Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft
File:                     iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft (raw, json)
Hash identifier:          ceoFK9Bk9ZLBpVEth9rIENyJoub0uKj9JQC3/x+hqW0=
Subject key identifier:   7B:A3:4F:BC:51:03:D3:C0:1D:22:A4:50:78:9E:D5:5E:BD:E2:C2:84
Authority key identifier: 88:B6:81:CE:CE:A5:85:F5:2E:57:0D:75:8F:5B:E6:27:42:16:00:55
Certificate issuer:       /CN=88b681cecea585f52e570d758f5be62742160055
Certificate serial:       01934716DB2DFE9F975CD9F2680F1D4F0626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLaBzs6lhfUuVw11j1vmJ0IWAFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft
Manifest number:          0D08
Signing time:             Wed 20 Nov 2024 01:01:40 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:40 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:40 +0000
Files and hashes:         1: iLaBzs6lhfUuVw11j1vmJ0IWAFU.crl (hash: FBCV+tFQSvMOnENNCo2UpskxM882OAQ8hwuV6PD2tI0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:db:2d:fe:9f:97:5c:d9:f2:68:0f:1d:4f:06:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b681cecea585f52e570d758f5be62742160055
        Validity
            Not Before: Nov 20 01:01:40 2024 GMT
            Not After : Nov 21 01:01:40 2024 GMT
        Subject: CN=7ba34fbc5103d3c01d22a450789ed55ebde2c284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:5e:0d:4f:a5:cb:b9:7a:54:97:e1:30:aa:
                    74:44:56:e4:a6:5d:03:a8:c0:d3:88:3a:e5:0d:e8:
                    3f:93:0d:5a:c1:61:fa:f4:11:71:d0:f4:03:1c:e3:
                    df:cc:9f:19:72:5c:36:2e:76:04:e7:dc:77:24:9f:
                    6a:25:9e:c0:16:88:46:b8:7f:01:ac:ff:55:f9:41:
                    d9:45:f7:b5:7d:a1:f9:b8:2e:fc:f7:5f:62:47:bc:
                    e8:88:b2:fa:74:e2:bc:cc:c7:d5:00:54:5c:26:ef:
                    8b:f7:b9:61:ce:f2:da:ff:c5:19:a3:18:b5:16:19:
                    ac:b5:e3:e2:65:b1:f2:b1:97:7e:e6:a1:60:78:48:
                    39:c9:30:74:fa:e6:89:2a:08:52:20:6f:50:79:2b:
                    84:54:a4:99:fe:0a:28:71:f0:c7:c0:c5:a1:2f:59:
                    84:52:53:2d:f9:fa:db:93:ea:f0:9c:d0:57:fb:7d:
                    3d:60:40:52:74:f3:4d:ee:25:67:37:68:4c:cd:1f:
                    92:bb:a0:ed:5b:ac:b3:2f:71:55:43:35:ad:d5:dd:
                    1c:f3:37:39:60:69:91:cf:e2:fa:9e:55:b5:b7:8b:
                    f0:31:1b:68:9c:72:aa:7a:df:8a:6f:58:c1:ec:38:
                    32:2e:e3:97:cb:b0:a8:70:de:04:8a:48:25:d3:ad:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:4F:BC:51:03:D3:C0:1D:22:A4:50:78:9E:D5:5E:BD:E2:C2:84
            X509v3 Authority Key Identifier:
                keyid:88:B6:81:CE:CE:A5:85:F5:2E:57:0D:75:8F:5B:E6:27:42:16:00:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLaBzs6lhfUuVw11j1vmJ0IWAFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a00987-f22c-4ee5-a757-d2309b501704/1/iLaBzs6lhfUuVw11j1vmJ0IWAFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:50:ef:30:71:c0:a8:b0:c4:75:4c:35:ea:f9:4b:f4:e6:3e:
         7a:7c:f7:17:1f:c9:92:c0:42:e3:1d:8a:53:66:d1:fa:0b:d3:
         19:32:ad:9d:31:f7:c8:7e:4e:96:35:64:8c:bc:67:c9:6f:2a:
         45:14:4f:ac:47:4f:65:b5:fd:55:62:d2:7a:98:14:45:9c:7e:
         f0:76:3e:56:56:15:54:db:4a:7e:c1:50:d1:cd:ea:aa:7b:2c:
         dd:af:3d:12:6f:52:26:42:64:64:a7:c7:42:b3:29:af:60:7f:
         e7:05:c2:9e:f1:b1:35:20:51:2f:d5:af:1f:5b:72:93:87:9d:
         45:64:90:87:85:a2:6d:78:98:99:81:61:1a:be:eb:19:e6:01:
         c5:02:08:3f:15:3a:00:1c:a4:c2:bd:26:89:e8:08:4b:8d:e1:
         26:23:e5:10:17:f7:c6:2e:71:46:6a:38:fe:ec:71:e7:a7:b3:
         4b:1e:e9:79:66:77:7b:c4:0a:aa:31:db:ea:39:e1:2b:c0:e7:
         05:12:cd:f0:d3:fe:18:da:a1:e0:e0:53:d3:4c:ed:f9:4b:4f:
         9f:1b:1c:37:39:90:84:29:98:49:d0:38:4b:fa:b8:30:1d:32:
         6c:80:57:7f:30:12:cd:4a:ed:d3:f4:eb:56:6e:c5:a3:01:9d:
         b2:1a:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----