Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
File:                     Upvm9FzWQYii0KNkSnL06EKmOmk.mft (raw, json)
Hash identifier:          t4FkEJYFdbp4yUxLU9HxfUnrc9zOhMtt6pYobltosT0=
Subject key identifier:   5F:7A:9E:96:E5:24:FF:CA:58:E7:06:1C:EA:40:87:B4:42:29:7E:3B
Authority key identifier: 52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69
Certificate issuer:       /CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
Certificate serial:       01934783AEC0874912EF810A20401F97D2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft
Manifest number:          0218
Signing time:             Wed 20 Nov 2024 03:00:32 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:32 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:32 +0000
Files and hashes:         1: Upvm9FzWQYii0KNkSnL06EKmOmk.crl (hash: wz74fOKFisZL/QBlQdrfAVCLZ6+E730tN5tVY8soPLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:83:ae:c0:87:49:12:ef:81:0a:20:40:1f:97:d2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529be6f45cd64188a2d0a3644a72f4e842a63a69
        Validity
            Not Before: Nov 20 03:00:32 2024 GMT
            Not After : Nov 21 03:00:32 2024 GMT
        Subject: CN=5f7a9e96e524ffca58e7061cea4087b442297e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:c2:d0:7c:e8:f3:f5:b8:2d:c3:ce:10:7e:
                    59:94:d5:bf:ba:8c:a5:90:3a:98:7a:25:45:c1:d1:
                    d0:3f:fe:7f:02:4c:2c:7f:76:02:b6:97:e6:8a:63:
                    92:75:bc:7b:06:fb:da:fc:a8:66:cb:3f:21:e1:6e:
                    e1:7c:09:c4:41:dc:a2:a6:ff:5e:27:24:b2:dc:3f:
                    43:e1:97:9e:f1:04:a9:ad:46:da:64:3a:c4:57:d4:
                    e4:f9:71:d4:2c:0b:45:70:00:de:8e:e1:e0:cc:54:
                    49:79:80:7f:64:01:e3:e0:da:4b:b8:9a:44:04:b4:
                    d3:b0:28:2d:78:14:1c:24:18:b1:4d:91:ca:e0:af:
                    2f:08:99:6b:14:64:37:2a:25:59:d1:6a:1a:ca:12:
                    89:0d:bc:5e:c8:84:9f:83:48:08:c1:fa:a2:df:ec:
                    82:7d:90:bf:38:9d:b3:38:fb:38:ae:aa:d4:db:0c:
                    da:92:7c:f2:44:04:2d:9d:ab:d2:9d:f9:57:bb:f9:
                    02:79:0a:10:54:e4:6f:0b:5b:29:b6:d0:8b:25:4e:
                    b3:ca:51:80:98:22:22:a4:58:3c:55:3d:fa:31:f2:
                    0a:b3:41:48:96:7b:b3:8e:01:9e:bc:b0:86:10:f9:
                    f7:76:e1:24:44:12:3c:92:14:48:5d:ce:0c:7a:95:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:9E:96:E5:24:FF:CA:58:E7:06:1C:EA:40:87:B4:42:29:7E:3B
            X509v3 Authority Key Identifier:
                keyid:52:9B:E6:F4:5C:D6:41:88:A2:D0:A3:64:4A:72:F4:E8:42:A6:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Upvm9FzWQYii0KNkSnL06EKmOmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Upvm9FzWQYii0KNkSnL06EKmOmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a6:3a:cb:60:81:3c:94:cf:e5:6f:e7:e3:02:1c:53:b5:e4:
         9e:52:21:bc:4c:84:0c:6d:44:b8:0d:d1:15:6c:b5:31:fe:1c:
         4e:26:f2:ec:e2:86:a1:77:f4:46:27:fa:2f:7e:4a:1d:cf:99:
         99:b4:68:22:50:8f:04:31:c4:73:e3:99:1a:ae:83:6c:3b:30:
         9f:61:0a:a7:a7:ee:71:83:22:31:99:21:e0:43:b4:1e:41:33:
         64:97:04:bf:23:56:bb:6d:fd:a8:d4:55:03:dd:34:64:8d:f5:
         e6:65:26:b8:ec:d1:0b:23:dc:5b:ec:f3:77:bd:f9:a6:5a:d6:
         d1:14:5a:f0:bf:ef:f7:88:22:d2:33:95:c0:ed:06:74:78:2f:
         68:d6:f0:05:e5:14:14:58:d6:b8:af:80:d1:e6:02:69:da:a7:
         7d:b2:c2:6f:0b:bb:b5:b5:36:ab:28:a0:12:cc:be:68:b9:b9:
         aa:e5:b9:5e:f4:60:52:69:c4:4b:10:25:5c:5f:70:9e:91:52:
         b9:4f:1b:72:09:c9:dc:84:15:38:f1:76:69:a8:1b:45:eb:a1:
         8b:b0:9d:8a:85:99:25:a6:05:95:58:5f:0a:bf:d0:d3:84:cb:
         71:8e:11:6e:05:8e:3a:01:72:1d:a6:72:7e:f9:e8:78:c8:aa:
         f4:06:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----