Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.mft
File:                     dOugEi9kOtygy8b2pGgbbXfpNiA.mft (raw, json)
Hash identifier:          V6a0bkUuTvUtBYTPL5UgliMBwWQJU/jDuEV1nN3PPDM=
Subject key identifier:   14:BE:61:A0:53:84:65:70:27:B9:F8:CA:67:21:11:DD:9E:49:FE:3F
Authority key identifier: 74:EB:A0:12:2F:64:3A:DC:A0:CB:C6:F6:A4:68:1B:6D:77:E9:36:20
Certificate issuer:       /CN=74eba0122f643adca0cbc6f6a4681b6d77e93620
Certificate serial:       01922F117CAA281133C9483C17C4396778CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOugEi9kOtygy8b2pGgbbXfpNiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.mft
Manifest number:          1205
Signing time:             Thu 26 Sep 2024 16:02:08 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:08 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:08 +0000
Files and hashes:         1: dOugEi9kOtygy8b2pGgbbXfpNiA.crl (hash: lk2UHQtUNVW9oz/Xfu7TrYZ4cH56DhOymnT1B9bLQbA=)
                          2: dvMKLrYFLe_opLs27-tHnSS5uMY.roa (hash: yciWulMPckuHZ2r7UNAHsTqgZgh8uZ4N9nsz1o4DNOQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:11:7c:aa:28:11:33:c9:48:3c:17:c4:39:67:78:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74eba0122f643adca0cbc6f6a4681b6d77e93620
        Validity
            Not Before: Sep 26 16:02:08 2024 GMT
            Not After : Sep 27 16:02:08 2024 GMT
        Subject: CN=14be61a05384657027b9f8ca672111dd9e49fe3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bd:6a:50:ae:c9:5b:3b:4a:bf:01:f8:21:86:
                    c0:8a:c8:ed:8d:d7:a7:b2:46:0c:76:8e:56:c2:85:
                    13:7a:b2:f6:32:70:ca:1a:bd:36:27:1f:ed:fa:21:
                    96:1f:52:83:70:73:25:1d:4e:11:f8:4f:ed:26:7b:
                    60:6f:e9:eb:e8:25:1b:c3:9e:62:05:b7:46:02:16:
                    65:ee:6b:73:5b:8e:12:81:17:6a:3a:22:36:c6:49:
                    05:74:69:23:0a:ef:6d:54:d5:18:e0:7c:65:71:e8:
                    44:31:08:83:d3:5b:7c:08:20:94:17:62:6d:c1:12:
                    26:9c:2b:0f:b9:de:06:08:6c:dd:25:41:6d:16:a4:
                    ae:40:0a:fc:d4:4b:d4:a6:5d:5b:d0:e8:3e:6d:53:
                    48:33:0f:67:2f:5f:06:37:d2:3e:fb:32:ff:cc:03:
                    e6:22:8c:64:56:87:89:a2:4a:69:8b:8a:ab:6a:f6:
                    2f:b5:d0:69:29:5b:57:a3:5f:db:9f:48:88:a9:6e:
                    bd:0e:d5:f4:e0:1d:df:21:05:cd:2c:1d:e0:37:3e:
                    2c:81:5a:e5:59:9c:30:66:6f:bd:0f:9c:c3:12:e0:
                    29:0d:7d:90:33:24:5c:3e:81:aa:42:96:37:6e:e9:
                    2b:7c:01:ee:c6:08:d1:d4:34:36:7c:6f:2b:23:d2:
                    1b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:61:A0:53:84:65:70:27:B9:F8:CA:67:21:11:DD:9E:49:FE:3F
            X509v3 Authority Key Identifier:
                keyid:74:EB:A0:12:2F:64:3A:DC:A0:CB:C6:F6:A4:68:1B:6D:77:E9:36:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOugEi9kOtygy8b2pGgbbXfpNiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b97693-1d02-40dc-9af7-a015168c3323/1/dOugEi9kOtygy8b2pGgbbXfpNiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:08:69:3e:b5:7e:da:35:45:f1:bb:1e:db:7b:60:8b:5e:82:
         b9:71:c4:a4:e6:d6:dd:d9:eb:0e:98:31:66:ef:0d:76:ea:a8:
         61:1a:fe:63:a6:a6:2d:72:65:78:28:8b:29:d7:f8:dd:c2:8f:
         79:00:a3:fe:dc:a7:bb:fc:3a:cf:74:64:d5:06:4e:70:03:bb:
         53:48:ea:f6:13:bf:23:82:76:49:53:0f:8d:31:04:92:2c:d7:
         15:5e:90:e7:50:ee:11:4f:5b:b3:2f:a2:81:35:82:0e:2b:95:
         84:ca:60:69:44:df:bc:5d:32:28:c0:41:18:e5:73:1b:f7:b4:
         d2:2c:73:89:f9:1c:a5:d8:5c:97:19:b0:e0:56:97:a6:58:40:
         e6:1e:89:29:a7:8f:64:73:c1:1f:62:7a:4e:09:34:57:a7:d2:
         82:e7:90:09:68:5c:af:3f:68:57:5b:50:81:2b:ad:14:4d:39:
         12:03:b2:ce:66:e4:28:0c:8e:44:7e:51:e4:73:a6:5e:74:86:
         71:16:d0:62:d5:09:15:48:7a:50:1f:d2:eb:fc:81:67:8f:fc:
         aa:53:80:2e:09:b0:61:d0:3c:9e:17:64:0f:38:73:e8:c2:2a:
         85:c9:40:b3:ec:cb:f8:95:d7:3f:e5:6b:45:e0:0c:78:3a:5a:
         02:ff:97:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvEXyqKBEzyUg8F8Q5Z3jKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZWJhMDEyMmY2NDNhZGNhMGNiYzZmNmE0NjgxYjZkNzdl
OTM2MjAwHhcNMjQwOTI2MTYwMjA4WhcNMjQwOTI3MTYwMjA4WjAzMTEwLwYDVQQD
EygxNGJlNjFhMDUzODQ2NTcwMjdiOWY4Y2E2NzIxMTFkZDllNDlmZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj71qUK7JWztKvwH4IYbAisjtjden
skYMdo5WwoUTerL2MnDKGr02Jx/t+iGWH1KDcHMlHU4R+E/tJntgb+nr6CUbw55i
BbdGAhZl7mtzW44SgRdqOiI2xkkFdGkjCu9tVNUY4HxlcehEMQiD01t8CCCUF2Jt
wRImnCsPud4GCGzdJUFtFqSuQAr81EvUpl1b0Og+bVNIMw9nL18GN9I++zL/zAPm
IoxkVoeJokppi4qravYvtdBpKVtXo1/bn0iIqW69DtX04B3fIQXNLB3gNz4sgVrl
WZwwZm+9D5zDEuApDX2QMyRcPoGqQpY3bukrfAHuxgjR1DQ2fG8rI9IbaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBS+YaBThGVwJ7n4ymchEd2eSf4/MB8GA1UdIwQY
MBaAFHTroBIvZDrcoMvG9qRoG2136TYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE91Z0VpOWtPdHlneThiMnBHZ2JiWGZwTmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iOTc2OTMtMWQwMi00MGRjLTlhZjct
YTAxNTE2OGMzMzIzLzEvZE91Z0VpOWtPdHlneThiMnBHZ2JiWGZwTmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iOTc2OTMtMWQwMi00MGRjLTlhZjctYTAxNTE2OGMzMzIz
LzEvZE91Z0VpOWtPdHlneThiMnBHZ2JiWGZwTmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtQhpPrV+
2jVF8bse23tgi16CuXHEpObW3dnrDpgxZu8NduqoYRr+Y6amLXJleCiLKdf43cKP
eQCj/tynu/w6z3Rk1QZOcAO7U0jq9hO/I4J2SVMPjTEEkizXFV6Q51DuEU9bsy+i
gTWCDiuVhMpgaUTfvF0yKMBBGOVzG/e00ixzifkcpdhclxmw4FaXplhA5h6JKaeP
ZHPBH2J6Tgk0V6fSgueQCWhcrz9oV1tQgSutFE05EgOyzmbkKAyORH5R5HOmXnSG
cRbQYtUJFUh6UB/S6/yBZ4/8qlOALgmwYdA8nhdkDzhz6MIqhclAs+zL+JXXP+Vr
ReAMeDpaAv+Xbg==
-----END CERTIFICATE-----