Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.mft
File:                     obHWNaLKOPpZnU6GjzLl119GJ8I.mft (raw, json)
Hash identifier:          kicVXgZ3Q/JfkgXQ31PokRuWmiU0egLZM98SaTB0VjI=
Subject key identifier:   A0:29:BC:25:B9:CD:81:6C:12:0B:15:B2:71:1D:22:A7:FD:E0:7D:59
Authority key identifier: A1:B1:D6:35:A2:CA:38:FA:59:9D:4E:86:8F:32:E5:D7:5F:46:27:C2
Certificate issuer:       /CN=a1b1d635a2ca38fa599d4e868f32e5d75f4627c2
Certificate serial:       018FA63133019C48F7E979FE12E1342BA3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obHWNaLKOPpZnU6GjzLl119GJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.mft
Manifest number:          0394
Signing time:             Thu 23 May 2024 16:03:13 +0000
Manifest this update:     Thu 23 May 2024 16:03:13 +0000
Manifest next update:     Fri 24 May 2024 16:03:13 +0000
Files and hashes:         1: obHWNaLKOPpZnU6GjzLl119GJ8I.crl (hash: b0yDTl9PwWXVrRdpmot7gAKjrNlnIlUHCF0ouJtjP4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a6:31:33:01:9c:48:f7:e9:79:fe:12:e1:34:2b:a3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b1d635a2ca38fa599d4e868f32e5d75f4627c2
        Validity
            Not Before: May 23 16:03:13 2024 GMT
            Not After : May 24 16:03:13 2024 GMT
        Subject: CN=a029bc25b9cd816c120b15b2711d22a7fde07d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:51:6e:46:18:bc:0b:93:31:7b:10:51:64:bd:
                    ed:19:76:cd:8d:d7:88:c8:b3:24:93:f4:58:b1:c4:
                    ce:5c:b5:97:82:cd:98:d3:ce:ab:26:d7:26:1d:9d:
                    64:2c:48:87:0f:c8:be:a8:ba:8f:c8:a1:23:61:91:
                    2f:98:00:fb:ef:6f:99:7a:f4:c1:c5:c8:b7:96:1a:
                    33:0f:36:dc:74:97:0e:09:41:1c:76:91:ae:87:a7:
                    ed:69:83:77:7d:9f:15:e4:6c:b9:4c:77:ea:c0:4e:
                    f5:13:a5:02:eb:c9:b7:c6:5e:72:ec:db:a9:fd:79:
                    b4:65:6b:c3:1b:ad:81:b3:23:c0:b6:a8:89:67:80:
                    a0:f9:d7:26:ae:64:33:65:15:9a:25:8e:2c:cd:5d:
                    2a:90:ac:de:52:7c:5b:91:9c:73:46:dd:31:5d:04:
                    82:84:59:10:4b:61:79:7b:f7:89:6c:50:60:5e:fd:
                    8b:8a:d7:e6:c8:21:ba:62:f5:b6:89:9b:e1:d3:ce:
                    33:a5:17:67:f1:be:ee:82:b9:dd:9b:1d:15:d7:c5:
                    7e:07:8c:6e:ca:82:3e:db:c8:85:e3:be:72:13:8b:
                    84:62:fc:d0:99:c2:0d:f5:ca:93:77:50:36:84:c8:
                    59:55:73:d2:36:14:89:b3:09:c8:9f:48:88:11:5b:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:29:BC:25:B9:CD:81:6C:12:0B:15:B2:71:1D:22:A7:FD:E0:7D:59
            X509v3 Authority Key Identifier:
                keyid:A1:B1:D6:35:A2:CA:38:FA:59:9D:4E:86:8F:32:E5:D7:5F:46:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obHWNaLKOPpZnU6GjzLl119GJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:b4:c9:64:48:94:01:33:16:e9:35:5a:bb:66:9a:64:59:
         69:7a:fb:77:06:21:c2:db:2c:79:d7:ce:59:c6:3b:6e:8a:26:
         10:c0:c6:29:ba:f0:11:b0:56:43:91:a6:4b:da:eb:17:0b:9d:
         10:50:0a:b5:d4:bc:74:4c:db:20:83:a1:8c:8e:38:21:ff:de:
         e9:11:ac:03:0b:81:ca:5d:45:1a:49:70:ee:29:e7:c3:0b:dc:
         c7:44:f3:75:ed:95:69:66:ea:1c:de:7f:e0:90:f8:5f:e7:32:
         06:0b:a0:58:c0:8b:8d:34:1c:bb:b0:ca:03:7d:2e:b4:da:3c:
         e0:a0:65:03:81:2b:4a:33:7d:a3:06:aa:c5:ad:8c:d8:4a:a6:
         eb:1e:c9:c1:68:51:75:d2:ce:c2:46:ed:f4:e7:9d:54:48:55:
         cf:10:f7:50:d3:f6:7f:69:4d:1b:b5:46:ac:ff:e4:1a:68:19:
         df:88:90:c3:0e:67:f1:c3:d6:1f:6d:a5:eb:a1:06:c3:1d:e1:
         3b:14:c1:7d:c0:8b:25:a7:1e:c4:e4:9a:f6:aa:3b:01:2c:9f:
         34:36:bd:f1:d1:e3:71:3e:6b:e5:9b:f1:d1:77:c6:3a:d8:d0:
         60:ea:4f:bb:07:18:8a:76:d8:c8:fe:2b:53:26:67:c0:09:29:
         73:99:6c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----