Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.mft
File:                     k8iuIQ6km06tpIsdoiICPHNNMhE.mft (raw, json)
Hash identifier:          a+yXXzNrBJrwBkcShMz72rW/t2OU7XkxEYyEuDz48gA=
Subject key identifier:   C9:F3:86:67:7D:F2:9E:98:77:17:6B:CD:A3:87:D0:6D:CB:BF:14:FA
Authority key identifier: 93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
Certificate issuer:       /CN=93c8ae210ea49b4eada48b1da222023c734d3211
Certificate serial:       01934716138BFB743FD9C7C2555C8DCD885B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.mft
Manifest number:          1367
Signing time:             Wed 20 Nov 2024 01:00:49 +0000
Manifest this update:     Wed 20 Nov 2024 01:00:49 +0000
Manifest next update:     Thu 21 Nov 2024 01:00:49 +0000
Files and hashes:         1: DCbKRmRVLaR0v4cPlePhnE9lVR4.roa (hash: sqXNJ4ys9BGIqxLtfhKAhTEnBWaTQv73MrJNBd6rc7o=)
                          2: k8iuIQ6km06tpIsdoiICPHNNMhE.crl (hash: k+VQ52Ad7E2R+wi07RuQnwXiuFsf+gLqs7mmJlPS8IM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:13:8b:fb:74:3f:d9:c7:c2:55:5c:8d:cd:88:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c8ae210ea49b4eada48b1da222023c734d3211
        Validity
            Not Before: Nov 20 01:00:49 2024 GMT
            Not After : Nov 21 01:00:49 2024 GMT
        Subject: CN=c9f386677df29e9877176bcda387d06dcbbf14fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:e4:ca:48:26:a3:43:3e:4d:22:a1:c3:73:
                    95:4a:eb:74:d2:8f:ea:0a:ac:4b:67:9b:72:5e:86:
                    73:75:71:31:24:2a:f7:a0:b7:21:36:9b:14:06:cc:
                    72:27:eb:df:ef:e9:2b:8c:a4:0a:00:84:ee:d2:33:
                    85:29:57:88:b0:63:e5:f5:b9:e6:d6:b8:c8:8c:c3:
                    8c:99:20:39:bb:e2:7c:04:88:d2:cb:40:6f:83:ed:
                    75:b1:9a:20:61:54:7d:fe:78:8e:ea:2f:42:b8:31:
                    27:18:53:22:bb:30:6b:99:82:e1:d2:88:06:27:08:
                    bf:c7:08:47:8e:a4:46:32:dd:91:5d:ee:a1:b8:b4:
                    f6:44:9d:45:df:f0:d7:b2:11:1e:33:f0:5a:5e:a7:
                    af:8a:92:86:f7:94:e2:c1:fd:69:1b:ba:22:36:c5:
                    10:8f:d7:64:c3:66:c6:0f:f6:95:e2:5f:1c:71:b6:
                    2f:6a:6e:56:b6:e3:0d:bf:10:ce:3d:ea:4a:1b:ac:
                    75:8e:11:bc:e9:54:3d:ad:95:9a:bd:c1:93:bb:cc:
                    3c:0a:58:41:26:84:c4:ec:0f:0c:0a:0d:d7:a7:23:
                    d0:6f:c9:81:99:51:ed:7d:25:28:e3:ec:ec:24:ba:
                    be:4e:9b:e6:87:65:e1:6f:67:18:23:8a:69:79:2b:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F3:86:67:7D:F2:9E:98:77:17:6B:CD:A3:87:D0:6D:CB:BF:14:FA
            X509v3 Authority Key Identifier:
                keyid:93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:15:a7:16:3f:00:4f:e3:b5:98:99:12:df:67:a2:d6:19:
         c4:8f:59:87:5c:b5:0c:1f:dc:61:a2:b0:41:98:ec:da:07:ad:
         ab:96:16:dc:5d:dc:e0:96:79:f5:93:1a:25:dd:86:2b:75:4d:
         3e:0d:1e:87:da:3d:e5:59:55:c6:7d:17:73:ee:ec:fe:f0:85:
         7e:9e:42:7f:91:da:f4:9c:74:bd:53:f9:0c:ce:c2:be:d2:53:
         39:3f:4b:45:87:3b:a7:b2:ed:b5:70:bf:8f:81:df:42:d8:a5:
         f9:dd:cf:0a:30:af:ee:d9:0b:16:71:0f:d6:49:d4:6f:56:1e:
         37:79:7b:44:2d:c6:67:08:e5:d0:c0:da:92:27:dd:91:4f:f9:
         cc:91:ad:1c:af:9b:79:a3:bf:1b:2d:46:8e:2f:b1:2c:6c:29:
         73:0d:ed:61:77:03:5b:7f:4c:43:da:c9:7f:90:59:95:42:e6:
         ea:4a:b5:6c:e9:be:81:77:a8:cf:55:9b:97:49:9a:e3:10:58:
         4e:dc:36:c5:f1:7e:fc:93:6d:38:ff:43:c1:7f:a2:d8:ba:ed:
         b7:1b:f6:63:46:b2:42:11:4d:14:5a:72:c7:b6:b5:17:2e:e0:
         d2:d6:b0:54:25:4b:ac:d0:a7:25:d8:4f:f1:a4:fb:54:28:aa:
         ae:ea:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----