Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f9c1d7-76f4-42a4-ae1f-e3b72c863d35/1/2AqQW0JhRUUfSD_2LAdk_fOdVgk.mft
File:                     2AqQW0JhRUUfSD_2LAdk_fOdVgk.mft (raw, json)
Hash identifier:          HTFDm60zp/Yo5l2yJye4RGhVjbXrzhYvuyG/Q5wf2zw=
Subject key identifier:   C1:7D:EE:4E:25:E9:73:92:15:F1:CD:F7:8D:C2:B6:91:20:12:33:E8
Authority key identifier: D8:0A:90:5B:42:61:45:45:1F:48:3F:F6:2C:07:64:FD:F3:9D:56:09
Certificate issuer:       /CN=d80a905b426145451f483ff62c0764fdf39d5609
Certificate serial:       018F001AD3588386A54E2570605FD5B4AA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2AqQW0JhRUUfSD_2LAdk_fOdVgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f9c1d7-76f4-42a4-ae1f-e3b72c863d35/1/2AqQW0JhRUUfSD_2LAdk_fOdVgk.mft
Manifest number:          03E4
Signing time:             Sun 21 Apr 2024 10:01:49 +0000
Manifest this update:     Sun 21 Apr 2024 10:01:49 +0000
Manifest next update:     Mon 22 Apr 2024 10:01:49 +0000
Files and hashes:         1: 2AqQW0JhRUUfSD_2LAdk_fOdVgk.crl (hash: KnDF55SLTWXZzbyUlfp+xecroYVFcreLLBJ84VcMkCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:00:1a:d3:58:83:86:a5:4e:25:70:60:5f:d5:b4:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d80a905b426145451f483ff62c0764fdf39d5609
        Validity
            Not Before: Apr 21 10:01:49 2024 GMT
            Not After : Apr 22 10:01:49 2024 GMT
        Subject: CN=c17dee4e25e9739215f1cdf78dc2b691201233e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:6c:26:2e:b5:d4:05:34:14:94:4a:ab:ef:
                    0c:58:90:a2:d8:13:1d:e1:4c:41:c9:6c:54:d3:72:
                    ef:c1:ff:ce:a5:b4:67:7a:ba:c1:e8:b0:ba:fa:53:
                    59:0c:27:c5:59:8b:0d:e1:07:9e:9f:25:c8:a8:b2:
                    21:81:f0:ee:a9:34:6a:f0:c5:03:e0:5c:b5:ca:7c:
                    ad:c1:c9:bb:2f:e9:c0:ad:67:b9:ea:40:16:a0:e3:
                    b1:ae:aa:1f:c8:22:89:8e:6c:ef:1f:f5:02:e8:81:
                    f9:75:02:d1:42:ce:e1:23:b0:89:38:bc:8f:c6:d4:
                    ca:c9:ec:6d:92:bf:19:ef:e6:6a:33:70:e5:49:13:
                    07:09:b5:39:c3:30:e1:53:c3:2d:ee:b1:1b:95:55:
                    7c:00:f6:fc:0c:1d:e8:5e:29:23:36:a0:87:7c:99:
                    05:70:a0:0a:68:12:c9:1a:df:9b:ac:b0:d6:3f:30:
                    10:11:a9:6b:57:03:e9:11:0e:bb:8f:4a:de:cc:30:
                    45:86:bf:7b:cb:5e:de:d8:8a:72:4c:27:8c:32:1d:
                    e7:f4:2c:70:b7:6d:55:c3:1a:45:43:5f:3d:35:69:
                    cf:00:f8:dd:be:69:27:dc:ba:b1:82:10:ae:f5:b3:
                    ae:b0:5c:9e:99:f9:41:f5:04:bc:8c:4f:b9:a0:ce:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7D:EE:4E:25:E9:73:92:15:F1:CD:F7:8D:C2:B6:91:20:12:33:E8
            X509v3 Authority Key Identifier:
                keyid:D8:0A:90:5B:42:61:45:45:1F:48:3F:F6:2C:07:64:FD:F3:9D:56:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AqQW0JhRUUfSD_2LAdk_fOdVgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f9c1d7-76f4-42a4-ae1f-e3b72c863d35/1/2AqQW0JhRUUfSD_2LAdk_fOdVgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f9c1d7-76f4-42a4-ae1f-e3b72c863d35/1/2AqQW0JhRUUfSD_2LAdk_fOdVgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:16:c3:f2:49:83:7b:53:63:47:13:6b:db:eb:fa:e2:df:aa:
         8e:5a:7d:c4:cc:e9:24:4a:c6:46:bc:d6:56:04:1b:5a:f1:7e:
         c1:f8:fb:b6:78:8c:d6:46:b3:30:2d:f4:80:a7:19:dc:b7:cb:
         4c:e0:ab:d2:6b:25:2f:f3:6d:4c:d5:6a:70:6c:5d:64:84:dc:
         57:02:2d:b2:43:55:ef:c5:f9:25:0d:a2:9f:2e:bf:be:b9:cd:
         22:8e:1d:29:1f:e1:36:2a:a2:f5:d3:6c:f1:bb:49:fb:71:93:
         f4:4f:71:1a:e4:5c:22:98:36:d8:fd:79:3a:4a:bc:fa:2f:eb:
         7b:1a:9e:90:94:3c:62:1e:88:0d:ca:b1:35:63:6b:2d:08:72:
         8d:b6:e4:a2:16:d5:f2:ff:f4:55:bc:51:82:c8:a8:c0:57:82:
         0b:96:37:26:4a:fa:a1:e9:21:e5:34:78:c4:29:08:46:92:53:
         33:19:41:e2:39:13:41:44:61:ae:65:5c:86:25:a0:38:57:0e:
         8c:d0:21:a0:4d:17:a3:05:84:41:68:1e:ac:87:7a:b0:7a:4d:
         8f:8c:5e:d5:09:2c:f5:ab:51:a9:2d:a9:70:01:53:08:4a:78:
         09:81:40:26:2c:a3:2f:6b:96:3f:12:d6:04:9a:40:a9:6d:17:
         62:e3:c0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----