Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft
File:                     tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft (raw, json)
Hash identifier:          F8tAw8BUPb+7juR4upGoiN7u9Lx8x7eOv7Yi7tQUBWc=
Subject key identifier:   38:DD:5C:C9:58:38:37:1D:D9:D3:C2:E9:7C:E8:84:AD:F6:CE:54:E8
Authority key identifier: B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C
Certificate issuer:       /CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
Certificate serial:       019345CBE404717E66BD0CDAF010869AE4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft
Manifest number:          1366
Signing time:             Tue 19 Nov 2024 19:00:10 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:10 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:10 +0000
Files and hashes:         1: 2coQ0IzDBpJuVPUwoymYN8CDq88.roa (hash: r8qr7V6HewmipWvJwfrm4YeaQlhXXmf59ZUk/LGRg5Y=)
                          2: tcLM8ns7WCTt4v_JdyKZh7mxaUw.crl (hash: pCFJfA3ZeeQfZTYcblFIwrjVJLbWAw4iUPysVwZanB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cb:e4:04:71:7e:66:bd:0c:da:f0:10:86:9a:e4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
        Validity
            Not Before: Nov 19 19:00:10 2024 GMT
            Not After : Nov 20 19:00:10 2024 GMT
        Subject: CN=38dd5cc95838371dd9d3c2e97ce884adf6ce54e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:b3:99:81:9c:76:35:b4:c3:17:63:ea:d4:
                    da:6a:1d:18:ee:75:4e:fb:a1:f6:95:6d:37:a3:30:
                    c1:27:49:f3:a7:20:15:b8:6c:b4:46:d3:ab:69:ae:
                    25:93:cf:df:a3:2b:10:ae:d3:64:18:78:86:33:b9:
                    a5:ab:4d:9d:fa:1e:6b:ff:f3:1a:77:84:69:30:88:
                    5f:60:19:f0:5d:18:2a:6b:c9:ee:9a:a8:27:cb:f8:
                    d3:50:48:df:31:77:ee:c1:ba:da:2c:dd:a2:8d:01:
                    6a:10:e3:0b:84:a5:af:78:2a:71:a3:6c:e4:de:68:
                    f7:8c:07:6c:56:96:aa:32:0d:86:51:e4:39:59:b0:
                    91:38:95:74:57:16:7b:1d:06:f4:83:c2:69:cf:de:
                    c7:d6:9e:5a:d3:9e:e0:aa:3f:1e:9c:c8:bc:5f:0b:
                    22:33:87:50:16:ae:b1:71:93:da:0f:0b:c8:9b:c6:
                    be:8b:a5:a5:4e:b7:8c:e9:66:cd:6e:db:a6:39:c5:
                    ea:07:44:d4:8b:ae:ef:ed:25:e7:08:f6:13:da:74:
                    8f:52:0e:e8:6f:93:75:e4:52:aa:cb:69:a3:bf:a0:
                    f7:00:90:b6:c7:6c:a2:62:b1:3b:94:6a:06:d2:5c:
                    4a:25:1d:2b:c8:cd:85:d7:55:82:10:c7:08:d1:cf:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DD:5C:C9:58:38:37:1D:D9:D3:C2:E9:7C:E8:84:AD:F6:CE:54:E8
            X509v3 Authority Key Identifier:
                keyid:B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a3:dc:86:a6:b5:4a:43:78:7c:de:44:9d:bd:39:21:41:e9:
         18:91:f0:ca:f1:df:94:38:ea:c7:ad:6f:08:e2:9b:60:1d:1e:
         5b:f7:71:95:4a:1b:32:2c:aa:35:ca:df:ac:68:1d:ca:8d:1c:
         d9:0f:e7:12:94:a3:ff:ed:1b:5a:c7:a7:d2:27:bd:cf:18:de:
         37:95:96:1e:ec:48:12:48:1d:a2:76:67:89:e9:21:d1:43:74:
         0e:fe:f6:5c:ab:bb:6b:fb:46:13:82:dc:6a:c3:ca:09:93:42:
         a9:c5:fc:2e:a6:a0:8b:e2:9e:f0:54:02:c4:c7:a1:8c:db:be:
         0e:8c:08:be:44:a8:8f:6c:a9:e6:dc:dd:0b:70:07:77:36:5e:
         83:9c:09:7b:a9:79:f4:6b:5b:56:f3:08:72:36:96:bc:5c:aa:
         18:30:69:00:8b:27:97:5c:0c:36:7a:2d:34:a5:49:29:d1:66:
         c4:83:99:d7:4d:6f:44:7d:9b:93:a2:9a:36:53:de:3e:1d:75:
         7c:67:c4:e2:45:8b:10:51:34:20:9e:76:03:a3:a2:7d:46:a9:
         e6:f7:e4:b5:10:d3:c6:d6:8a:1f:81:6e:4b:8a:d7:05:a2:80:
         09:88:8a:47:cd:2f:45:87:e3:75:71:40:66:cf:50:42:cf:52:
         db:c9:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----