Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.mft
File:                     23mP2uLRiU7gM7ID50ZjE4yHm3A.mft (raw, json)
Hash identifier:          31ysUw0XP+N//LpIFXSkgeTw0aQp2CEEw2vwT17qOeQ=
Subject key identifier:   DE:3C:BF:FB:B2:2E:B7:83:93:DF:ED:F4:A7:B8:71:90:36:06:DD:E0
Authority key identifier: DB:79:8F:DA:E2:D1:89:4E:E0:33:B2:03:E7:46:63:13:8C:87:9B:70
Certificate issuer:       /CN=db798fdae2d1894ee033b203e74663138c879b70
Certificate serial:       0188B2715B30BEA375EC71785C93F83FA324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/23mP2uLRiU7gM7ID50ZjE4yHm3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.mft
Manifest number:          0DD8
Signing time:             Tue 13 Jun 2023 01:49:13 +0000
Manifest this update:     Tue 13 Jun 2023 01:49:13 +0000
Manifest next update:     Wed 14 Jun 2023 01:49:13 +0000
Files and hashes:         1: 23mP2uLRiU7gM7ID50ZjE4yHm3A.crl (hash: GbyHq5zkFdAiMoYGv9vHOn5EVXShp8a3Txo9S6ZSqMM=)
                          2: WzD6Q6LgC4WQS52S1Nzn3fXZptI.roa (hash: 6WRH3jkMWJsButhBuFuWxItgghYUafviassDVkHfSq4=)
                          3: iF8DKO_jatwLlBTKV2r8E_vqPAc.roa (hash: reD9rVndozXTPQ8DjV6WfoWbxAsvivgG3qzVmZtL6GI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b2:71:5b:30:be:a3:75:ec:71:78:5c:93:f8:3f:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db798fdae2d1894ee033b203e74663138c879b70
        Validity
            Not Before: Jun 13 01:49:13 2023 GMT
            Not After : Jun 14 01:49:13 2023 GMT
        Subject: CN=de3cbffbb22eb78393dfedf4a7b871903606dde0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:75:d9:d2:0f:42:23:45:78:b2:c5:76:45:50:
                    f8:34:b3:ab:38:48:bb:8b:3f:e2:87:b9:72:9c:13:
                    55:b2:81:25:14:52:e5:1b:d7:4e:7e:56:29:87:77:
                    db:07:e4:ce:9f:02:91:b6:0e:a7:49:b0:54:54:74:
                    46:31:dd:19:26:8f:a6:6b:63:61:cf:55:26:8c:56:
                    55:52:30:e4:91:d1:b2:28:99:21:a3:3f:a4:d0:09:
                    93:0a:f6:bd:66:01:c9:ba:b4:f6:a2:f9:85:53:03:
                    db:6a:47:ef:b0:df:0b:8e:6a:76:40:1e:f9:b9:b2:
                    f2:5e:b9:f2:d2:92:87:ed:ce:ea:8f:1d:1f:1d:be:
                    6f:29:79:24:2d:31:b9:df:ca:2c:eb:d1:da:fd:8d:
                    dc:1d:3c:8e:54:3f:33:fb:57:dd:cc:c2:5b:fd:1e:
                    85:5f:f8:05:44:00:89:fd:7d:6c:85:94:89:6a:eb:
                    df:88:27:46:a6:0a:4d:79:88:4e:fc:e5:6b:53:36:
                    62:d1:4e:17:da:32:d8:b1:f3:bc:44:26:98:97:66:
                    b4:8a:9a:7f:0c:b2:9e:ce:3a:8d:aa:89:ba:1b:47:
                    96:39:1f:a9:ae:88:09:29:37:c9:27:5d:07:4d:38:
                    ef:07:8a:74:49:b0:5b:26:13:76:83:e9:e0:4a:12:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:BF:FB:B2:2E:B7:83:93:DF:ED:F4:A7:B8:71:90:36:06:DD:E0
            X509v3 Authority Key Identifier:
                keyid:DB:79:8F:DA:E2:D1:89:4E:E0:33:B2:03:E7:46:63:13:8C:87:9B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23mP2uLRiU7gM7ID50ZjE4yHm3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:ce:45:f9:74:f6:0d:ee:02:f3:3e:50:e9:86:6e:7f:35:
         e7:87:bc:ba:1c:67:80:24:50:7c:1c:f9:72:29:23:0a:37:04:
         05:63:8b:24:91:40:6b:4b:d0:96:56:a1:dd:eb:38:94:57:c9:
         62:84:21:50:1b:bb:7f:21:de:26:a2:6a:6b:f1:03:b5:c4:8f:
         18:0c:07:48:7a:f1:49:77:30:ff:e0:0b:83:cb:01:80:47:e5:
         6b:a2:1c:fc:dc:54:65:15:65:d4:7f:69:4b:05:15:5b:55:f8:
         19:49:92:f9:23:70:48:86:59:e8:33:70:7b:f4:07:10:b3:14:
         db:2e:64:97:94:8d:93:47:78:01:1e:63:b1:ba:12:d8:f3:5f:
         fa:8c:d9:56:06:21:69:d4:31:db:26:18:f2:ee:92:fd:35:cd:
         e8:db:4a:49:25:b4:90:ba:ff:b5:e2:66:cd:12:47:cb:e1:10:
         f4:1a:55:07:94:83:5e:54:a5:9e:34:cf:91:68:f4:4a:ba:8e:
         08:85:01:e6:3b:09:38:9e:6c:d2:61:cc:0e:8b:33:43:81:11:
         62:81:a1:70:e3:91:ae:9d:de:ff:a1:db:c6:e9:03:33:91:2b:
         82:6a:1a:04:cf:03:1b:7e:98:e6:f7:81:35:27:e6:50:fd:cb:
         61:64:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----