Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
File:                     O37JQjv5DIHSLZSEHBA1elQmA3k.mft (raw, json)
Hash identifier:          SmCtkOckHG7bCDdVMp9vA7c4F23FndE6ClntnN4D8GQ=
Subject key identifier:   AB:BF:B2:57:F7:18:8D:CD:24:B7:B7:22:89:1E:83:25:D6:B7:B9:C1
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Certificate issuer:       /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial:       0193F99D377FD4429AC48916B42BD6A28FF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
Manifest number:          1407
Signing time:             Tue 24 Dec 2024 17:00:50 +0000
Manifest this update:     Tue 24 Dec 2024 17:00:50 +0000
Manifest next update:     Wed 25 Dec 2024 17:00:50 +0000
Files and hashes:         1: 8vDELfKPcvzvV3RNJWMSHDMVxSU.roa (hash: sRHvCOhQKEWWdeJEjT/wzddRUrkbbjBWUo+xrYJeHEA=)
                          2: KU64UFfMvr7hELtznW1kd3Jgx0g.roa (hash: IreqOrqzILh2oR2ldJiQhRHfJ01koP4D4FLp7x9G4/4=)
                          3: LQCCtVc6ZxcR2ZmmWPNDc4pIa_Y.roa (hash: c0fge8C7CIKoSd4Qv86++FBUG992VBIIU7eCsCNcDhg=)
                          4: NanHEWkVUEVIFMXgkf7VjzJv3EI.roa (hash: BpNAL/7v/9r0wilOFqCRlV3KJaojWEMjlLM2Wri0rMI=)
                          5: O37JQjv5DIHSLZSEHBA1elQmA3k.crl (hash: wkqj/bx0s1d99yIiHeVSKl/QR77gNkXon/RpQHYlkQU=)
                          6: WPscA-L06bAA9F5ooBe7Pf2sOZE.roa (hash: NNFx9yaQDJ0RagbXJX6TLI9ki3s7UWcjfjrthKBCj+k=)
                          7: bRXAhBvcPUvJCX7qdUqTFZFHFj8.roa (hash: VmGWtFULEN8fSC5hsMHlw3+Up5FvQ1DatG9ZPrcOhCs=)
                          8: ikjOg3DuV3dG0XMGGKFbvmv93U0.roa (hash: 0zoiK/IqK/ToLPo7OA7ij/m06EFT/E55yXhhbtK4O4w=)
                          9: jaDaGycFgZ1pZNnwn6ei8LOm3DQ.roa (hash: fzKmWx5CbS4BzYCpG5vV5O44t9nhGCLZgJyKnLKcw2E=)
                          10: oP490aCHyPb1ky13XTWCEqlywec.roa (hash: MVQEEHGjTpLySUvylzsYOV2e6bAi7DuNaJRzh58XHpc=)
                          11: p06i0La7cqcu57vOBbdjswK08Rk.roa (hash: ihemQCValfrhIjCTAHxxeLK0FMyQ77/Y6cQwrdSowx4=)
                          12: pcxM9ngALshNICd8yYlBeG930vM.roa (hash: kZJWMJBNT5Am972w+GACObZdvdg7Kbw5bRphm+R5UVY=)
                          13: rLJvZxJ0aSyYN6-Q5Bw4kmxWFHU.roa (hash: U2r+gCiYsLemL0/mWy+RfQ59RnUuIGLS/QczZmHDy38=)
                          14: uDF7cF0FKP8Pq_OVmSawioGZVSM.roa (hash: oo6Q1df3OkUdxk2nXw6XvwREhhLeWN/c8RFmvIUKpLI=)
                          15: yMT7x9AsANmP0xlV_lSouz93PLI.roa (hash: csQViFaKwWAFWqdPWAfxCWFUj6PmwmMXl4V2W8j8YRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:f9:9d:37:7f:d4:42:9a:c4:89:16:b4:2b:d6:a2:8f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
        Validity
            Not Before: Dec 24 17:00:50 2024 GMT
            Not After : Dec 25 17:00:50 2024 GMT
        Subject: CN=abbfb257f7188dcd24b7b722891e8325d6b7b9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:c8:d4:ff:36:a2:b1:2a:2a:4a:9c:52:8f:
                    c9:c4:e9:7d:aa:41:67:de:0f:ae:e1:3d:ef:bc:e4:
                    9d:65:b2:c4:ea:9a:0d:23:03:9d:28:9b:aa:1c:95:
                    22:70:39:d2:ce:be:ae:db:cf:45:ac:74:f4:64:14:
                    3c:bf:b9:f4:22:0b:cb:a8:ec:2f:43:9c:7a:c7:d3:
                    ee:09:6b:d1:3f:40:77:f0:66:8d:fd:41:74:4a:ae:
                    cb:2f:69:b6:04:1b:a1:4a:0c:1f:78:f4:25:63:e3:
                    61:20:33:60:f0:4e:fc:30:30:d8:5a:23:bf:b2:e4:
                    d3:a9:4b:73:a6:3f:1c:98:74:c8:5e:48:a6:e3:a9:
                    ae:3e:00:5d:da:7d:7d:98:3e:92:77:a9:74:e3:7b:
                    59:56:f1:04:9d:cf:ec:13:93:4a:ab:a6:a2:82:65:
                    41:19:e9:c8:97:4a:d3:75:88:30:3d:7a:c7:3e:5a:
                    8e:26:f7:56:81:c1:fe:36:04:ba:a9:8e:53:44:e7:
                    c2:27:10:86:8f:1c:06:2d:e8:4a:f8:ce:64:62:5c:
                    9e:f0:0c:71:ab:fb:4e:7e:ad:ef:fb:5f:72:5c:13:
                    59:bc:2c:4c:60:74:71:f2:9f:57:cf:27:7f:b3:99:
                    b9:6f:02:de:59:fd:05:f0:ac:9e:fb:69:74:e8:6d:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BF:B2:57:F7:18:8D:CD:24:B7:B7:22:89:1E:83:25:D6:B7:B9:C1
            X509v3 Authority Key Identifier:
                keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:19:e3:ca:6e:b3:a2:9f:8f:cf:8b:d2:ec:65:9a:d5:ab:
         54:5d:ed:ba:df:fb:1c:c7:9f:30:bf:45:fe:7e:d4:20:a4:ca:
         b9:86:f7:36:c1:9a:3a:cd:d1:8b:5d:a8:bb:23:76:d8:34:c8:
         eb:60:57:11:03:91:b6:79:71:1a:9b:e5:01:7c:07:6c:27:8e:
         b0:ed:cd:3b:9b:3d:cc:da:0a:e7:01:ac:89:79:6b:ff:34:71:
         a9:45:b1:e8:24:5f:20:6a:48:0d:70:a3:be:d2:b5:8b:e7:5a:
         f3:0f:57:a6:1c:0c:f9:62:bf:8f:0a:cb:ae:73:b5:29:c7:ab:
         b4:96:59:7b:ee:73:0e:d2:9c:9f:74:ff:96:18:4e:1a:33:17:
         49:0b:a4:e5:c3:a6:d5:7b:4d:24:73:e8:41:0b:53:28:53:59:
         70:33:db:9b:0d:20:7f:0f:ba:c5:77:53:8a:ee:a7:65:07:ea:
         4a:13:69:d0:20:3c:97:db:f4:dd:71:02:ab:4c:76:91:8a:0b:
         6a:ce:d1:70:e1:ed:65:3a:da:ab:fe:62:97:d8:74:54:26:8a:
         27:dd:7c:7d:1b:52:50:6d:ec:2c:15:da:2e:5f:76:df:42:f8:
         a5:6e:5f:09:a6:44:d5:c3:49:55:f1:f8:05:ae:64:4b:bc:34:
         09:72:b8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----