Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
File:                     UUq20WoLF2_UBlXhf73mUrwh1FM.mft (raw, json)
Hash identifier:          rJVZEY5P6u0O8hnmYfs9C3MGuP/yDj849kzjxtC+/oU=
Subject key identifier:   F9:52:9E:7B:1C:C9:89:AB:02:96:7D:D1:05:0E:AF:6E:5C:B2:FA:FD
Authority key identifier: 51:4A:B6:D1:6A:0B:17:6F:D4:06:55:E1:7F:BD:E6:52:BC:21:D4:53
Certificate issuer:       /CN=514ab6d16a0b176fd40655e17fbde652bc21d453
Certificate serial:       01922FB570A0AE75412E1499752D878F9C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UUq20WoLF2_UBlXhf73mUrwh1FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft
Manifest number:          0F66
Signing time:             Thu 26 Sep 2024 19:01:12 +0000
Manifest this update:     Thu 26 Sep 2024 19:01:12 +0000
Manifest next update:     Fri 27 Sep 2024 19:01:12 +0000
Files and hashes:         1: UUq20WoLF2_UBlXhf73mUrwh1FM.crl (hash: KLQFcfcTF/mvssucv8FJiEcijb6hY0IYm2iHRHeFLEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:b5:70:a0:ae:75:41:2e:14:99:75:2d:87:8f:9c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514ab6d16a0b176fd40655e17fbde652bc21d453
        Validity
            Not Before: Sep 26 19:01:12 2024 GMT
            Not After : Sep 27 19:01:12 2024 GMT
        Subject: CN=f9529e7b1cc989ab02967dd1050eaf6e5cb2fafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:38:87:7c:10:99:c6:fd:8c:22:c6:9d:fa:
                    72:da:83:c9:0c:94:7b:55:38:aa:2d:f9:2f:e7:6d:
                    38:43:1a:45:7c:36:99:48:c7:53:4b:6c:45:90:c4:
                    57:bf:fb:cc:9a:f8:85:8d:fc:7e:25:c9:c6:9b:57:
                    b9:44:fc:aa:a7:46:d4:a9:8a:3d:54:e5:4d:f5:d1:
                    7d:0b:f9:2c:98:73:7d:58:f0:43:5e:48:71:63:45:
                    2d:55:3e:67:42:24:c3:f2:08:99:c3:fd:de:76:d6:
                    0c:62:e1:bd:71:d9:15:29:09:0e:34:86:3a:c5:9f:
                    c1:01:9c:c3:98:28:9a:a9:39:39:5c:41:11:81:2d:
                    78:1b:f8:d9:03:68:55:1b:44:8f:b9:3a:d5:9d:93:
                    88:ff:cd:16:81:70:96:c4:8d:3d:ed:2f:66:44:4e:
                    c0:89:47:e5:89:a3:c7:6f:d1:80:61:62:fc:b6:bc:
                    e3:8f:ef:b5:0a:11:99:ac:34:05:5f:db:b4:67:84:
                    1e:98:e6:18:0a:02:f3:80:30:db:53:09:58:38:d7:
                    cc:9b:a7:31:e9:08:14:f9:b4:02:27:13:2b:2c:60:
                    46:23:87:80:b6:35:78:c6:e2:be:46:a8:1c:ac:a6:
                    e0:ce:14:c7:69:27:1b:f9:6b:c6:f4:c3:66:7c:10:
                    4d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:9E:7B:1C:C9:89:AB:02:96:7D:D1:05:0E:AF:6E:5C:B2:FA:FD
            X509v3 Authority Key Identifier:
                keyid:51:4A:B6:D1:6A:0B:17:6F:D4:06:55:E1:7F:BD:E6:52:BC:21:D4:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUq20WoLF2_UBlXhf73mUrwh1FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/833795-4df3-4850-bd99-8e8bac4cf18b/1/UUq20WoLF2_UBlXhf73mUrwh1FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ab:a5:ce:88:f8:d4:45:8e:a4:94:26:6c:73:82:9b:35:7b:
         a9:be:21:c7:9c:f7:2e:9f:b3:1c:54:5e:ac:61:03:f5:9f:22:
         34:c5:86:51:3d:ad:4c:8e:cd:1b:5a:3d:c0:7f:76:af:36:80:
         0a:79:70:c1:9a:01:47:4e:d4:bb:8e:ed:65:a0:15:28:9d:29:
         34:f9:b4:72:13:76:33:98:ce:44:7b:c2:6d:3b:2e:7c:79:f9:
         b6:f9:01:87:a3:96:40:4a:4f:ca:22:49:47:33:6a:f2:54:ee:
         f7:f6:cf:30:9e:67:4c:ed:a2:56:7b:fd:a6:04:f2:47:53:d2:
         e5:ca:ad:3f:51:76:44:53:27:c7:ef:c2:a8:a4:c6:41:60:6d:
         15:e3:e2:9d:d4:0d:69:69:33:02:9b:00:85:fd:04:92:66:64:
         09:23:b5:b8:67:c4:0f:10:ca:e3:16:ec:60:08:95:82:a0:f8:
         f8:bd:a6:72:d0:43:08:2e:94:b5:74:6f:46:ce:1b:e3:68:89:
         65:56:19:9a:53:8c:20:21:83:cd:23:a4:01:7b:12:9a:40:0c:
         ad:49:7f:5e:80:83:f5:48:4e:ec:78:6a:13:2d:19:88:7c:97:
         5b:62:4e:ab:9f:f6:85:b7:8d:c1:8a:7a:bf:ac:68:ad:93:9a:
         f8:d2:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----