Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
File:                     9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft (raw, json)
Hash identifier:          JpgA+L3ACTxyG5aQxhv/ix1Iqd6F2xCWmCP6iqq22vw=
Subject key identifier:   31:3C:D0:5B:3C:84:20:D9:42:A5:B0:24:14:CB:F1:C4:5A:04:EA:BD
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Certificate issuer:       /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial:       019345CC2D1923336FD3A9BEAC816CFBC938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
Manifest number:          08E2
Signing time:             Tue 19 Nov 2024 19:00:29 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:29 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:29 +0000
Files and hashes:         1: 0UkjP81nrzCiWKjblCJitWjxblk.roa (hash: iBM1SN6WNO6UuBGgecxyCBXq+z69v0LZMmmiK+5rk9A=)
                          2: 4pZDfLtTMsuZu9B01GQAPGaFf_w.roa (hash: Jrmbo91ut29s5OUL1zxZu0vF8ezQ/eJyH1hMEP3PDno=)
                          3: 8ssogR7nMUn5efygmsx6N4WdAe8.roa (hash: U3nJDP4e5EaeW899bYoThwxmq9UZWF+MGDX5jfg4+Cs=)
                          4: 9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl (hash: vzsEiEHErIx10vkTln47rHNW2s029nZn3XbBRgz++ZY=)
                          5: kE3D2e8OM6otRifKpgEat1C8JY4.roa (hash: I9tAwH72MsVuzbS441YAKRk3T6oRbDt1HkHcPMwmoJ8=)
                          6: sMdzy8LAFreZjyO4_DZjNB7rus4.roa (hash: jaIWA5qELfpwLwgw+ZqEt2FBDx43bmq5JkiHHnmsPsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cc:2d:19:23:33:6f:d3:a9:be:ac:81:6c:fb:c9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
        Validity
            Not Before: Nov 19 19:00:29 2024 GMT
            Not After : Nov 20 19:00:29 2024 GMT
        Subject: CN=313cd05b3c8420d942a5b02414cbf1c45a04eabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:ff:54:d0:24:ec:2b:78:6a:28:61:30:e5:
                    2a:36:b5:27:df:20:d0:c4:29:ad:4e:3e:90:85:43:
                    ec:89:95:39:6e:d0:1d:c4:ce:ae:27:77:15:0c:82:
                    53:46:d6:21:2d:ea:3f:88:95:ad:7f:c2:a2:34:f8:
                    68:d1:e3:92:1c:0e:41:ea:27:33:95:6f:fe:d8:52:
                    a9:ef:ec:7d:48:95:b1:a5:f2:76:23:d3:47:87:08:
                    98:01:49:2d:0e:64:c6:80:67:13:c1:99:ab:e2:0f:
                    9f:c3:4a:01:b8:e8:aa:93:98:ee:e8:00:eb:28:14:
                    60:10:e5:be:88:ac:d3:92:83:9d:df:b4:34:42:cb:
                    10:cb:8f:f3:d0:5b:1d:9e:51:0e:21:b2:1d:eb:58:
                    82:52:5c:8c:09:fe:83:50:d4:e0:a0:26:ff:3c:53:
                    a6:35:40:64:de:c7:f0:87:1b:64:74:7d:4d:ce:bc:
                    90:a8:d8:9e:1f:00:8f:62:15:76:28:e1:6b:ee:d1:
                    0e:48:72:40:91:db:28:a0:3a:7c:df:49:15:24:54:
                    ff:9c:69:5e:75:a6:ff:b4:d5:52:84:78:52:81:c6:
                    a8:3c:0a:0c:ad:aa:3a:4a:a6:7a:22:39:d7:38:19:
                    8c:f3:43:69:32:b8:9f:c2:82:94:3a:19:be:55:1a:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3C:D0:5B:3C:84:20:D9:42:A5:B0:24:14:CB:F1:C4:5A:04:EA:BD
            X509v3 Authority Key Identifier:
                keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:aa:b7:22:b8:3b:5a:d5:80:22:82:57:fc:81:0f:69:7b:03:
         5b:9e:62:b3:52:86:65:4c:f0:f8:0e:6c:98:ee:68:a2:8a:ef:
         10:86:35:1a:33:24:bc:6d:0c:4b:b4:b2:0b:b7:00:83:e1:37:
         cf:e8:34:19:16:1c:f2:0d:b3:8b:86:b7:81:05:91:e3:73:b4:
         4f:2d:e9:bf:6e:53:b4:2e:ad:9b:53:9e:4e:b6:48:74:d6:d9:
         5f:e2:c2:13:a0:5e:0e:7d:aa:53:2c:04:27:95:32:f7:a3:fa:
         09:7a:60:6d:b7:c5:be:4b:e2:bd:39:1f:34:80:35:87:79:4f:
         ec:04:7c:60:bf:ea:39:f4:ee:ca:47:28:1f:df:eb:11:1f:6b:
         20:67:8c:08:6c:e6:2e:7b:da:d7:2c:12:62:fb:ab:67:07:0a:
         1d:80:bc:41:30:b8:4a:73:23:de:78:bb:b8:b3:11:97:c8:de:
         00:26:df:0f:95:82:b2:cf:ef:07:6c:d6:15:59:1e:a5:0f:f8:
         cf:21:3c:ef:ef:b3:8b:9e:86:c7:71:e1:f9:e9:d1:48:d3:5a:
         62:fb:32:dc:54:04:d7:4a:4a:90:16:2d:ac:75:9f:71:a4:25:
         ee:e9:a5:d6:60:1e:42:6e:38:c9:74:3e:53:b8:6d:2a:f1:8c:
         28:57:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----