Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b38672-03b3-4249-8921-7e13b1b4ce1f/1/FdyB4tCfjWfI7xdr0Wmhfdrunjo.mft
File:                     FdyB4tCfjWfI7xdr0Wmhfdrunjo.mft (raw, json)
Hash identifier:          t5/AzdJxBp+RY6uTgsZqhQfoNI0BMll3+NDAgnCsGZ8=
Subject key identifier:   F4:0C:A3:45:84:73:A5:C3:E6:11:7A:B4:19:D9:D7:A0:86:34:4C:4D
Authority key identifier: 15:DC:81:E2:D0:9F:8D:67:C8:EF:17:6B:D1:69:A1:7D:DA:EE:9E:3A
Certificate issuer:       /CN=15dc81e2d09f8d67c8ef176bd169a17ddaee9e3a
Certificate serial:       018E2C5072C5740CB5C9124041B189EC45D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FdyB4tCfjWfI7xdr0Wmhfdrunjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b38672-03b3-4249-8921-7e13b1b4ce1f/1/FdyB4tCfjWfI7xdr0Wmhfdrunjo.mft
Manifest number:          0FFD
Signing time:             Mon 11 Mar 2024 07:00:53 +0000
Manifest this update:     Mon 11 Mar 2024 07:00:53 +0000
Manifest next update:     Tue 12 Mar 2024 07:00:53 +0000
Files and hashes:         1: FdyB4tCfjWfI7xdr0Wmhfdrunjo.crl (hash: cu7S4BV4zQxztImyfFmvkTGrKZkbfx8Cr8WPCpoH5ac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2c:50:72:c5:74:0c:b5:c9:12:40:41:b1:89:ec:45:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15dc81e2d09f8d67c8ef176bd169a17ddaee9e3a
        Validity
            Not Before: Mar 11 07:00:53 2024 GMT
            Not After : Mar 12 07:00:53 2024 GMT
        Subject: CN=f40ca3458473a5c3e6117ab419d9d7a086344c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8e:04:34:c1:35:15:84:08:97:ea:04:51:52:
                    76:dd:da:91:97:b6:aa:f9:c8:a1:47:45:52:36:4d:
                    31:58:6b:7f:47:d9:5f:b0:fa:0c:eb:d0:fa:48:15:
                    89:78:e9:6e:d0:47:c8:58:6e:35:64:62:b4:be:d4:
                    2c:29:42:03:af:20:98:6b:6e:7f:c0:2c:48:89:21:
                    0f:04:9a:1a:e0:0e:d4:67:d6:54:b3:a0:dd:ff:00:
                    aa:cc:4c:26:6e:b4:36:92:04:92:ae:a8:ba:9f:7d:
                    29:f3:3d:a4:bd:d8:24:23:4f:7e:35:f9:d9:b7:c4:
                    07:84:fb:33:37:bd:7b:3e:1e:d6:97:3b:0b:b8:3b:
                    22:6f:d4:be:bc:91:0b:ae:3e:68:8f:38:ef:28:f9:
                    54:07:a8:dd:86:05:ff:69:e5:f5:1f:49:4f:d4:c5:
                    42:e9:3e:29:41:9a:05:82:70:95:f7:cb:a2:42:41:
                    08:8b:d4:f0:d4:f3:fb:e5:aa:24:63:54:05:7b:13:
                    b2:da:f9:1e:e3:7f:e6:e6:b3:3d:c6:d1:c8:5f:08:
                    66:c9:79:ef:cc:17:19:ed:37:1f:71:0a:01:0d:c9:
                    b7:08:d7:19:b1:cd:1a:9a:cf:48:56:79:ec:75:77:
                    47:af:0f:a1:0a:f8:e7:a5:64:1a:61:d3:ae:f8:74:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0C:A3:45:84:73:A5:C3:E6:11:7A:B4:19:D9:D7:A0:86:34:4C:4D
            X509v3 Authority Key Identifier:
                keyid:15:DC:81:E2:D0:9F:8D:67:C8:EF:17:6B:D1:69:A1:7D:DA:EE:9E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdyB4tCfjWfI7xdr0Wmhfdrunjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b38672-03b3-4249-8921-7e13b1b4ce1f/1/FdyB4tCfjWfI7xdr0Wmhfdrunjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b38672-03b3-4249-8921-7e13b1b4ce1f/1/FdyB4tCfjWfI7xdr0Wmhfdrunjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:be:fe:ac:3e:95:c5:c4:be:f0:a9:06:18:d3:d9:b0:ed:74:
         d8:26:2f:87:33:96:12:9b:48:53:df:64:ed:d4:e6:36:c3:8f:
         19:95:5f:09:5e:61:01:d3:7b:00:f1:a4:29:9c:ca:ce:fe:7b:
         19:72:04:4c:3b:43:49:69:14:ad:e7:92:c9:21:9a:02:95:e1:
         21:cb:8e:96:b5:d2:01:82:e6:44:fa:03:77:d1:d6:47:ad:00:
         af:76:6d:66:87:fa:ed:19:ef:bb:b9:13:ca:4a:d9:65:35:a7:
         9f:98:58:3c:5c:f4:25:29:28:01:52:d6:eb:56:20:dc:cf:c5:
         66:4f:63:75:99:0c:3d:f2:99:35:20:ee:ec:45:c7:d6:50:59:
         2e:33:a3:8a:56:e9:5f:f8:57:bd:36:d9:24:9a:41:a2:48:f5:
         81:01:ad:b9:92:86:73:42:3c:4b:70:4b:3d:f3:40:20:7a:44:
         51:c0:f5:e3:bb:3b:40:00:2d:ba:0a:9f:14:f8:e4:e3:b9:82:
         0b:86:9f:a8:5d:2b:07:68:78:81:22:a1:fe:44:05:05:a8:30:
         df:58:0f:fc:60:84:00:78:2b:ed:cc:0a:91:1c:ef:7a:67:5d:
         7c:12:4b:22:44:17:7f:1d:8c:bc:77:69:fe:0f:8b:7e:f6:05:
         52:c6:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----