Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/g7ky0jXyELk5XWhJF10vcs6r1wk.mft
File:                     g7ky0jXyELk5XWhJF10vcs6r1wk.mft (raw, json)
Hash identifier:          lmy7vlXG9ahbjrK3PNYJRnBiIEWBKGGzSOEg2KNJN90=
Subject key identifier:   22:D6:8B:A0:28:22:1E:86:B1:15:59:60:F9:66:2E:22:AE:44:DE:07
Authority key identifier: 83:B9:32:D2:35:F2:10:B9:39:5D:68:49:17:5D:2F:72:CE:AB:D7:09
Certificate issuer:       /CN=83b932d235f210b9395d6849175d2f72ceabd709
Certificate serial:       01922F11AB848F8E9E6F936C3EFBC62D4067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7ky0jXyELk5XWhJF10vcs6r1wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/g7ky0jXyELk5XWhJF10vcs6r1wk.mft
Manifest number:          1012
Signing time:             Thu 26 Sep 2024 16:02:19 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:19 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:19 +0000
Files and hashes:         1: Fm2tsz-bcEL6lOKcI_3wX-MHq5s.roa (hash: OULW3oLbZHfQht03cyS9FMM/GnAWEv9g1nKoBL01r6Y=)
                          2: g7ky0jXyELk5XWhJF10vcs6r1wk.crl (hash: LIFKyFkgez/P6B7qL30iKiDcQ41UK57jMddIh92LXE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:11:ab:84:8f:8e:9e:6f:93:6c:3e:fb:c6:2d:40:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b932d235f210b9395d6849175d2f72ceabd709
        Validity
            Not Before: Sep 26 16:02:19 2024 GMT
            Not After : Sep 27 16:02:19 2024 GMT
        Subject: CN=22d68ba028221e86b1155960f9662e22ae44de07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:29:f1:a7:3e:dc:a1:60:c2:5f:24:8c:ee:6a:
                    65:99:4f:a8:09:96:e6:03:7f:b1:7d:8b:49:c4:ac:
                    de:93:50:ce:e2:02:74:ad:f6:b4:66:5b:76:ae:83:
                    dc:96:d9:df:bc:d6:b8:67:4d:60:b8:2a:4c:86:97:
                    62:f5:c7:65:69:14:52:3d:2b:30:c0:93:17:66:fa:
                    09:3b:a3:d6:5e:c6:51:a0:58:e9:5f:35:c3:fc:dc:
                    a5:cc:46:88:76:00:5b:67:8e:40:59:18:5c:eb:73:
                    24:2f:88:b3:95:27:2b:12:32:cd:45:b4:79:7b:ba:
                    15:b3:fa:eb:5a:be:74:bc:b1:ee:1a:48:9a:27:34:
                    bd:9a:13:24:8d:a3:94:c2:30:46:86:28:ea:1e:39:
                    88:41:7f:2e:d5:c9:60:e1:ca:26:e6:8e:91:26:5a:
                    74:93:da:75:8d:09:51:2e:f0:7f:a7:c6:5a:7e:ec:
                    ed:a5:a0:32:c7:8b:cb:c4:c8:d4:73:2e:c2:2e:08:
                    d5:9e:e4:d0:a0:a6:97:a2:29:bb:57:a6:f7:2e:e4:
                    62:be:c7:f7:63:ea:b7:82:f2:e8:01:5d:2b:b9:a8:
                    e9:a9:50:ab:2f:50:86:f3:02:4b:f5:10:ef:81:55:
                    d3:f7:69:dc:67:79:82:3f:92:a1:89:16:4a:ff:3a:
                    b8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:8B:A0:28:22:1E:86:B1:15:59:60:F9:66:2E:22:AE:44:DE:07
            X509v3 Authority Key Identifier:
                keyid:83:B9:32:D2:35:F2:10:B9:39:5D:68:49:17:5D:2F:72:CE:AB:D7:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7ky0jXyELk5XWhJF10vcs6r1wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/g7ky0jXyELk5XWhJF10vcs6r1wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/219bed-0481-48d0-84c8-985e8eadc95f/1/g7ky0jXyELk5XWhJF10vcs6r1wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:b5:fe:8a:39:53:c8:1e:54:2a:fa:e4:eb:5a:12:fc:2f:
         71:53:4c:c2:fe:8e:05:6f:84:9c:62:a4:67:db:ed:b4:db:8a:
         60:31:6c:10:b8:5c:9a:20:e1:98:a4:fb:c4:45:48:11:04:7c:
         25:f1:7e:d9:37:04:f9:27:09:f4:c6:44:3c:81:7b:02:56:d8:
         27:fa:62:2a:19:b0:9d:a0:1c:65:24:dc:79:7b:51:8e:c5:2d:
         0a:94:b7:3a:b8:74:fc:e8:be:ac:33:7c:73:9b:f6:d8:e2:f1:
         db:15:da:71:8d:2a:7c:9c:f2:be:44:ec:75:43:a8:e5:8a:93:
         1a:4a:4d:77:34:43:3b:1c:02:08:9f:54:dc:c5:47:04:5e:85:
         a4:73:ab:d2:e2:9f:b9:34:ee:3a:cd:18:5f:5e:61:5a:4d:6c:
         79:32:e5:47:fd:77:a1:69:d1:d2:a7:25:2e:b6:4d:12:a1:69:
         87:ad:10:d1:11:ab:d0:6b:c5:f1:fc:22:9c:d3:8e:b9:c0:7c:
         2a:30:f8:38:31:97:32:73:8f:63:05:1c:ee:c4:2e:1a:19:92:
         6b:ab:07:a6:8d:7f:8c:8d:a6:0d:2d:11:82:4c:15:43:a5:09:
         c0:50:13:6b:94:3a:97:c7:4f:8d:f7:b7:bf:33:f2:26:92:21:
         21:25:98:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----