Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.mft
File:                     fb6QcZOb-jvPfmxvvlTwBNHklZg.mft (raw, json)
Hash identifier:          iDLJ7UtywXoYci6EKnwj8VGMC7GtdkuCLH1+MbC9tmk=
Subject key identifier:   1D:A2:71:E2:11:2D:E2:DD:6A:98:78:DD:27:D0:22:1B:D2:43:48:DB
Authority key identifier: 7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
Certificate issuer:       /CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Certificate serial:       018BDCBA550DBE789DD530661EBECEBEB022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.mft
Manifest number:          0851
Signing time:             Fri 17 Nov 2023 10:01:20 +0000
Manifest this update:     Fri 17 Nov 2023 10:01:20 +0000
Manifest next update:     Sat 18 Nov 2023 10:01:20 +0000
Files and hashes:         1: 543gLIuaHak_Q0juDsQ0fzTF0tc.roa (hash: +jlKVx/GahmvmZ9QyWO7oZAi3VDrDpx3vzzXZI9DJG8=)
                          2: AsutIrHgbD-fbki7vYA6ZEz_I2w.roa (hash: paNvmalQFEkbX4UpfumXPP/WpPd3OjPn1B5yXarcsPo=)
                          3: fb6QcZOb-jvPfmxvvlTwBNHklZg.crl (hash: 8m4JM9+CtPyKy2MGFI5y6teV8x8sAv6dwZZzBTBUYg8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:ba:55:0d:be:78:9d:d5:30:66:1e:be:ce:be:b0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
        Validity
            Not Before: Nov 17 10:01:20 2023 GMT
            Not After : Nov 18 10:01:20 2023 GMT
        Subject: CN=1da271e2112de2dd6a9878dd27d0221bd24348db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1e:55:b1:b7:ae:27:9d:5c:c6:a4:f3:4e:e0:
                    c7:ad:2f:a7:e7:e9:25:0b:bf:c8:b3:bf:de:6e:c4:
                    63:ba:9a:17:81:33:4a:ce:f2:59:94:c5:bb:0b:80:
                    72:ed:c2:2f:67:3e:6e:85:1a:5d:40:22:a4:3d:6f:
                    c7:b3:eb:0e:76:44:19:7b:53:e8:e3:f4:48:e0:4c:
                    34:43:2f:38:0c:c5:e5:d1:82:44:bb:3b:2f:7f:fb:
                    2a:e9:e6:e6:1c:dc:04:a8:19:c3:cc:9d:29:62:be:
                    bf:73:2e:91:cc:6a:1b:fc:2a:e6:c8:cc:33:62:06:
                    2a:fb:43:ed:8d:45:b7:9c:f7:65:e1:9d:76:b5:ab:
                    85:f1:db:88:c4:5f:38:79:8d:01:47:56:a9:28:89:
                    5d:6a:1f:d7:dc:e3:ee:23:e7:0f:f1:f7:80:aa:62:
                    5c:a7:f6:f5:8a:e7:27:64:45:a7:3e:b8:ac:bc:b2:
                    87:33:c8:ea:a9:ad:63:b1:78:e8:97:d5:23:ab:bc:
                    8b:6a:00:d1:cb:0c:f7:a8:9f:ba:4d:fd:eb:71:59:
                    7e:e5:ef:78:56:97:d9:c7:7a:26:23:45:0f:f9:52:
                    bd:08:69:4c:4e:01:e4:cf:27:64:f7:20:c8:fd:0f:
                    75:da:7a:0d:69:77:11:a1:07:a0:1d:22:6e:f0:a7:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A2:71:E2:11:2D:E2:DD:6A:98:78:DD:27:D0:22:1B:D2:43:48:DB
            X509v3 Authority Key Identifier:
                keyid:7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:23:14:e6:e4:05:8c:ef:1f:eb:35:bd:1a:44:b7:7e:dd:
         2c:f5:a0:96:f9:5b:6a:a7:b9:a2:9f:75:e4:f1:5c:87:4d:49:
         e6:5c:25:93:86:0b:84:90:82:37:df:94:17:86:8a:95:35:52:
         bc:d2:da:38:28:74:e2:29:f4:23:11:75:27:47:43:04:48:41:
         ee:6a:28:8f:55:af:0a:f6:d3:0c:35:9a:52:99:b1:fa:39:97:
         d5:c6:d5:68:8f:e8:91:fd:c5:c5:0b:41:f9:2f:95:ca:50:7a:
         0e:75:00:00:96:6f:59:c3:df:93:ef:68:37:f8:f6:71:cd:77:
         42:d5:bc:1b:83:38:4b:8d:cb:d6:e2:89:d3:bf:c7:17:91:5b:
         4e:22:23:eb:21:a0:4e:65:4c:c1:11:79:8f:d8:63:c6:58:9a:
         41:36:af:53:2b:c3:d1:55:f5:05:fb:09:12:9e:1f:3c:c2:6a:
         fc:79:7d:35:40:7e:c6:26:77:99:56:22:ce:d7:e5:7c:a1:b9:
         54:88:36:5e:3d:a5:64:27:d7:88:8d:a3:02:b1:56:6b:a1:f6:
         d9:ff:f0:0f:66:cd:14:bb:0d:71:1e:9d:87:ba:e1:1b:11:31:
         24:af:01:05:25:3f:51:c8:60:06:f7:45:e7:64:97:6e:54:85:
         f9:3f:00:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----