Manifest

$ rpki-client -vvf rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
File:                     C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft (raw, json)
Hash identifier:          fyyAKdlH0D6MCm1LpJzNXVqE4ppIqj6xwwrr9O6LWC8=
Subject key identifier:   9B:ED:30:A1:73:68:B1:4F:26:81:CC:12:50:98:8C:F7:43:5E:F3:70
Authority key identifier: C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46
Certificate issuer:       /CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
Certificate serial:       76B5D687268550DB4D139771868D4F3AD1ED5175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer
Subject info access:      rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft
Manifest number:          0D
Signing time:             Mon 21 Oct 2024 20:24:31 +0000
Manifest this update:     Mon 21 Oct 2024 20:19:31 +0000
Manifest next update:     Tue 22 Oct 2024 23:22:31 +0000
Files and hashes:         1: C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl (hash: wp0Fv8fJbXfXoGm3Leq/R7Tflw7laXMaYOrMyMlD7gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b5:d6:87:26:85:50:db:4d:13:97:71:86:8d:4f:3a:d1:ed:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c89b31081d5bdd08d18fbcd8fabee81c4fb05146
        Validity
            Not Before: Oct 21 20:19:31 2024 GMT
            Not After : Oct 22 23:22:31 2024 GMT
        Subject: CN=9BED30A17368B14F2681CC1250988CF7435EF370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b4:9a:e5:f7:71:28:37:83:f1:e0:73:25:75:
                    68:6e:01:f5:b5:3c:97:f7:5d:de:da:3a:9f:f0:c4:
                    cd:51:4b:f3:09:fd:bf:e2:c0:17:07:69:22:ce:53:
                    1d:a2:41:10:69:3a:2c:b8:c9:f5:ff:b1:8d:e9:58:
                    db:37:fe:d2:5c:49:a5:7f:8d:74:67:85:0b:6e:94:
                    21:6f:d6:ed:df:60:85:54:a1:4a:23:3d:c1:70:e0:
                    97:f3:c8:7f:38:c8:11:16:18:ab:aa:1e:c4:78:70:
                    64:99:a5:89:e1:92:2d:36:87:86:2f:fa:54:c3:07:
                    cb:67:36:83:af:e9:34:47:86:b4:04:40:be:60:50:
                    11:93:8a:fe:75:54:2f:a4:01:bb:ee:dd:39:24:3f:
                    e2:21:8a:ac:24:75:e1:e0:6b:60:ef:45:6e:1b:3f:
                    b8:28:fc:9e:77:4c:7c:d8:6f:dd:67:38:66:28:43:
                    6d:98:12:c7:99:21:66:55:99:1b:dc:0b:c1:fc:6f:
                    4b:5c:63:45:55:29:19:df:2e:d7:06:b4:25:67:97:
                    59:46:de:c5:ea:b9:7e:90:81:8b:ec:37:de:bf:5c:
                    43:a8:e5:4c:7b:c8:f0:03:68:42:ff:15:61:74:35:
                    e4:7a:3a:97:24:df:89:d9:9b:bd:9e:d5:a3:0f:ca:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:ED:30:A1:73:68:B1:4F:26:81:CC:12:50:98:8C:F7:43:5E:F3:70
            X509v3 Authority Key Identifier:
                keyid:C8:9B:31:08:1D:5B:DD:08:D1:8F:BC:D8:FA:BE:E8:1C:4F:B0:51:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJsxCB1b3QjRj7zY-r7oHE-wUUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki01.hel-fi.rpki.win:44595/repo/as60900/0/C89B31081D5BDD08D18FBCD8FABEE81C4FB05146.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:be:7a:f9:37:f1:ed:87:a4:f7:96:ca:64:b2:cb:47:5a:
         1a:5a:69:53:c7:41:f9:c5:c2:f3:74:1e:f5:b3:97:24:8a:f9:
         c0:22:f4:c9:87:f4:b7:28:73:c7:21:6d:06:75:1e:8c:84:50:
         3e:b8:be:53:66:67:83:72:92:eb:77:99:b7:1d:d5:82:4a:33:
         9f:64:41:61:a9:d7:60:a6:8d:09:6e:0b:64:bb:95:99:ff:22:
         8b:74:fc:63:d3:a8:0f:f3:c4:67:86:0b:88:d1:53:0f:47:91:
         26:ac:f7:d0:a7:2e:b1:e5:e5:d1:ff:13:b0:08:7d:fc:c0:18:
         92:f7:db:77:ac:21:6e:d7:f0:6a:a0:47:55:3d:46:8f:61:08:
         82:3d:df:b4:cd:93:55:da:57:57:0a:1a:3f:49:68:81:b4:80:
         7b:89:3f:c9:93:90:f2:77:98:a8:54:f6:06:c6:33:48:e8:cb:
         00:dd:3d:71:fe:c6:12:af:c9:d8:6f:8b:e5:38:69:40:14:bd:
         25:9f:17:93:db:f2:d0:e9:79:66:56:84:3e:25:a1:11:1a:50:
         44:26:5b:81:89:f9:68:80:81:b4:3f:df:e6:71:d9:3a:32:5f:
         ab:dd:a2:83:81:ff:35:93:e9:8d:d9:32:d0:ef:28:d9:45:81:
         f2:e6:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----