Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
File:                     BH711r0-NZQmnLpEKzqNOhTF33A.mft (raw, json)
Hash identifier:          reah9XZMpVCBvanpiFTfYmcg0z4amvLKps2VcfhJDPw=
Subject key identifier:   E6:D6:DA:30:CD:DD:CE:87:09:E9:73:29:39:2D:0A:7D:B8:C8:61:73
Authority key identifier: 04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70
Certificate issuer:       /CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
Certificate serial:       01934716676B6825A7BA3BCEAFEC3C713763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft
Manifest number:          12B7
Signing time:             Wed 20 Nov 2024 01:01:10 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:10 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:10 +0000
Files and hashes:         1: BH711r0-NZQmnLpEKzqNOhTF33A.crl (hash: bkimrrXSssYDie10ewiXeFVeJCprtCqBGpQUiAnpypU=)
                          2: kKj0VKByUCq12myDYmzc4K7-L-Y.roa (hash: zK7IcUbZVuLwbXCzmTAMFe98QoYxSmpSTXDCsVL74PQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:67:6b:68:25:a7:ba:3b:ce:af:ec:3c:71:37:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ef5d6bd3e3594269cba442b3a8d3a14c5df70
        Validity
            Not Before: Nov 20 01:01:10 2024 GMT
            Not After : Nov 21 01:01:10 2024 GMT
        Subject: CN=e6d6da30cdddce8709e97329392d0a7db8c86173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:63:1c:3a:02:54:3b:01:32:c1:1e:03:01:
                    03:dc:6a:bd:ef:09:19:43:75:2d:9c:ae:c5:9a:b5:
                    14:b6:22:e4:03:42:5f:86:8c:19:18:4a:6d:5a:ca:
                    d4:ae:81:38:a4:bd:12:6c:70:9a:f6:25:d3:f7:fa:
                    dc:73:b6:b9:3e:63:96:63:fe:13:45:58:af:35:c1:
                    eb:7c:d3:f2:c2:01:d0:a9:0c:a0:46:d0:55:3e:39:
                    63:3c:34:ab:97:31:10:98:9d:85:fd:4b:16:d0:e5:
                    a4:f3:94:84:9b:55:43:f0:91:cd:54:24:3a:f9:26:
                    74:5b:23:48:1d:ce:cb:0f:0a:89:84:c1:9b:45:19:
                    a9:44:cb:75:e7:27:27:83:b8:5c:80:ed:4b:d4:c2:
                    4b:60:58:e3:e7:bc:db:df:82:15:36:bf:4c:e8:46:
                    11:ac:7f:ab:66:03:70:d6:0c:ad:7b:c0:30:ef:3d:
                    89:0b:b6:39:26:d6:d9:d6:ff:96:b6:83:ae:a9:dc:
                    70:ec:04:38:2d:7e:2e:0f:db:e8:30:28:e0:18:d0:
                    cc:1b:f3:d5:72:49:63:27:3d:46:e9:dd:e9:84:39:
                    30:77:18:d2:20:ed:5a:70:9c:d8:74:3f:d9:0c:02:
                    63:34:81:19:5e:fe:5b:41:f7:8a:c7:5c:a9:7e:68:
                    66:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:DA:30:CD:DD:CE:87:09:E9:73:29:39:2D:0A:7D:B8:C8:61:73
            X509v3 Authority Key Identifier:
                keyid:04:7E:F5:D6:BD:3E:35:94:26:9C:BA:44:2B:3A:8D:3A:14:C5:DF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH711r0-NZQmnLpEKzqNOhTF33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4920ff-313a-4bdf-96fb-b3b3fb95337b/1/BH711r0-NZQmnLpEKzqNOhTF33A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ce:9c:cb:7a:6f:c1:30:78:82:9b:af:87:59:8b:57:57:9c:
         0e:ea:8b:4e:23:ef:1b:2a:49:ff:17:96:eb:4d:de:5c:c4:c7:
         dd:2d:27:31:7c:38:0c:83:8c:db:96:19:f7:f9:26:ee:b6:39:
         7b:82:a0:58:7c:8f:28:37:32:c2:dc:97:34:b7:55:7f:90:8e:
         57:d5:cb:ed:29:a3:f3:84:19:87:7e:03:58:51:eb:91:9b:cf:
         bb:f9:2a:e1:eb:b2:30:2a:49:20:3a:27:1d:cf:2b:dd:14:10:
         e4:89:d8:a3:77:dd:66:df:65:4e:6a:ae:b8:d0:1e:43:52:71:
         2a:6e:1e:1e:b1:0d:0e:a7:9a:03:b3:6b:fe:3c:bf:63:61:84:
         40:c0:7f:b5:45:1a:44:14:da:b5:f4:9d:22:4e:c8:0c:c1:e4:
         68:5a:c8:c0:83:bf:b6:c7:d7:e9:a3:48:63:43:04:09:1c:f9:
         a5:1e:37:68:89:f9:29:bc:9d:d2:e3:51:b8:d2:38:de:7c:a1:
         23:51:92:31:13:60:1b:c2:02:4f:29:59:20:35:05:24:e2:37:
         8a:fa:c4:56:ee:87:aa:9d:f4:0b:4c:07:5d:0a:01:ee:43:8c:
         e6:e7:b2:63:fd:94:cc:44:ee:e4:6b:f2:1b:f5:49:26:87:ce:
         6a:c1:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----