Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.mft
File:                     j6cSg9iXNAnZYIAPb3_NyNOjCss.mft (raw, json)
Hash identifier:          We/fuQmOQli4dDVaTD7VcT9bPqN/qWDpkLoBCItz6mQ=
Subject key identifier:   09:8E:38:F5:8E:98:BB:0E:C8:DB:0F:E4:05:54:75:B0:9C:8C:0C:2A
Authority key identifier: 8F:A7:12:83:D8:97:34:09:D9:60:80:0F:6F:7F:CD:C8:D3:A3:0A:CB
Certificate issuer:       /CN=8fa71283d8973409d960800f6f7fcdc8d3a30acb
Certificate serial:       0193F9662644E31A9C9CF728C62192979FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6cSg9iXNAnZYIAPb3_NyNOjCss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.mft
Manifest number:          0EE0
Signing time:             Tue 24 Dec 2024 16:00:41 +0000
Manifest this update:     Tue 24 Dec 2024 16:00:41 +0000
Manifest next update:     Wed 25 Dec 2024 16:00:41 +0000
Files and hashes:         1: 3Ji6EsRbVhlzuRDCLI86xE597fY.roa (hash: Zmq7UubgavNvTfLTxu28W+/YjHF0IfKHoMEPtTLr7/w=)
                          2: j6cSg9iXNAnZYIAPb3_NyNOjCss.crl (hash: /W1F/xE8eO4yjanRBE0M+9DFbdAxBgT7tT6z08F6HIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:66:26:44:e3:1a:9c:9c:f7:28:c6:21:92:97:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa71283d8973409d960800f6f7fcdc8d3a30acb
        Validity
            Not Before: Dec 24 16:00:41 2024 GMT
            Not After : Dec 25 16:00:41 2024 GMT
        Subject: CN=098e38f58e98bb0ec8db0fe4055475b09c8c0c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:9f:f3:08:55:ed:1f:fb:24:3e:0f:f6:d6:
                    c7:69:a2:49:a5:f6:10:30:a0:60:f7:2f:a6:1d:0b:
                    c9:12:ab:42:68:15:06:aa:35:7d:59:92:bd:68:40:
                    e8:d3:e0:0e:29:72:4f:ba:7f:f9:62:fb:b2:12:45:
                    b1:97:64:af:f3:2e:51:9d:a3:dc:ce:87:70:cc:9d:
                    51:c3:87:1b:5e:be:8a:95:c7:9e:73:77:31:91:98:
                    4e:a3:c7:ee:00:8e:6a:7a:ea:97:da:dd:c4:20:94:
                    d0:90:7d:42:06:46:12:65:cf:cd:d7:8c:29:90:de:
                    43:1a:fd:6f:c4:50:6b:0a:fe:ca:82:92:2b:a2:b4:
                    8f:7c:41:aa:b6:9b:d9:f2:2b:3a:6f:52:fe:18:18:
                    12:d5:7d:4c:ed:44:3c:6b:f8:45:71:4c:3d:e6:50:
                    50:f7:ae:25:5b:35:e8:44:22:bd:62:80:f7:65:c6:
                    a8:9c:f2:fc:cf:fd:cb:97:77:70:63:d4:a9:7a:04:
                    96:23:7f:56:0a:56:9b:0b:95:03:7c:a7:62:f3:6d:
                    27:41:f0:d0:80:b5:15:3c:46:93:3e:45:13:b7:bb:
                    38:bd:0f:24:db:41:3e:29:7f:33:e0:ff:84:d7:30:
                    3d:a0:a8:ab:f5:36:fc:f2:4b:52:37:d3:dc:1a:b5:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8E:38:F5:8E:98:BB:0E:C8:DB:0F:E4:05:54:75:B0:9C:8C:0C:2A
            X509v3 Authority Key Identifier:
                keyid:8F:A7:12:83:D8:97:34:09:D9:60:80:0F:6F:7F:CD:C8:D3:A3:0A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6cSg9iXNAnZYIAPb3_NyNOjCss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b66121-7d8f-48d7-a093-c603cf2f7412/1/j6cSg9iXNAnZYIAPb3_NyNOjCss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:4f:71:3b:f1:e8:53:a5:1e:7d:c5:f9:35:67:0e:45:04:
         a0:63:87:f8:64:84:43:0d:59:0b:1e:ce:f9:6b:00:25:11:98:
         8f:4a:19:6e:cf:44:1c:fb:53:a5:6b:a6:a3:94:6e:c4:b6:43:
         2b:db:25:de:8a:c4:6b:93:3b:9a:31:a7:05:bf:2f:b4:54:74:
         b8:29:bd:18:a0:15:30:73:b2:d9:48:73:7f:25:5e:d3:98:b1:
         77:62:19:e3:aa:81:c6:06:c9:26:f7:ae:44:be:24:4e:66:a9:
         2a:61:49:e5:16:bc:fb:9a:83:73:61:d7:05:a3:81:cb:37:f4:
         03:1c:e7:17:e2:12:a1:f0:b1:73:34:15:c1:1b:5b:8a:9a:dc:
         d6:f4:6c:6d:1d:5f:9f:e8:0b:bc:a3:d0:73:8f:9b:a1:bf:14:
         6e:5c:a4:37:ce:29:85:44:c5:a5:07:48:ba:2f:f6:d3:2e:a6:
         2b:ec:42:de:f5:46:c8:12:e6:1c:88:49:22:f0:cf:5f:89:64:
         4f:44:b7:07:b4:8b:ca:03:7d:31:17:a8:59:4e:ca:44:95:47:
         ee:96:39:e7:f4:08:b4:a5:d3:16:f7:82:9f:40:2b:f9:0e:57:
         8e:3f:28:61:3d:25:de:69:b0:c7:4d:49:b2:94:e1:b6:cc:1f:
         c4:e4:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----