Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft
File:                     cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft (raw, json)
Hash identifier:          8ygJsjqN8kWmnGU3el/Eaood5ILQkXVVoVHFOz1eGMw=
Subject key identifier:   27:5A:39:B6:37:BD:3D:61:DF:80:09:73:5F:F1:21:A6:7B:15:E2:4C
Authority key identifier: 71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
Certificate issuer:       /CN=712d0af87b0662f31e483e01efefc02a74326355
Certificate serial:       019346035F98BC9A0E7E842C7C3A3F452CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft
Manifest number:          0DCB
Signing time:             Tue 19 Nov 2024 20:00:46 +0000
Manifest this update:     Tue 19 Nov 2024 20:00:46 +0000
Manifest next update:     Wed 20 Nov 2024 20:00:46 +0000
Files and hashes:         1: cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl (hash: ilxi/WbFG4ZlJNzSMgRKF+jOucpOOBNArs95KuEvtx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:03:5f:98:bc:9a:0e:7e:84:2c:7c:3a:3f:45:2c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712d0af87b0662f31e483e01efefc02a74326355
        Validity
            Not Before: Nov 19 20:00:46 2024 GMT
            Not After : Nov 20 20:00:46 2024 GMT
        Subject: CN=275a39b637bd3d61df8009735ff121a67b15e24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:02:28:e4:46:cd:1f:9f:c6:8b:51:6e:d5:
                    ba:5d:4c:dd:be:30:59:fe:df:62:f2:be:3b:dd:0f:
                    e2:d5:13:90:21:fe:1b:24:de:8d:b2:09:6d:91:5a:
                    30:51:57:ed:9a:e0:27:c4:93:25:0f:23:ef:ed:7a:
                    79:84:2e:4f:25:c5:54:1c:76:6f:45:ac:33:5a:15:
                    bd:94:27:61:d0:96:4e:1b:ee:dd:de:8a:82:f2:68:
                    3d:e6:b6:d6:0f:4b:a9:fc:c0:75:05:1d:08:e0:e4:
                    a7:b4:7e:2f:b2:f0:7c:52:e6:35:3a:9f:69:32:38:
                    37:bf:2e:14:d0:80:cf:c2:dc:6f:52:a6:0f:75:12:
                    14:2b:ed:86:a9:12:af:11:21:a8:e0:69:03:b5:49:
                    e5:fa:a7:0b:79:38:e9:45:33:eb:a6:7d:f2:d0:17:
                    ec:a6:20:02:83:bb:aa:cd:58:dd:29:29:55:d7:a9:
                    b6:4d:5b:f9:25:fe:da:57:60:c2:54:ff:f7:e5:e7:
                    f1:99:38:fc:3d:55:0d:dc:37:4a:51:7e:fa:26:e9:
                    73:f9:60:ad:d3:23:b3:05:d4:f3:c1:21:aa:e4:6f:
                    fb:0d:16:5f:3d:dc:50:4c:1b:85:8e:6f:6a:4d:b6:
                    5d:c6:a0:a7:40:47:bd:55:f0:00:32:0f:c7:18:18:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5A:39:B6:37:BD:3D:61:DF:80:09:73:5F:F1:21:A6:7B:15:E2:4C
            X509v3 Authority Key Identifier:
                keyid:71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:23:55:cb:e8:6a:25:d1:ac:8d:e0:29:98:c1:f2:16:d1:
         df:ff:76:f0:bb:dc:1d:71:e7:f7:99:ea:47:b9:f2:d8:1b:11:
         10:46:bc:a0:7a:e2:d3:e8:2b:f4:44:bb:9f:7d:08:dc:eb:44:
         58:54:e5:52:7c:f5:cc:af:32:53:92:ed:1c:5a:ca:3f:59:f5:
         a3:96:5f:31:40:8f:08:5b:14:15:5c:18:c4:14:79:4a:99:2e:
         4c:91:9c:c9:d3:6f:f5:12:25:75:28:d9:31:c3:8e:ec:18:0b:
         3f:3e:67:cf:d3:83:27:c5:32:94:cb:04:f7:f8:6b:50:9a:73:
         35:54:65:d6:33:f6:41:27:54:54:49:cf:47:5e:5e:cc:4c:c8:
         0a:91:dc:65:00:01:c8:35:e4:0b:10:a6:03:02:07:e4:fe:86:
         0c:3e:70:d9:b5:dd:bd:48:20:df:df:56:3b:da:b8:a9:f8:bd:
         20:27:86:e7:48:c0:d2:03:f8:b8:9b:67:f2:f5:93:af:7a:a2:
         59:24:33:55:94:4b:d6:c6:87:62:bb:e9:62:15:7c:01:5d:5c:
         ae:86:05:1d:04:dc:33:01:72:0d:b2:f6:74:50:02:69:fc:80:
         e0:9e:ad:ac:c0:15:64:34:f8:d9:60:f9:10:25:25:fe:62:0b:
         2d:1e:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----