Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/986fd2-fa11-4a75-8902-ad51f275d60b/1/9jJzMW5qx4_yf_eX6DTink2C-Ik.mft
File:                     9jJzMW5qx4_yf_eX6DTink2C-Ik.mft (raw, json)
Hash identifier:          etUSB8AyXqgHTIJPpQV3ho+9I9Wd64kwojnbD+/hjiE=
Subject key identifier:   B2:23:7D:67:2D:A2:B4:74:C5:63:BE:9B:C6:A0:3B:BF:DD:63:E2:A5
Authority key identifier: F6:32:73:31:6E:6A:C7:8F:F2:7F:F7:97:E8:34:E2:9E:4D:82:F8:89
Certificate issuer:       /CN=f63273316e6ac78ff27ff797e834e29e4d82f889
Certificate serial:       0192AF2A19E9D67D5AA6A3FF3A9AAEFF83A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9jJzMW5qx4_yf_eX6DTink2C-Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/986fd2-fa11-4a75-8902-ad51f275d60b/1/9jJzMW5qx4_yf_eX6DTink2C-Ik.mft
Manifest number:          043B
Signing time:             Mon 21 Oct 2024 13:00:24 +0000
Manifest this update:     Mon 21 Oct 2024 13:00:24 +0000
Manifest next update:     Tue 22 Oct 2024 13:00:24 +0000
Files and hashes:         1: 9jJzMW5qx4_yf_eX6DTink2C-Ik.crl (hash: YZ2q1BItXE+NRaUqs6J9/6Uqqaxj01MIeGC7Bt/ZMk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:2a:19:e9:d6:7d:5a:a6:a3:ff:3a:9a:ae:ff:83:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63273316e6ac78ff27ff797e834e29e4d82f889
        Validity
            Not Before: Oct 21 13:00:24 2024 GMT
            Not After : Oct 22 13:00:24 2024 GMT
        Subject: CN=b2237d672da2b474c563be9bc6a03bbfdd63e2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:c3:b4:8f:88:ad:90:8b:4b:d0:9f:ff:5c:
                    d6:03:1c:59:7d:ae:28:f9:d5:f9:de:9e:3e:93:94:
                    09:28:7f:49:a8:07:f5:80:29:2a:80:7b:1a:ce:e0:
                    12:bc:29:8c:74:3f:11:73:99:1f:57:29:39:6f:03:
                    2b:1c:7c:a0:d5:83:f6:3c:08:e6:bc:56:82:a0:de:
                    86:e2:87:93:08:2b:d4:3d:73:56:7c:bb:76:0c:33:
                    9c:06:44:14:12:63:13:3c:64:41:c6:42:d3:30:e3:
                    48:10:9a:9c:7c:f3:c2:55:8f:c9:d3:cd:11:94:98:
                    8c:b0:3e:67:72:8d:56:73:fc:5e:e1:29:01:a6:2a:
                    e4:fc:38:05:69:fe:ba:85:e4:00:28:40:41:2c:0c:
                    cf:8a:d3:21:37:5c:c8:bf:18:56:23:66:15:af:56:
                    bc:46:ab:bb:d1:87:c0:ab:92:d1:ce:a6:4c:d0:ef:
                    52:e5:2e:75:2f:c1:4b:b1:10:30:56:5e:2f:a9:4b:
                    42:02:11:a0:6d:77:21:ac:62:83:ef:e3:ce:24:82:
                    67:cf:79:d0:6a:e0:1b:c0:38:93:ac:60:31:bc:ff:
                    52:9b:e1:8d:0a:85:14:3a:20:1a:f7:e8:ae:4d:c9:
                    32:98:31:f8:75:04:e8:45:55:42:51:dd:6e:f0:d2:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:7D:67:2D:A2:B4:74:C5:63:BE:9B:C6:A0:3B:BF:DD:63:E2:A5
            X509v3 Authority Key Identifier:
                keyid:F6:32:73:31:6E:6A:C7:8F:F2:7F:F7:97:E8:34:E2:9E:4D:82:F8:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jJzMW5qx4_yf_eX6DTink2C-Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/986fd2-fa11-4a75-8902-ad51f275d60b/1/9jJzMW5qx4_yf_eX6DTink2C-Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/986fd2-fa11-4a75-8902-ad51f275d60b/1/9jJzMW5qx4_yf_eX6DTink2C-Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:47:a8:f2:94:16:66:aa:a5:42:7e:86:2c:94:43:9e:27:
         78:6b:44:76:8c:dc:96:03:22:8d:b4:fa:9e:ec:d7:e6:ad:ce:
         06:2b:75:8d:10:1c:ab:33:4f:79:67:9b:21:5a:b0:c0:f6:a3:
         1f:47:af:21:46:2e:68:b8:c6:ab:6b:6f:66:0c:4d:9a:ab:68:
         92:8e:e8:7d:19:a4:e1:51:be:51:68:13:35:b3:3b:29:03:6d:
         a9:e7:23:48:36:86:0e:ea:cd:6f:e5:ef:52:17:01:b4:8a:6f:
         a2:3a:c7:bf:46:c0:e7:83:09:2b:01:25:1f:30:69:1b:7f:f1:
         c2:8f:98:59:29:bb:90:82:c9:f1:0d:71:33:ee:65:26:c7:db:
         64:b3:7c:95:33:c2:38:fb:d1:d8:90:54:39:43:88:24:a5:2c:
         0a:4e:47:a4:7b:b3:ad:89:81:b5:d5:d0:a2:77:06:83:1d:b9:
         a7:07:d2:cd:03:07:ae:bf:b9:23:c7:db:11:b2:d7:c9:b5:bb:
         a1:cf:08:df:47:67:4b:e3:4d:7c:89:a1:96:a4:06:a0:ee:50:
         73:3c:86:84:5a:f3:40:c9:f6:60:17:dd:25:7e:ae:de:7b:dd:
         a2:fb:48:c3:cc:ac:10:ca:53:d2:14:80:e7:19:40:7c:b8:97:
         17:f7:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----