Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
File:                     hfyyKdh4rherMdmISIku6ivvluE.mft (raw, json)
Hash identifier:          bqBVJ+N2AUlPAF+fjJ2I77rQzG2YmPBl01A5a0gdC8w=
Subject key identifier:   80:75:49:BB:62:34:89:97:DA:71:2A:4B:E7:72:35:D3:AA:B6:DC:E9
Authority key identifier: 85:FC:B2:29:D8:78:AE:17:AB:31:D9:88:48:89:2E:EA:2B:EF:96:E1
Certificate issuer:       /CN=85fcb229d878ae17ab31d98848892eea2bef96e1
Certificate serial:       01919ACADCC1FCCC5726604E0E8C241A8078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft
Manifest number:          128A
Signing time:             Wed 28 Aug 2024 21:01:11 +0000
Manifest this update:     Wed 28 Aug 2024 21:01:11 +0000
Manifest next update:     Thu 29 Aug 2024 21:01:11 +0000
Files and hashes:         1: BAS0U9mPjEuGyMwPtaYguX9Lx8M.roa (hash: OvtM+f1nrNFYqueyPV/1JlVtnnu737QmSa3TE+o+Co0=)
                          2: hfyyKdh4rherMdmISIku6ivvluE.crl (hash: RMOTDlUb+LB8Ia1jQSHcwM8qO9RUwQwRBes4SwNrn3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:9a:ca:dc:c1:fc:cc:57:26:60:4e:0e:8c:24:1a:80:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85fcb229d878ae17ab31d98848892eea2bef96e1
        Validity
            Not Before: Aug 28 21:01:11 2024 GMT
            Not After : Aug 29 21:01:11 2024 GMT
        Subject: CN=807549bb62348997da712a4be77235d3aab6dce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:5f:b0:9a:de:76:6c:79:33:5b:66:cf:01:
                    50:57:f6:70:87:ae:ac:2e:90:37:85:bd:a6:10:40:
                    8d:47:d5:84:10:58:5f:ee:ad:5a:58:23:2a:c3:df:
                    3d:8e:8d:c9:cc:05:d8:f0:fb:f3:14:13:b3:c3:48:
                    cd:86:08:70:b2:b7:48:09:3a:24:41:c8:03:aa:59:
                    c9:84:ed:ca:8a:92:d3:84:2b:30:64:66:76:27:98:
                    aa:03:ed:20:d8:cf:50:b5:3b:74:d1:61:f3:af:0c:
                    6f:09:e4:c3:23:45:6d:0e:5f:17:9a:56:7a:f6:c5:
                    78:72:fe:1b:83:db:80:2f:f3:1c:ef:22:29:95:80:
                    55:5a:e1:23:dd:4e:db:60:31:b2:46:29:2d:7c:77:
                    05:52:c3:ed:43:b1:00:95:46:0a:57:00:7d:94:a8:
                    c6:ae:97:b0:c2:a1:71:60:e9:1c:b8:ae:cf:a4:bb:
                    6b:08:e3:6a:18:22:01:b2:90:f0:91:17:a5:51:44:
                    c1:e4:90:28:09:1d:12:4e:6b:68:62:a5:ac:4a:a8:
                    c5:7b:f5:91:5b:71:6d:bc:f4:95:22:06:f6:26:2d:
                    b2:98:7d:c1:59:58:c2:a6:49:15:70:fb:ad:33:5b:
                    1e:3b:c4:49:9b:fa:dd:b1:b8:32:36:ce:50:dc:6b:
                    2d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:75:49:BB:62:34:89:97:DA:71:2A:4B:E7:72:35:D3:AA:B6:DC:E9
            X509v3 Authority Key Identifier:
                keyid:85:FC:B2:29:D8:78:AE:17:AB:31:D9:88:48:89:2E:EA:2B:EF:96:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfyyKdh4rherMdmISIku6ivvluE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1113d5-7419-4748-b052-4b1de0df21f0/1/hfyyKdh4rherMdmISIku6ivvluE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:32:00:d0:b4:01:18:97:81:cd:35:7c:f8:16:92:cb:c1:b1:
         c8:b2:5d:da:c7:3e:14:5c:12:5e:67:85:49:65:3a:02:44:cb:
         79:40:0c:dd:90:45:57:ef:ec:45:a7:1d:96:bf:71:62:38:bb:
         ed:fe:3e:fc:4e:9d:23:ce:aa:ed:81:25:1c:7e:8a:32:22:c3:
         6e:51:0c:43:cc:27:c2:9b:f8:c5:48:4c:22:87:06:0f:6e:6d:
         5b:a1:3b:7f:97:a3:41:39:05:3e:c1:b2:5c:55:9d:30:29:bb:
         af:fd:98:55:c3:4e:56:8b:8f:15:09:35:da:63:0e:2f:51:7d:
         a1:16:1a:88:54:3b:49:e9:51:fb:b1:54:56:e0:52:5d:45:7c:
         e8:78:f4:1e:ef:87:d1:fb:dd:f1:2f:ba:84:ed:4d:82:8f:89:
         25:af:3b:ed:06:b0:4c:59:66:05:1d:ad:1b:46:1a:2a:da:44:
         d2:9d:54:0b:ac:75:56:13:9b:d9:99:fb:9c:c1:95:bb:08:4d:
         10:b6:74:2e:69:79:f2:70:99:bd:77:d2:08:e8:f1:85:6b:ee:
         b8:9e:49:d1:d0:62:de:10:e7:4a:ee:b2:63:f5:6c:05:a3:ab:
         a5:65:6b:8d:b2:6e:f7:05:92:3c:49:ea:54:34:61:21:f2:0a:
         7b:b9:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----