Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/37f738-2a5a-445d-9784-31340dee82a4/1/ESvUHbMqYwfU8DW802AfToe9UfM.mft
File:                     ESvUHbMqYwfU8DW802AfToe9UfM.mft (raw, json)
Hash identifier:          RcP1UqBx7MUxYyIDLx8hdqKLKLg+T9e5QvvRtrXzGfo=
Subject key identifier:   6C:C7:2E:70:23:62:DF:4A:8A:7E:46:61:2B:99:3A:29:2B:A1:66:B3
Authority key identifier: 11:2B:D4:1D:B3:2A:63:07:D4:F0:35:BC:D3:60:1F:4E:87:BD:51:F3
Certificate issuer:       /CN=112bd41db32a6307d4f035bcd3601f4e87bd51f3
Certificate serial:       01900160BE01322A7A3685B201F77D978410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESvUHbMqYwfU8DW802AfToe9UfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/37f738-2a5a-445d-9784-31340dee82a4/1/ESvUHbMqYwfU8DW802AfToe9UfM.mft
Manifest number:          082C
Signing time:             Mon 10 Jun 2024 09:00:35 +0000
Manifest this update:     Mon 10 Jun 2024 09:00:35 +0000
Manifest next update:     Tue 11 Jun 2024 09:00:35 +0000
Files and hashes:         1: ESvUHbMqYwfU8DW802AfToe9UfM.crl (hash: ZmSoRg5T8FdxUj+T69JiRyWhqFjSsApISpM2WH8LzLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:01:60:be:01:32:2a:7a:36:85:b2:01:f7:7d:97:84:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112bd41db32a6307d4f035bcd3601f4e87bd51f3
        Validity
            Not Before: Jun 10 09:00:35 2024 GMT
            Not After : Jun 11 09:00:35 2024 GMT
        Subject: CN=6cc72e702362df4a8a7e46612b993a292ba166b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:ff:8a:2c:65:c8:65:9a:44:f8:3c:58:fe:
                    b4:33:57:7c:f9:fb:ca:e3:a3:1a:71:0b:3a:7e:fd:
                    8e:e5:ea:f8:65:24:9c:2d:38:12:04:31:aa:21:28:
                    52:c2:bc:60:fc:26:50:75:f3:2e:fc:55:20:bb:97:
                    53:32:0e:7c:ae:63:8a:de:e5:dd:6c:a1:3f:9b:34:
                    33:77:19:ff:77:51:b8:45:02:1a:2d:25:4f:e4:2d:
                    f4:e6:41:28:f8:30:c9:fa:f4:af:9d:40:89:0e:7b:
                    ea:7e:ff:df:31:e5:c3:f6:17:87:d7:7f:22:e2:7c:
                    db:62:2d:b3:4e:8d:50:89:65:41:b2:8e:5a:60:e8:
                    0d:91:7b:d1:4f:49:85:e6:6e:e4:56:cc:86:7b:ea:
                    4b:db:27:fb:65:c9:fd:f1:f1:4a:db:66:3c:11:16:
                    2c:66:eb:eb:05:da:38:da:05:5b:eb:c5:11:01:e4:
                    aa:12:b4:44:a0:da:80:6b:c3:88:60:ca:83:10:63:
                    fa:5f:dd:48:e4:71:86:d0:80:ca:b5:4d:f7:3e:1b:
                    76:43:cb:c0:5f:32:69:b0:ea:88:74:83:a2:ad:fc:
                    a7:0a:96:bf:f4:ac:45:31:e0:93:d7:93:92:81:ef:
                    87:fc:cc:cd:30:ce:4d:fa:11:07:35:ee:e7:45:11:
                    32:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C7:2E:70:23:62:DF:4A:8A:7E:46:61:2B:99:3A:29:2B:A1:66:B3
            X509v3 Authority Key Identifier:
                keyid:11:2B:D4:1D:B3:2A:63:07:D4:F0:35:BC:D3:60:1F:4E:87:BD:51:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESvUHbMqYwfU8DW802AfToe9UfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/37f738-2a5a-445d-9784-31340dee82a4/1/ESvUHbMqYwfU8DW802AfToe9UfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/37f738-2a5a-445d-9784-31340dee82a4/1/ESvUHbMqYwfU8DW802AfToe9UfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:88:db:0f:d1:91:96:c3:d3:f9:1a:24:6e:40:52:97:b6:40:
         6b:3f:ec:27:50:d5:41:d3:3b:2a:b6:4d:c2:bf:37:9b:47:a9:
         22:10:ac:de:d1:fe:6b:6b:20:2b:16:0a:36:69:71:fe:73:10:
         c7:d0:ac:60:d7:dc:b5:df:48:6d:af:2d:9e:84:e6:45:b5:09:
         0d:91:fb:02:48:b6:19:16:82:4b:1d:9a:bf:74:fb:50:9b:59:
         f2:24:65:8f:24:94:7c:3d:7b:bb:fc:de:d3:83:ca:0e:67:a1:
         0b:a5:dc:d0:68:25:73:bb:c8:a3:29:e3:eb:fa:01:92:82:64:
         5f:df:47:71:af:83:f8:68:e8:e7:dc:98:32:78:c4:c0:1f:d1:
         8d:19:d6:fd:fa:5b:03:f5:de:31:24:4f:03:37:9e:f3:40:da:
         5a:07:36:31:dd:8b:72:11:01:09:af:9d:e6:a9:cf:9e:10:70:
         54:63:51:c3:f4:ff:6b:4e:d6:24:14:6b:41:d1:6b:95:8b:f9:
         bd:83:37:56:da:4f:02:e8:8c:cb:2d:52:39:23:6d:36:8a:0c:
         1d:1c:4f:47:53:91:ae:1a:34:22:7e:f1:31:e8:3f:35:fe:90:
         93:5d:5d:68:07:d3:5a:ea:cc:0f:19:0e:b7:7a:32:aa:41:64:
         b5:64:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----