Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.mft
File:                     M2tp4t0pu-SJRsTVisYOsj3_lcU.mft (raw, json)
Hash identifier:          3cknJ2XfKjFzPee8pHEKHIJRWjJxnUqSQKVUEPOu/xE=
Subject key identifier:   BC:62:79:16:F1:42:78:D8:7A:CE:FC:EB:D5:27:76:AA:F3:5E:FB:D3
Authority key identifier: 33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
Certificate issuer:       /CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Certificate serial:       018E7CFEA8B0B0A0BD9214F23B0C899672A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.mft
Manifest number:          10F0
Signing time:             Tue 26 Mar 2024 23:00:47 +0000
Manifest this update:     Tue 26 Mar 2024 23:00:47 +0000
Manifest next update:     Wed 27 Mar 2024 23:00:47 +0000
Files and hashes:         1: KFa6oqlG-TY_OlXSiFSj8C-IiOk.roa (hash: vN30lsa0T5+l7Vo1OZghyfocdd+j2TkRucFOzIabEsk=)
                          2: M2tp4t0pu-SJRsTVisYOsj3_lcU.crl (hash: n+nultYazM48WfJ4EWy703AtrJsRfTa3/W6I7bPRrKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:7c:fe:a8:b0:b0:a0:bd:92:14:f2:3b:0c:89:96:72:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
        Validity
            Not Before: Mar 26 23:00:47 2024 GMT
            Not After : Mar 27 23:00:47 2024 GMT
        Subject: CN=bc627916f14278d87acefcebd52776aaf35efbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:27:2b:8d:5b:cb:72:d5:f8:d3:86:88:7b:f6:
                    17:45:56:25:e7:60:69:ac:43:a9:54:89:aa:65:78:
                    45:e5:07:87:40:68:26:1b:3f:e5:ef:3e:6a:b3:2a:
                    b4:2b:97:dc:cd:d9:04:e1:7d:74:60:18:97:81:49:
                    fb:35:55:8d:20:d7:c8:27:12:6b:4e:3b:d9:54:e5:
                    d2:91:a7:19:69:73:d3:0f:a6:e4:e1:30:c1:95:4d:
                    3f:73:a5:52:d5:fe:46:da:d4:ad:a9:d8:1f:16:2b:
                    87:46:fa:27:b9:ff:14:1e:fe:80:83:dc:4e:1e:c2:
                    a7:cf:72:b2:c4:cd:2a:fd:4a:f9:0c:7f:54:23:90:
                    97:f9:bb:c7:82:0e:16:4a:58:e5:ae:91:c6:2d:29:
                    3f:6f:08:6f:79:16:1b:a5:8e:7f:7e:7d:5f:47:9d:
                    e6:0b:e9:0c:6e:ef:d0:26:74:b4:95:94:9d:16:01:
                    17:22:fa:5a:5e:ee:af:89:62:e7:3b:17:bd:65:b2:
                    43:99:a4:c5:ca:c2:44:25:3f:1a:83:67:20:86:79:
                    c6:12:6f:6a:79:5a:76:c4:1a:bd:24:fb:ff:d0:fe:
                    c7:29:5b:b4:86:2e:84:77:2c:71:6a:b7:21:70:d4:
                    65:df:4e:4c:53:df:68:ff:8b:00:ba:e4:2f:a2:6f:
                    71:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:62:79:16:F1:42:78:D8:7A:CE:FC:EB:D5:27:76:AA:F3:5E:FB:D3
            X509v3 Authority Key Identifier:
                keyid:33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:b5:1b:47:32:fe:6b:94:41:65:0a:0f:7f:4d:a6:82:7d:
         41:15:57:db:a9:53:aa:0e:f2:99:9d:8b:d7:1c:0d:7d:e4:e8:
         aa:e6:08:01:f6:83:db:8d:bb:69:66:e4:34:03:e8:e5:69:6e:
         49:2a:ce:3e:b7:7f:53:8c:bc:8f:11:04:b0:19:13:4d:a3:1f:
         1f:ec:ea:50:9a:59:cb:79:7d:0f:83:aa:6f:ef:75:18:c8:28:
         d5:21:dd:04:79:a8:09:a1:1d:60:d7:15:89:94:17:f1:ab:15:
         6e:84:42:73:fb:2f:41:26:fa:7a:87:d3:4c:ed:5e:20:dc:08:
         47:f5:e5:8b:0b:8a:67:7f:91:ce:59:76:b4:df:36:58:3a:19:
         0a:77:98:87:e3:f2:1c:14:32:05:19:19:e1:90:3a:f2:66:aa:
         59:cd:39:a2:6f:ce:8e:f4:10:bc:a0:de:d6:1a:a9:76:3e:3b:
         85:0e:82:9c:7a:47:7c:a2:8b:e6:90:62:8d:a1:40:13:fb:06:
         47:53:8b:c5:29:77:2a:ed:fc:45:28:51:2e:5e:ee:d7:66:f9:
         55:ed:98:73:d2:25:ba:5b:55:da:c9:62:64:2f:5b:a6:ea:46:
         69:ba:2b:ad:cf:1d:12:74:fb:2c:84:e5:4d:f3:4f:12:32:fb:
         2b:85:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----