Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
File:                     2gDpgZUwYZcsiWvW0nc40IOq2w4.mft (raw, json)
Hash identifier:          oeFyEgt+A1fsrdG39tkpYOLKueuGgA+WdM/Bu5Kbv0A=
Subject key identifier:   AE:8E:F6:50:F8:6F:9D:B9:A8:39:FE:80:6C:DC:2A:ED:16:9A:D3:A9
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       0192AF6180D1DDDDAF54C1BBF607B2262F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft
Manifest number:          0F0A
Signing time:             Mon 21 Oct 2024 14:00:55 +0000
Manifest this update:     Mon 21 Oct 2024 14:00:55 +0000
Manifest next update:     Tue 22 Oct 2024 14:00:55 +0000
Files and hashes:         1: 2gDpgZUwYZcsiWvW0nc40IOq2w4.crl (hash: BHD1/xHdVsu5olxXz7VwZXClsoJGoteMirnExTtHUUg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:61:80:d1:dd:dd:af:54:c1:bb:f6:07:b2:26:2f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: Oct 21 14:00:55 2024 GMT
            Not After : Oct 22 14:00:55 2024 GMT
        Subject: CN=ae8ef650f86f9db9a839fe806cdc2aed169ad3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:01:f9:21:1e:a5:ed:65:b5:16:70:40:e0:
                    bf:8e:3c:40:6e:47:d3:ff:14:82:dc:8a:a0:42:d6:
                    58:d2:b0:8a:a2:89:57:4b:a3:f1:34:31:55:48:26:
                    e5:b1:e5:57:24:aa:18:a2:02:97:3e:73:58:35:7d:
                    4c:0f:f9:88:cb:36:3a:ce:ad:9d:4c:1a:66:16:a2:
                    df:1d:f3:9d:18:c2:1f:b8:a1:12:03:59:27:53:e7:
                    73:9d:f3:1a:0b:67:a1:83:bd:6b:68:39:13:62:ae:
                    e1:1b:f1:e8:cd:9f:3d:de:a1:57:07:aa:ef:13:16:
                    18:57:75:7f:59:d5:20:18:a2:3f:bb:d4:c1:08:ad:
                    f5:55:cf:c0:76:fa:00:79:54:b9:ae:fb:1c:e8:3f:
                    70:2b:ce:0d:ec:ed:6e:2a:3f:57:7e:de:63:d2:43:
                    aa:61:7e:7e:81:6b:6c:3c:17:4c:75:85:06:41:99:
                    d0:8a:c7:51:ac:fe:1d:d9:1c:0f:85:b2:f7:62:b7:
                    85:33:de:6e:37:ae:e7:f0:d9:83:63:fb:e1:a8:db:
                    59:09:87:78:7b:82:b0:3b:16:4e:27:8c:94:bc:15:
                    88:d4:d6:16:a1:79:48:a1:12:12:f1:05:2c:16:57:
                    80:23:4b:79:6d:6c:ba:6e:f1:a5:3c:82:ec:ee:dc:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:F6:50:F8:6F:9D:B9:A8:39:FE:80:6C:DC:2A:ED:16:9A:D3:A9
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:51:2a:96:26:2f:1e:4c:e8:58:3c:e4:ef:86:ef:2e:99:67:
         56:55:89:94:86:22:5a:90:ae:f4:6b:2e:fa:c4:e0:fb:6a:b5:
         f1:40:be:f6:f5:39:48:6c:12:ec:a5:78:20:30:f2:46:cb:d8:
         0f:a5:42:0f:c2:cc:31:07:58:b4:1d:c3:70:f4:09:ab:bd:1f:
         4d:4f:21:4c:a3:6e:16:cc:91:cb:d5:48:10:7c:5e:b1:6a:ae:
         ce:60:cc:3e:cf:f1:93:cf:f6:a0:4f:1e:e2:02:7d:e9:e2:00:
         d6:72:9c:69:ea:aa:c1:4b:92:96:23:c3:7a:3b:68:07:f2:73:
         87:8c:47:67:35:ee:15:55:6a:9a:cd:68:a7:0c:e6:77:57:7a:
         a4:30:55:d3:9e:a6:a3:4a:aa:25:77:8e:83:b7:61:d7:40:23:
         c1:6a:07:35:98:d1:ad:db:0a:9c:4b:d7:17:07:36:86:71:f4:
         d0:f4:17:ac:77:9c:ee:be:18:ff:30:26:80:74:f2:43:7d:a1:
         22:75:6f:5b:27:19:5a:69:29:ca:e4:12:68:71:cf:f2:d6:54:
         a1:c4:d0:d1:ef:76:15:ef:3f:f3:aa:36:9a:ff:ae:59:ca:d9:
         91:9a:33:fc:1c:92:f9:ec:60:c2:12:ea:e0:e6:47:ec:2f:42:
         30:cc:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----