Manifest

$ rpki-client -vvf rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
File:                     C22623A353617D3480E3B1C17F70197EF91D0344.mft (raw, json)
Hash identifier:          tVdrPFhjZ0zACmW7otNthkr8MKQCxslnlbwpyyLE+tY=
Subject key identifier:   DE:7C:4A:C4:D4:6B:B7:DD:C0:B1:E7:37:8E:4C:62:78:C0:A9:DA:CF
Authority key identifier: C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44
Certificate issuer:       /CN=c22623a353617d3480e3b1c17f70197ef91d0344
Certificate serial:       0E0F4047AC889911FF03A0F3D56FBF399BCB6DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer
Subject info access:      rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft
Manifest number:          013C
Signing time:             Wed 29 Nov 2023 03:11:51 +0000
Manifest this update:     Wed 29 Nov 2023 03:06:51 +0000
Manifest next update:     Thu 30 Nov 2023 06:48:51 +0000
Files and hashes:         1: C22623A353617D3480E3B1C17F70197EF91D0344.crl (hash: 9vPMU5T4e7dJjGRsIQKjURf6dskbKIcRokDglUX+jEc=)
                          2: AS199376.asa (hash: aJPBSe3QgxaIS2tJ25sI2ot0tVPW7IPVs22SUBdctfw=)
                          3: AS199762.asa (hash: jUGRH5KWkDfpLuXcryVThhDIb7II2vK97wPBSUT4gkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0f:40:47:ac:88:99:11:ff:03:a0:f3:d5:6f:bf:39:9b:cb:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22623a353617d3480e3b1c17f70197ef91d0344
        Validity
            Not Before: Nov 29 03:06:51 2023 GMT
            Not After : Nov 30 06:48:51 2023 GMT
        Subject: CN=DE7C4AC4D46BB7DDC0B1E7378E4C6278C0A9DACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:1a:41:ac:68:43:52:a8:1e:97:6a:99:5f:
                    76:c3:c8:e9:4f:43:7d:33:87:42:9c:f5:f5:09:a2:
                    a1:32:e5:fc:48:95:82:4f:d1:1c:08:16:c4:81:d7:
                    55:e3:9f:a8:23:81:0a:db:80:51:7b:53:72:28:99:
                    14:16:98:19:32:16:73:aa:86:1a:58:91:81:7c:fb:
                    83:99:d2:da:dc:cf:b3:3c:c3:79:43:a1:15:34:64:
                    d3:ed:5d:9b:f1:e7:2b:64:c4:35:f9:63:d7:b8:98:
                    29:2b:bb:e4:96:90:df:6e:92:9b:17:5e:a5:b1:ea:
                    81:da:bc:15:a2:69:1a:93:5f:3c:8b:83:f9:b4:17:
                    08:73:79:e6:3a:e1:08:c9:18:bb:79:33:aa:17:23:
                    37:ea:c2:9b:f7:6b:7e:db:4d:41:02:14:e8:c0:15:
                    07:3f:96:82:a1:a6:5a:b1:37:e9:1a:84:1e:7f:2f:
                    5c:de:88:d4:1b:9d:24:88:f7:f5:c7:6f:49:0c:34:
                    62:db:ee:7d:d8:4a:00:b4:7e:20:25:b4:4e:30:30:
                    d3:95:ca:fb:83:16:49:7b:1a:71:00:5b:37:89:0b:
                    33:99:85:0c:5b:e3:58:b3:e8:e7:78:ca:30:32:7f:
                    6b:6b:a6:44:c0:0f:f9:da:3b:04:4b:8b:94:e9:2c:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7C:4A:C4:D4:6B:B7:DD:C0:B1:E7:37:8E:4C:62:78:C0:A9:DA:CF
            X509v3 Authority Key Identifier:
                keyid:C2:26:23:A3:53:61:7D:34:80:E3:B1:C1:7F:70:19:7E:F9:1D:03:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiYjo1NhfTSA47HBf3AZfvkdA0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS199762/0/C22623A353617D3480E3B1C17F70197EF91D0344.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:2c:ac:10:21:c7:3c:46:e3:03:0b:d7:86:25:f6:fe:e3:
         fa:39:ae:a1:3c:36:af:5a:41:ec:b8:7c:25:1f:d9:f8:6d:79:
         fb:4d:e7:43:ed:f5:8f:00:7e:3b:15:9f:c8:e8:b7:9b:b1:7c:
         ea:42:a7:fd:4d:9c:45:c1:94:4c:02:c3:96:78:65:0d:c0:c5:
         1b:dc:0f:df:d6:07:7b:67:f8:bc:da:49:fa:69:46:65:cd:90:
         3c:c1:e0:5e:16:26:d7:80:38:e0:47:de:0d:6e:75:58:6f:13:
         23:13:9a:58:70:dd:2c:22:36:41:cb:c6:71:9e:25:f9:fe:2e:
         49:26:0f:db:95:f6:ac:76:26:18:c9:44:c7:ef:84:87:3f:c2:
         de:b2:0a:1e:7a:05:ee:ab:1a:c3:eb:9f:87:9e:ba:ad:84:fa:
         aa:91:21:54:04:73:a3:0e:b2:4f:c4:e8:18:98:b7:af:dd:8d:
         ed:35:f9:b1:15:2e:01:80:7f:9a:e9:ca:a8:57:bc:77:ca:3f:
         b6:d0:e9:bf:66:9a:79:0a:bb:62:d4:2d:e5:b6:6d:05:8f:18:
         7a:a9:3a:39:a2:9f:a3:8a:f7:82:71:a5:20:b0:57:f5:54:d1:
         46:e2:5e:8b:86:9c:70:c4:35:b5:c4:3a:e5:ce:d7:ef:9d:f5:
         4c:af:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----