Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
File:                     Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft (raw, json)
Hash identifier:          PCQt6g5heSROQS/iRM8dUXuaMKw76QffIijDDFnAZMg=
Subject key identifier:   00:1D:65:0C:28:EA:89:19:10:26:AC:05:E9:C6:ED:D9:57:4C:0A:49
Authority key identifier: 1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B
Certificate issuer:       /CN=1ddf5951c9ae79976d97e1d28e466a615119898b
Certificate serial:       0190FC00E8621F65E736AA58FD347E6FC590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft
Manifest number:          0C83
Signing time:             Mon 29 Jul 2024 01:00:36 +0000
Manifest this update:     Mon 29 Jul 2024 01:00:36 +0000
Manifest next update:     Tue 30 Jul 2024 01:00:36 +0000
Files and hashes:         1: Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl (hash: 7Y0Y1pR9jXsRJGjr0yTM0rTudBFXGw1Mzce834ajqZU=)
                          2: YMQ02KtoHddOBd8P0_L911zzXZo.roa (hash: KLEMa+EsIIYumj5REVXzu9c2VVWhgQLOfarzx4uuFQ8=)
                          3: dq0H0ptfWVeMI5pzuDVutGRIMbA.roa (hash: 0F5Hp24nVBW+EaqkAlTh8XGSno4s2M0R/Zi5bowUmQE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fc:00:e8:62:1f:65:e7:36:aa:58:fd:34:7e:6f:c5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ddf5951c9ae79976d97e1d28e466a615119898b
        Validity
            Not Before: Jul 29 01:00:36 2024 GMT
            Not After : Jul 30 01:00:36 2024 GMT
        Subject: CN=001d650c28ea89191026ac05e9c6edd9574c0a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:d1:11:75:14:00:2d:c6:1e:33:dd:60:c3:
                    10:09:8d:ba:c4:d7:a0:cc:e6:c3:10:0d:63:5b:25:
                    d8:d3:47:cb:96:68:2d:1a:2e:be:81:ef:eb:4f:31:
                    78:ea:79:79:88:08:f8:37:a4:58:8e:19:73:cc:f1:
                    5c:05:7e:72:5b:4b:d4:b8:2b:bf:df:88:fa:85:71:
                    a4:cb:4c:27:e2:89:a8:d5:af:64:df:97:c8:14:4e:
                    86:20:77:0e:34:24:bd:a5:37:a0:d0:5e:c2:43:c5:
                    2e:a7:32:6d:9b:6d:07:28:03:20:74:8d:5c:e0:e3:
                    70:61:2d:f2:f5:6a:bf:29:7c:8b:d6:c8:d7:f1:49:
                    b6:96:10:cb:45:53:ef:0f:04:0d:fe:19:be:a5:31:
                    02:51:ee:28:4c:8f:d3:ac:14:d6:d6:0a:e3:50:9c:
                    e1:4a:e0:ae:66:89:50:d8:ed:9a:61:37:11:36:73:
                    8a:d0:42:88:91:57:5e:35:47:b4:41:e6:85:c8:40:
                    94:d1:24:1f:c4:83:d9:fd:3f:5d:22:6d:8e:49:e7:
                    2b:26:fa:fc:7b:1d:8a:06:98:0a:7c:39:f3:cb:85:
                    8a:67:00:c2:77:e9:f7:95:ac:c7:b9:b3:b0:0d:62:
                    6d:f5:18:69:a8:99:d0:aa:0c:ad:b7:3e:84:33:68:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1D:65:0C:28:EA:89:19:10:26:AC:05:E9:C6:ED:D9:57:4C:0A:49
            X509v3 Authority Key Identifier:
                keyid:1D:DF:59:51:C9:AE:79:97:6D:97:E1:D2:8E:46:6A:61:51:19:89:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2df786-52d5-438b-8b56-0e96b1ffb247/1/Hd9ZUcmueZdtl-HSjkZqYVEZiYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f0:5b:69:3c:93:11:85:89:9a:d1:0b:e2:ba:8e:4d:3d:b7:
         c9:c1:52:26:ca:92:be:d0:8a:31:6f:d4:5f:83:70:39:5b:ac:
         e0:ca:52:62:1c:89:be:20:0d:72:f7:ff:d1:fe:cc:74:ea:90:
         03:d9:8d:67:50:57:fc:ef:f7:e2:a8:dd:ef:4c:e0:1e:bd:93:
         91:f8:36:70:ae:28:33:8a:e6:f3:14:3f:e3:4e:74:c9:27:36:
         24:50:bf:16:5a:b5:7a:9a:0f:27:8f:b3:f0:b8:6a:22:88:30:
         6c:d4:79:dd:a3:39:b9:b3:7e:4a:68:0d:16:a0:8b:67:2d:7b:
         b0:18:c7:f9:1e:5b:ff:15:11:91:3b:8f:9c:4e:b3:f9:dd:b1:
         7e:89:4a:83:5a:04:69:73:ab:00:fc:ca:14:9a:d0:cd:8f:76:
         6f:99:9d:6f:df:8e:1a:95:9a:d5:4c:6a:10:ed:cd:79:f1:e4:
         06:56:a2:54:5d:b9:0a:ea:49:75:4f:04:66:8b:d9:8b:d0:cf:
         4e:d5:41:e6:5e:46:b9:f6:51:87:f1:9f:a9:58:af:32:34:cd:
         15:91:d4:bc:12:df:4c:7b:bd:0a:af:c2:87:1a:79:35:c1:c6:
         85:2f:a9:d8:a1:ab:76:ee:e4:64:4d:42:0b:62:5c:25:f9:28:
         79:b7:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----