Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
File:                     vwhJDuKbOzwpO91zIrWjOthA2AE.mft (raw, json)
Hash identifier:          EIZWguC8Fzhgvy2s2HXmYYsB3RowhxoHHPQRqYjdvXI=
Subject key identifier:   8C:9B:1A:07:B1:7F:AE:6F:90:A0:EA:3E:AA:48:09:EF:F7:D5:41:58
Authority key identifier: BF:08:49:0E:E2:9B:3B:3C:29:3B:DD:73:22:B5:A3:3A:D8:40:D8:01
Certificate issuer:       /CN=bf08490ee29b3b3c293bdd7322b5a33ad840d801
Certificate serial:       019345CC89991A159F31A60059F72FB99EDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft
Manifest number:          08D8
Signing time:             Tue 19 Nov 2024 19:00:52 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:52 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:52 +0000
Files and hashes:         1: vwhJDuKbOzwpO91zIrWjOthA2AE.crl (hash: qZ0bkYs80n5J0Ei0ZCRSCGKDY1kADsWlw/LfMdppvDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cc:89:99:1a:15:9f:31:a6:00:59:f7:2f:b9:9e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf08490ee29b3b3c293bdd7322b5a33ad840d801
        Validity
            Not Before: Nov 19 19:00:52 2024 GMT
            Not After : Nov 20 19:00:52 2024 GMT
        Subject: CN=8c9b1a07b17fae6f90a0ea3eaa4809eff7d54158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:c9:b1:fe:66:a1:cb:e1:ce:fe:8c:17:8f:
                    31:33:76:16:7b:3d:52:4c:d4:4c:23:bc:14:a2:ba:
                    47:88:8e:db:db:25:28:0e:95:7d:68:d3:ba:f6:d1:
                    e2:d9:80:92:d7:17:e2:1d:8a:bd:c7:ed:f6:43:9f:
                    c5:dc:95:d9:fb:fc:b3:75:bd:64:c7:b4:22:f2:51:
                    3c:eb:21:a2:5e:e5:62:a6:3e:0b:35:83:b1:ed:91:
                    17:9b:2c:56:7c:ab:6c:de:a6:03:73:12:04:8d:34:
                    3b:96:be:52:a4:35:af:0a:da:4a:8d:92:01:a8:eb:
                    9b:19:81:cb:c6:61:6a:84:d1:e0:2d:cb:f4:b9:e6:
                    9f:f2:dd:b8:4a:09:01:0b:73:da:a0:7c:ce:64:5f:
                    7a:88:fd:15:1d:cd:ef:0e:d7:a8:da:1a:7b:b9:1d:
                    9e:70:c7:22:8b:3d:d5:72:84:ea:f8:c3:06:f9:8b:
                    83:21:ee:81:63:f8:65:00:dd:57:13:aa:e0:ac:b2:
                    c1:be:db:a7:90:eb:96:03:b5:ef:6c:73:13:79:9a:
                    ef:a8:eb:57:9e:f6:62:fd:aa:7d:74:23:14:52:ef:
                    09:7b:23:b7:a6:78:be:07:d2:bd:85:24:af:ea:d0:
                    f0:5c:d0:9c:1e:17:c2:d3:bf:80:04:f8:15:0f:80:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:1A:07:B1:7F:AE:6F:90:A0:EA:3E:AA:48:09:EF:F7:D5:41:58
            X509v3 Authority Key Identifier:
                keyid:BF:08:49:0E:E2:9B:3B:3C:29:3B:DD:73:22:B5:A3:3A:D8:40:D8:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwhJDuKbOzwpO91zIrWjOthA2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f089b2-ddee-4262-9eaa-5ddcbf511e22/1/vwhJDuKbOzwpO91zIrWjOthA2AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:34:76:83:43:f1:9d:97:19:5a:c6:c5:b5:46:96:7a:23:15:
         93:1a:33:ac:61:ea:25:39:96:5f:9d:e7:0c:4a:7a:bf:13:30:
         4d:0f:f6:25:f6:f9:c2:78:e3:be:07:6f:c5:d0:22:da:6a:8b:
         99:2d:fd:60:6b:49:b6:c0:97:8a:41:14:f7:bf:db:7a:d2:f6:
         2f:dc:e4:ec:3e:28:d1:c4:df:b7:e4:d5:6e:f8:f3:25:f8:9c:
         f0:eb:7d:7f:79:10:40:87:25:fc:d0:6d:8b:57:01:70:21:18:
         a9:97:b7:1f:63:23:e0:93:c7:0a:7a:47:50:ca:66:d1:bb:29:
         da:b6:aa:b5:a7:6a:86:27:ef:cd:0e:ef:39:e4:44:46:c1:8c:
         e2:18:bf:b2:50:e0:c8:24:4e:8f:24:ea:03:5c:28:4b:72:a9:
         b2:bb:56:60:f1:18:b5:a9:89:28:c5:47:72:fd:8a:a6:77:aa:
         0c:ed:14:44:37:0c:53:2c:54:83:28:2b:f8:c0:d0:48:f0:e0:
         ff:88:d4:52:eb:33:41:aa:2a:79:e8:53:84:d7:6c:eb:e3:5b:
         97:09:ae:76:36:79:dc:b2:4c:34:4a:98:10:82:32:54:74:03:
         39:e8:59:13:e4:9f:cd:78:ec:79:29:d1:44:2f:13:e9:4b:b9:
         da:f2:47:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----