Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.mft
File:                     0ZOPNl2vM24PKi323WLf6qS_zEY.mft (raw, json)
Hash identifier:          uqB18fHcv3EHjY3NlNQoKtPbzoDDxcdJj7Cb8YtF7T4=
Subject key identifier:   84:71:D7:7A:5B:65:49:78:6D:17:85:8A:93:9D:89:F9:AC:2B:BD:8D
Authority key identifier: D1:93:8F:36:5D:AF:33:6E:0F:2A:2D:F6:DD:62:DF:EA:A4:BF:CC:46
Certificate issuer:       /CN=d1938f365daf336e0f2a2df6dd62dfeaa4bfcc46
Certificate serial:       019346A7DA60EE3D6913D1DCEE981FCEACF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZOPNl2vM24PKi323WLf6qS_zEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.mft
Manifest number:          0A21
Signing time:             Tue 19 Nov 2024 23:00:25 +0000
Manifest this update:     Tue 19 Nov 2024 23:00:25 +0000
Manifest next update:     Wed 20 Nov 2024 23:00:25 +0000
Files and hashes:         1: 0ZOPNl2vM24PKi323WLf6qS_zEY.crl (hash: +W6W09C+ZTVUvbNn0D8a4/pcU8HvF16/6NryM6SF/Pc=)
                          2: kCyDRxi6bBTDTtwAoe_cmv3g9_Y.roa (hash: ggu9aekmzWRYn8N6Q/DlCPN95Zr/HabM8WwzTEggqx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:a7:da:60:ee:3d:69:13:d1:dc:ee:98:1f:ce:ac:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1938f365daf336e0f2a2df6dd62dfeaa4bfcc46
        Validity
            Not Before: Nov 19 23:00:25 2024 GMT
            Not After : Nov 20 23:00:25 2024 GMT
        Subject: CN=8471d77a5b6549786d17858a939d89f9ac2bbd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:ba:d4:35:af:f0:26:7b:be:b9:89:3a:81:
                    4f:32:bc:6e:83:73:5c:be:5d:0e:25:6f:78:cd:15:
                    e3:87:3e:44:4f:75:96:e7:a4:16:11:94:63:9c:92:
                    0c:dc:a2:68:55:26:46:a6:98:ad:2c:87:82:ae:1f:
                    9f:b4:d5:b6:51:e1:ee:23:3b:f9:29:c0:1f:eb:81:
                    e9:6e:c0:d2:16:22:d2:bf:0a:3d:fb:a7:98:ed:78:
                    f0:05:94:5e:9f:98:fa:f9:53:47:99:38:34:9b:69:
                    1d:87:fd:a2:e8:18:08:a8:97:a6:9a:92:33:50:2b:
                    2d:a6:51:8d:5b:f4:48:f8:0d:1f:8f:b3:11:3e:f3:
                    15:13:f7:22:9e:d4:9a:51:66:d1:53:41:4f:9b:d4:
                    57:49:25:01:6d:f0:b0:de:2a:e9:7f:f0:a5:9e:33:
                    c5:c5:11:e9:3b:2d:94:71:58:53:94:90:8a:2f:25:
                    2b:7f:75:a0:ae:9c:f0:fc:2c:52:e9:a9:7c:a7:9c:
                    91:ad:6a:dc:86:05:9a:1a:40:20:92:c0:0c:68:13:
                    75:e4:30:d3:80:01:5b:20:62:d6:bc:09:e9:87:40:
                    40:30:e3:bc:5e:ec:ef:2c:b6:ec:dc:d7:a1:bf:38:
                    ff:33:0d:22:ea:47:d7:09:43:0c:10:fe:ec:8f:34:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:D7:7A:5B:65:49:78:6D:17:85:8A:93:9D:89:F9:AC:2B:BD:8D
            X509v3 Authority Key Identifier:
                keyid:D1:93:8F:36:5D:AF:33:6E:0F:2A:2D:F6:DD:62:DF:EA:A4:BF:CC:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZOPNl2vM24PKi323WLf6qS_zEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f8f541-7d27-4730-8c58-ab6c6d65ed26/1/0ZOPNl2vM24PKi323WLf6qS_zEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:93:76:a4:6a:ab:88:56:f0:22:fa:b3:14:14:47:28:9b:3e:
         4d:84:06:8c:09:74:37:3f:4f:1f:08:ef:ea:fe:71:00:61:55:
         e3:93:55:cf:29:34:37:08:3b:27:2f:71:d2:26:cf:5a:93:7c:
         d2:bb:d0:a4:21:14:fe:93:6b:70:b1:6d:c9:20:41:36:eb:b8:
         d3:df:5f:1d:09:7e:51:5f:b1:de:53:1b:8d:d3:1f:63:86:9b:
         a9:d4:5c:b0:7e:a5:f0:14:7c:50:8d:ef:70:ef:2b:0f:f6:8f:
         a3:66:50:48:12:1a:4d:e6:a0:07:90:7b:66:af:8b:19:6b:2c:
         0b:08:c8:5a:59:0d:80:03:0c:ad:07:07:76:be:00:71:12:97:
         fe:bf:62:2b:ac:7c:64:4d:41:5d:b8:3d:6c:35:8c:1c:39:92:
         3d:ca:8d:4c:da:56:12:75:d5:b1:b6:ef:9f:26:e2:ae:ef:15:
         8b:63:3c:47:18:bd:6d:a8:92:aa:a0:90:70:a6:fe:26:49:fd:
         c0:43:26:eb:7b:87:b2:26:a4:4a:17:be:12:6b:3c:db:89:d5:
         91:06:47:2f:dc:3a:38:92:82:61:56:1b:de:73:b2:7f:05:58:
         f6:2e:76:de:6e:0f:2c:e0:ee:c4:7d:3d:5f:34:74:30:ed:bb:
         e8:46:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----