Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/AWT01sNnMtFRgQfYpMUPEP9y7Zw.mft
File:                     AWT01sNnMtFRgQfYpMUPEP9y7Zw.mft (raw, json)
Hash identifier:          mzOdc6RwvPrFRv5ey4lnZHebPFsx+vDP6nhDNUhhYu0=
Subject key identifier:   D8:80:10:58:02:C0:77:03:10:3A:4C:DE:BA:7E:92:E5:D2:E3:02:78
Authority key identifier: 01:64:F4:D6:C3:67:32:D1:51:81:07:D8:A4:C5:0F:10:FF:72:ED:9C
Certificate issuer:       /CN=0164f4d6c36732d1518107d8a4c50f10ff72ed9c
Certificate serial:       01922F82E7749C4280F9B12EFE19D1C499F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWT01sNnMtFRgQfYpMUPEP9y7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/AWT01sNnMtFRgQfYpMUPEP9y7Zw.mft
Manifest number:          01
Signing time:             Thu 26 Sep 2024 18:06:00 +0000
Manifest this update:     Thu 26 Sep 2024 18:06:00 +0000
Manifest next update:     Fri 27 Sep 2024 18:06:00 +0000
Files and hashes:         1: AWT01sNnMtFRgQfYpMUPEP9y7Zw.crl (hash: MBZ3utQjnPFMvUISNtPcrHR/CqHhyUNJOl4GMStklAc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:82:e7:74:9c:42:80:f9:b1:2e:fe:19:d1:c4:99:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0164f4d6c36732d1518107d8a4c50f10ff72ed9c
        Validity
            Not Before: Sep 26 18:06:00 2024 GMT
            Not After : Sep 27 18:06:00 2024 GMT
        Subject: CN=d880105802c07703103a4cdeba7e92e5d2e30278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:9a:96:c1:30:c5:69:fe:83:17:79:ec:57:
                    8c:b1:54:d3:71:86:b5:a1:78:f2:e4:b7:c0:54:48:
                    3c:ea:38:79:95:d2:b9:c2:39:10:d2:82:ed:e4:e8:
                    00:12:2d:ea:54:2d:99:26:5b:a9:d6:e1:f4:5c:a9:
                    e3:60:fd:25:31:ac:b9:fc:c8:16:9e:e3:0b:b9:62:
                    39:3c:9a:cb:aa:43:25:1a:82:dc:16:6e:a2:49:07:
                    45:d2:dd:d5:5e:3c:d8:0b:11:ae:ea:d1:22:2c:08:
                    57:fc:6b:2c:28:06:e2:0d:2a:74:62:f9:f1:4d:e8:
                    dc:6b:52:00:db:ad:52:32:46:a8:5b:eb:62:e2:c6:
                    dd:e0:32:81:6f:ec:36:c9:b6:f0:d7:23:fe:a5:3d:
                    6f:ea:cf:83:10:a7:66:b3:51:5d:1f:0c:2c:f9:2a:
                    6c:2f:a3:0e:44:cf:e8:aa:16:e8:03:e9:05:08:9d:
                    7d:1d:2f:18:73:69:e8:b2:93:62:9a:e4:26:1a:a5:
                    a6:0d:21:c5:6c:24:92:2a:cd:e9:77:d3:54:e9:3a:
                    97:b3:cc:81:a0:2b:cc:79:7c:d2:74:b7:4a:11:85:
                    ab:4d:72:16:40:53:f9:9a:7b:9b:06:ee:93:24:4d:
                    56:e2:c0:43:6f:27:c0:bc:cb:e7:2f:b0:a4:58:6a:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:80:10:58:02:C0:77:03:10:3A:4C:DE:BA:7E:92:E5:D2:E3:02:78
            X509v3 Authority Key Identifier:
                keyid:01:64:F4:D6:C3:67:32:D1:51:81:07:D8:A4:C5:0F:10:FF:72:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWT01sNnMtFRgQfYpMUPEP9y7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/AWT01sNnMtFRgQfYpMUPEP9y7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/30dfe8-d26e-4082-b8ab-dc101dcc21fd/1/AWT01sNnMtFRgQfYpMUPEP9y7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:bc:1b:71:2b:41:46:b3:d2:0e:32:f9:5d:72:a8:4f:aa:
         0e:b2:21:bf:d1:e2:5c:a3:4c:98:80:33:9f:fb:fa:c1:c9:59:
         a6:7e:c5:54:2f:f8:31:b2:e8:b9:97:5a:75:a4:a8:05:ea:04:
         fd:94:40:2f:f1:11:ad:69:d7:2e:58:da:ed:cd:95:ef:46:22:
         fe:2d:8b:ea:bf:b3:97:64:69:97:e3:3c:ab:a4:04:f5:c6:46:
         b5:24:91:e7:6d:45:4f:01:7b:b9:02:b6:de:37:5d:af:f7:ab:
         28:32:07:27:d2:8f:6b:44:a1:a0:15:37:69:93:b7:52:5e:a4:
         8a:a6:62:66:e2:ce:51:42:41:36:ba:09:20:e4:d7:fc:52:90:
         e1:62:8e:3d:1d:36:a9:25:a1:7f:93:3d:a9:3d:c0:94:5a:89:
         59:eb:cf:9d:3b:df:76:4a:fe:8d:27:dc:41:b8:4c:c3:25:82:
         df:f7:79:18:ac:c3:b8:94:e5:13:aa:ec:73:cf:3d:d1:12:6d:
         d9:1f:3f:4d:46:4a:c1:54:a6:9f:78:5e:2c:a9:66:26:f9:ab:
         5b:e9:3b:e0:94:bc:0f:9f:47:63:8d:1f:95:ef:48:6d:18:c5:
         12:3b:ca:2e:5c:ef:c9:48:37:72:2a:f8:f1:c1:ca:8c:4b:1c:
         aa:2a:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----