:20:e7:b0:80:41:cc:e2:1d:c5:df:5c:b9:43:8a:f0:2c:0b:
         16:46:d8:38:99:27:8d:32:2e:32:47:44:a1:4f:85:8e:20:8d:
         14:c4:50:aa:fe:30:c1:8a:d8:ab:bc:ea:74:36:9a:67:22:02:
         06:84:48:26:6b:1a:c5:38:db:0f:10:76:09:90:5f:a0:0a:54:
         fd:20:72:a1:87:47:8f:cd:af:79:46:cc:1c:bc:32:75:86:d0:
         b4:a8:83:d8:ac:a7:57:0d:8f:82:79:9d:e8:eb:a2:c3:58:c4:
         06:92:13:f3:f4:73:1e:eb:02:33:ef:45:8f:34:ca:b2:20:3f:
         9a:03:29:d2:d1:24:c6:4d:d7:00:1a:69:c0:2b:27:59:47:41:
         c6:05:24:7a:ea:fa:a5:38:6b:b2:10:5a:a1:5b:15:f2:e9:18:
         26:6e:32:dd:21:01:97:c4:92:37:1f:8f:c8:10:b3:2d:2d:77:
         74:f4:4d:7e:8b:82:b1:93:cc:ee:ae:8c:7a:65:20:b8:93:cb:
         d8:e3:be:e0:ca:96:ae:32:e0:33:fd:66:8c:cd:9f:e7:3c:d6:
         df:12:ed:48:a4:ab:f9:cd:1e:02:ef:f0:79:6c:8e:ae:59:67:
         d0:ce:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----