Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
File:                     0BdL5CbKRRE0N1Teo31qNgo0qbg.mft (raw, json)
Hash identifier:          yCoVxKnhkv/IM9/2Twl94gcuviliiuIHiJb+zwevpTc=
Subject key identifier:   EA:47:71:96:D2:F1:C1:74:25:82:E6:EF:5D:18:2F:D2:3B:BF:00:44
Authority key identifier: D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8
Certificate issuer:       /CN=d0174be426ca4511343754dea37d6a360a34a9b8
Certificate serial:       0192302371609EE416DAD9C9EAE9DA098391
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft
Manifest number:          126B
Signing time:             Thu 26 Sep 2024 21:01:22 +0000
Manifest this update:     Thu 26 Sep 2024 21:01:22 +0000
Manifest next update:     Fri 27 Sep 2024 21:01:22 +0000
Files and hashes:         1: 0BdL5CbKRRE0N1Teo31qNgo0qbg.crl (hash: 466HdiI3mu313/EfNv02vPsuwveuD5EaZdqPpV5XQSo=)
                          2: iI3jJU2eI3m78H8QE9sH5t8vkiI.roa (hash: TSggtqGr27mQn8zZjHAMRv4x/1YJRMajNh3tBIw+Pgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:23:71:60:9e:e4:16:da:d9:c9:ea:e9:da:09:83:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0174be426ca4511343754dea37d6a360a34a9b8
        Validity
            Not Before: Sep 26 21:01:22 2024 GMT
            Not After : Sep 27 21:01:22 2024 GMT
        Subject: CN=ea477196d2f1c1742582e6ef5d182fd23bbf0044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:c0:df:17:4f:11:4a:d5:4d:ff:9b:34:4d:
                    16:7e:0a:05:a4:f0:27:ee:de:25:3b:a6:4e:39:09:
                    49:cd:45:c4:a8:43:da:c6:e1:de:aa:82:f8:e9:b4:
                    e6:9a:fe:86:29:26:26:7b:4e:28:75:96:b4:4d:0c:
                    b3:03:7e:1e:61:67:f7:9c:2e:f2:14:58:36:20:76:
                    33:69:5e:08:94:49:3d:05:e7:2d:8b:20:4d:93:ce:
                    2b:74:55:da:b5:44:d6:e0:34:ae:ec:46:a5:c8:1e:
                    5a:3d:d5:fb:83:44:4b:2f:58:89:35:79:e1:ca:e4:
                    d6:58:bd:9c:0e:1d:7f:f5:5b:11:f9:9f:f7:be:20:
                    8c:98:31:d9:5a:03:9a:ff:6d:2b:14:f0:67:b4:16:
                    61:a1:f1:cd:e6:cc:b5:cb:22:8b:d1:1f:82:f7:1d:
                    1c:17:90:cd:ca:eb:f8:08:30:b0:9c:59:3e:3d:05:
                    7e:b3:00:fb:c3:4c:bd:23:85:44:c6:3a:85:97:7c:
                    95:ab:39:c5:9d:e5:f5:18:3f:93:e9:26:86:d1:46:
                    6a:16:82:d9:5d:09:5e:10:38:e2:68:8c:f9:6f:32:
                    f9:73:b7:33:2a:98:c0:fb:a4:98:d8:66:d9:f6:d4:
                    87:2d:5b:fc:d8:43:aa:4d:a2:68:e2:f8:6a:67:be:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:47:71:96:D2:F1:C1:74:25:82:E6:EF:5D:18:2F:D2:3B:BF:00:44
            X509v3 Authority Key Identifier:
                keyid:D0:17:4B:E4:26:CA:45:11:34:37:54:DE:A3:7D:6A:36:0A:34:A9:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BdL5CbKRRE0N1Teo31qNgo0qbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe137-0cf3-4962-8a1b-e80c729ed19f/1/0BdL5CbKRRE0N1Teo31qNgo0qbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:c1:68:ca:14:a0:78:06:2e:6d:d9:69:ab:cd:13:a2:b8:
         12:b9:e6:85:b1:c9:95:95:5c:b0:d1:13:55:6c:0c:6d:a6:a1:
         82:d0:7e:d8:40:1c:f9:c6:14:e7:ff:7f:27:41:f6:2f:6f:96:
         59:5e:6a:da:72:28:3e:0f:38:52:78:5f:8f:a9:00:d2:1d:b7:
         83:ba:d3:9f:02:11:f6:2a:d1:2b:ae:7d:24:4b:a2:8f:27:3f:
         2e:4b:60:a7:45:6d:0e:b2:a4:c4:63:c2:60:47:6a:83:23:1b:
         9b:e8:34:e3:1c:47:a4:1b:ac:3a:00:ca:14:a1:80:19:d9:3a:
         59:3c:36:21:73:4d:64:a7:3d:60:ea:43:04:75:15:2e:13:de:
         98:ba:6e:55:bf:e1:c4:78:80:9f:13:08:48:be:0e:ee:37:2b:
         d7:26:02:de:a0:26:f1:76:8b:a3:7d:a5:78:6c:67:07:03:4a:
         e9:b6:5c:4b:28:ad:c8:c4:bc:66:5f:3d:01:32:7a:de:5d:d2:
         e9:f3:c9:1a:ed:9f:e9:ad:d9:c4:94:9e:bf:dd:10:70:e2:e7:
         2e:47:45:ae:0d:a8:bb:d7:0c:a8:5e:23:cd:b3:e8:af:56:06:
         2a:ad:ff:da:6a:11:76:5a:d7:ff:bd:91:16:4d:2c:6a:e9:f8:
         6d:f7:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----