Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/97a97e-3049-4c67-b723-df4c7b681ef9/1/rt4nRYEvCIGbEGJid-jdNLikhvY.mft
File:                     rt4nRYEvCIGbEGJid-jdNLikhvY.mft (raw, json)
Hash identifier:          /LHjX+dK7tTS0AZ1H07odLtPScRs3rbEUDcmriERwQc=
Subject key identifier:   83:12:36:93:45:3C:A3:DB:35:74:55:B2:E5:E8:B4:4D:BA:A6:E9:50
Authority key identifier: AE:DE:27:45:81:2F:08:81:9B:10:62:62:77:E8:DD:34:B8:A4:86:F6
Certificate issuer:       /CN=aede2745812f08819b10626277e8dd34b8a486f6
Certificate serial:       0190C7DCFB5250F6041C323401B157F50D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rt4nRYEvCIGbEGJid-jdNLikhvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/97a97e-3049-4c67-b723-df4c7b681ef9/1/rt4nRYEvCIGbEGJid-jdNLikhvY.mft
Manifest number:          09E3
Signing time:             Thu 18 Jul 2024 22:01:06 +0000
Manifest this update:     Thu 18 Jul 2024 22:01:06 +0000
Manifest next update:     Fri 19 Jul 2024 22:01:06 +0000
Files and hashes:         1: rt4nRYEvCIGbEGJid-jdNLikhvY.crl (hash: REbR8CZgDQLG79C0cstzZeNTFeXxGgBpJjPFxXQJshg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c7:dc:fb:52:50:f6:04:1c:32:34:01:b1:57:f5:0d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aede2745812f08819b10626277e8dd34b8a486f6
        Validity
            Not Before: Jul 18 22:01:06 2024 GMT
            Not After : Jul 19 22:01:06 2024 GMT
        Subject: CN=83123693453ca3db357455b2e5e8b44dbaa6e950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:18:dc:55:f9:95:34:2d:3e:61:dd:cf:2b:
                    a8:68:6e:df:b6:b1:c9:89:a6:d3:b8:f4:fb:20:b2:
                    ff:c6:29:71:e2:3a:65:71:42:f1:f7:5b:e9:20:11:
                    1d:a2:31:c4:35:fc:6d:33:12:41:6b:6e:6a:36:43:
                    ec:df:c8:3d:b8:f0:a0:f8:e0:60:67:b5:49:07:48:
                    a9:bc:37:98:2c:dd:40:0c:09:77:7f:0a:85:ec:5b:
                    27:2a:6f:d4:3e:4f:dd:89:d9:e2:43:9a:ec:19:ea:
                    a2:26:63:bd:9d:e7:d6:fa:af:d3:e0:a2:ab:4a:76:
                    19:c4:a9:49:49:ee:99:d4:04:4a:25:4d:25:53:a6:
                    c1:6f:e5:ca:0e:5a:39:1d:fe:93:3d:ae:22:6c:08:
                    2f:c9:2e:c8:e9:31:c3:83:e7:8f:31:09:cb:75:4a:
                    c1:dc:27:7b:c1:c7:98:31:cd:90:55:23:1d:12:f5:
                    f7:30:1d:52:c0:ac:ec:30:ce:ee:28:b0:0e:66:50:
                    c8:a6:9a:cb:2d:ef:bd:ba:c7:59:bb:5b:af:35:bc:
                    3c:4b:ba:2b:90:91:02:45:65:85:a3:f9:2e:f3:bf:
                    56:b2:7d:cc:6c:de:50:ab:a1:8c:0d:d7:a1:e4:34:
                    cf:2d:d3:79:d5:e4:fa:cf:04:6a:b9:a6:7c:d2:f8:
                    f3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:12:36:93:45:3C:A3:DB:35:74:55:B2:E5:E8:B4:4D:BA:A6:E9:50
            X509v3 Authority Key Identifier:
                keyid:AE:DE:27:45:81:2F:08:81:9B:10:62:62:77:E8:DD:34:B8:A4:86:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rt4nRYEvCIGbEGJid-jdNLikhvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/97a97e-3049-4c67-b723-df4c7b681ef9/1/rt4nRYEvCIGbEGJid-jdNLikhvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/97a97e-3049-4c67-b723-df4c7b681ef9/1/rt4nRYEvCIGbEGJid-jdNLikhvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:58:d9:14:c0:20:ef:d1:cb:1c:72:6a:85:1b:98:d5:d3:
         06:08:a1:ea:09:d3:d4:ea:f9:9b:f1:ea:3f:19:5f:0b:d8:3b:
         95:47:55:02:46:ce:76:05:bb:cb:1c:2f:5b:f5:13:d4:13:6d:
         05:cb:a8:1b:49:3e:7b:1a:4c:3a:3d:8f:19:50:0c:49:f0:bd:
         d8:57:b0:1f:f3:55:d3:c4:a5:e4:b7:71:76:12:5f:71:92:57:
         60:4a:4c:7c:f1:c2:d8:3c:85:ab:c5:4e:ff:61:85:a7:ad:27:
         02:f5:5e:f8:7b:55:f3:f2:84:5b:96:45:3f:77:9f:61:95:73:
         f4:de:aa:6d:27:0f:b8:b0:6c:b1:18:bc:f6:92:5a:51:00:c1:
         34:6d:45:ba:4b:d6:4b:9e:9b:e9:f1:43:40:dd:05:23:8f:3d:
         5d:1a:a4:04:cb:49:ec:40:ae:c9:7c:f3:4a:aa:50:57:cc:56:
         22:54:a0:0a:9e:17:53:e0:07:f4:53:46:12:44:e5:eb:6e:4e:
         86:22:f4:2c:6f:00:a6:af:50:cf:21:98:b5:89:fb:ab:70:a4:
         0a:cb:2d:50:6f:01:5b:c9:0e:3e:b6:e0:0a:cd:cb:6c:74:1c:
         96:ab:c3:44:44:a7:98:5b:91:07:b6:cc:91:75:52:21:0e:52:
         d2:37:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----