Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.mft
File:                     w6uPRPw1YJa45lb8hzmHHsANHxI.mft (raw, json)
Hash identifier:          Mf5Xtq0s18RnI6J+c5Wdw9n27NarUlUW56R+qVGqEeE=
Subject key identifier:   F0:26:F7:0F:22:D2:F6:DA:AD:19:84:44:74:9C:65:62:CA:4F:24:3E
Authority key identifier: C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12
Certificate issuer:       /CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
Certificate serial:       01923022F5379AC8B4D7AA4A7FADB997FB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.mft
Manifest number:          12DC
Signing time:             Thu 26 Sep 2024 21:00:50 +0000
Manifest this update:     Thu 26 Sep 2024 21:00:50 +0000
Manifest next update:     Fri 27 Sep 2024 21:00:50 +0000
Files and hashes:         1: 611d7KgXNViEupdO82UfpdfdojU.roa (hash: /EHotzEw4BQge++tkX7qsATwiIaJkVWRKd28NO5aAg8=)
                          2: 9RsHYiEhmB9xa1oq3TRvIljK-Bs.roa (hash: vBN0a3hF8GzM+F36dvyzjgJHeZJZqVeyOJY7T3I0aR8=)
                          3: 9wBBpSen88iAztLXe2iXtXRk3zA.roa (hash: mhoZBa/+NtxXGURL/B8o0mpcaxs5E4ChfiWyLLqsxNA=)
                          4: KYYCuSW-m4yswDJtjCfgH-WT1gA.roa (hash: JZpY6mk1BITxmaPc9UcbZfzjq0c74hazhbixerrDl7k=)
                          5: M5Obk9gFoZSu1l7_1VpHK4cE7Aw.roa (hash: afT4e+ISfMgpDRntADTapn4Ce5J5Tb8thd3YmM1TKZY=)
                          6: pyS4qSkM3CT79QWHmZCdRTjkNRo.roa (hash: T5RIva8TdAhgGxcfqtiecDr+vYaCYQaH9bzN6L1hrds=)
                          7: w6uPRPw1YJa45lb8hzmHHsANHxI.crl (hash: ltbw+R/nqkX4+D1iGzoMAhg1zZHCf1TdQgltR3w3NTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:22:f5:37:9a:c8:b4:d7:aa:4a:7f:ad:b9:97:fb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ab8f44fc356096b8e656fc8739871ec00d1f12
        Validity
            Not Before: Sep 26 21:00:50 2024 GMT
            Not After : Sep 27 21:00:50 2024 GMT
        Subject: CN=f026f70f22d2f6daad198444749c6562ca4f243e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:03:1d:14:66:be:87:93:6e:ce:4a:91:32:5e:
                    d0:cf:99:e2:ff:53:0d:da:aa:7c:8e:95:6c:4e:68:
                    9d:5f:d0:f4:6c:39:97:2c:e4:e7:d0:6f:e6:1f:14:
                    c4:4d:95:05:29:8a:4f:b2:e4:a8:26:81:94:7f:72:
                    7f:bd:9b:2d:1a:61:71:1e:b2:71:27:d2:bb:b7:85:
                    17:15:21:a2:c5:20:08:65:4b:80:ff:13:c1:be:3c:
                    df:c6:c8:33:f1:a5:ca:83:2a:a2:2b:7d:c1:7b:fd:
                    c6:29:88:b0:de:24:c4:cc:a3:dc:ae:15:97:e8:6a:
                    98:93:d6:92:55:68:43:5d:b5:2f:37:57:ed:ce:28:
                    ec:15:ff:da:fa:ed:c0:97:bf:97:7b:9a:4b:25:84:
                    11:28:61:a1:00:e4:a9:ef:35:97:3d:fa:bd:10:60:
                    95:e4:d6:bc:7e:35:b1:bd:f4:4e:f4:55:ea:68:f7:
                    90:48:66:48:9d:fc:6c:99:fd:bc:59:8e:e2:1d:b2:
                    58:ac:ca:9b:9a:da:8a:a9:1f:34:ca:87:d6:d5:7e:
                    65:34:86:59:9f:01:68:e1:b2:7d:03:2e:f5:da:d1:
                    6f:91:09:06:d3:ff:56:11:92:ab:ad:ef:02:6c:03:
                    9f:b1:96:42:53:a0:af:fe:6c:fa:e2:f8:7e:67:37:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:26:F7:0F:22:D2:F6:DA:AD:19:84:44:74:9C:65:62:CA:4F:24:3E
            X509v3 Authority Key Identifier:
                keyid:C3:AB:8F:44:FC:35:60:96:B8:E6:56:FC:87:39:87:1E:C0:0D:1F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6uPRPw1YJa45lb8hzmHHsANHxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6e74e6-2603-4711-ace1-75ae1e6d9c31/1/w6uPRPw1YJa45lb8hzmHHsANHxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:f7:ea:8f:aa:1a:0a:ed:e2:aa:d1:06:ef:03:31:6f:2a:
         be:72:28:99:bd:30:79:16:d2:60:02:e3:29:09:58:81:e3:aa:
         1b:03:77:9e:67:45:7d:33:eb:03:86:1f:70:e3:e6:ce:9b:9a:
         92:39:9a:9b:07:e5:43:66:7c:52:f5:19:a8:22:73:e5:15:de:
         65:10:ae:c7:22:a8:e0:06:fb:a0:4a:1c:e3:23:8e:bc:a4:89:
         7c:d8:55:20:47:77:09:2e:9a:a0:b0:38:73:39:36:a0:15:aa:
         21:a7:34:aa:4c:f8:ae:99:c9:3d:46:1f:2e:b4:96:89:06:33:
         9d:80:a0:e9:5b:55:30:5f:21:c9:2f:be:7a:65:14:4c:ab:7a:
         10:e8:94:c5:e0:50:36:9d:3c:74:36:c1:97:8c:b7:1d:16:6c:
         5e:ec:2f:c7:29:1c:99:44:25:aa:32:55:7d:e0:0d:6d:4d:85:
         00:fd:e4:3d:94:ad:c7:60:12:50:2c:57:f3:5e:fd:cc:32:7a:
         f6:6f:50:ad:f9:eb:a1:61:6e:b7:6a:f8:a1:79:89:96:74:50:
         82:cd:64:27:05:28:a1:58:2f:1e:24:44:46:19:ba:a3:3b:5f:
         86:df:90:b6:03:6c:19:37:65:ee:51:33:bf:4c:89:8a:a6:0b:
         d6:e7:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----