Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft
File:                     1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft (raw, json)
Hash identifier:          OpuMXTU6Ivehi6KvxhmDPYCNFUh0XenmXKxSmUUHSIc=
Subject key identifier:   DE:4E:5A:B2:2A:AE:BA:70:4B:0E:54:65:44:72:E9:66:CA:EB:7B:59
Authority key identifier: D4:8C:75:10:5A:13:12:9D:52:EA:27:E2:51:59:5C:BE:B0:F8:A6:4A
Certificate issuer:       /CN=d48c75105a13129d52ea27e251595cbeb0f8a64a
Certificate serial:       0186917E4818141F1E0683C2030E741A6639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ix1EFoTEp1S6ifiUVlcvrD4pko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft
Manifest number:          0CA3
Signing time:             Mon 27 Feb 2023 06:10:17 +0000
Manifest this update:     Mon 27 Feb 2023 06:10:17 +0000
Manifest next update:     Tue 28 Feb 2023 06:10:17 +0000
Files and hashes:         1: 1Ix1EFoTEp1S6ifiUVlcvrD4pko.crl (hash: /gX37M0WYtO+OUE4T0CKMRDnftC0w3qWkQToAAo6WiY=)
                          2: 3leeuYo5qXzcBrTZQH5D6_VNgUk.roa (hash: YYFZSWXvsSOQY5rRL6a6jlF/4xVR1V36eeW3q2kW/78=)
                          3: eAWy-7Vsv-z-jxK7xEdOXGLKw-0.roa (hash: X6j3MkomZXmSXyZ4r6P3+Rcgo+vezlxiLi5b0Gibfqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:91:7e:48:18:14:1f:1e:06:83:c2:03:0e:74:1a:66:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48c75105a13129d52ea27e251595cbeb0f8a64a
        Validity
            Not Before: Feb 27 06:10:17 2023 GMT
            Not After : Feb 28 06:10:17 2023 GMT
        Subject: CN=de4e5ab22aaeba704b0e54654472e966caeb7b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:17:89:c0:68:0f:9b:e9:69:ad:f9:39:55:
                    7e:24:79:b4:78:3e:fe:c4:a4:99:92:5f:88:94:55:
                    b4:cc:ed:6e:e6:38:fd:25:2b:22:62:2d:51:c4:03:
                    44:a2:71:d6:5b:3c:e8:83:86:e3:36:be:3b:45:cf:
                    b5:b3:ba:36:83:81:3a:43:fb:cd:13:49:80:5b:fb:
                    70:91:14:2f:e9:67:d2:49:21:89:11:be:4e:08:0e:
                    1d:7f:da:bf:a0:ae:5e:28:f4:3b:f2:92:85:5a:ea:
                    f0:2e:d0:0f:1b:48:da:e7:e5:2f:94:08:64:b7:d5:
                    41:40:58:4c:98:c5:0f:8c:05:0a:43:a5:06:f9:e4:
                    55:fe:7d:87:82:58:a9:f6:d1:34:be:4c:3b:e2:6d:
                    a4:4c:96:e5:fd:af:37:f3:d7:b0:dc:af:45:0c:45:
                    2f:cd:75:aa:3d:0f:aa:1b:2b:5a:4d:b3:ea:77:12:
                    e6:be:50:86:52:50:c1:a0:77:50:fa:72:c4:20:29:
                    db:ed:75:a0:5f:88:ee:59:e7:29:1f:64:10:5b:44:
                    e4:f9:96:65:fc:d2:cf:6e:04:5c:c6:6d:0e:ef:8b:
                    3d:36:f2:ef:eb:30:d5:56:26:65:7a:88:ab:75:31:
                    80:6e:ff:21:71:cb:44:a9:17:b9:e8:63:3d:f6:ad:
                    c2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4E:5A:B2:2A:AE:BA:70:4B:0E:54:65:44:72:E9:66:CA:EB:7B:59
            X509v3 Authority Key Identifier:
                keyid:D4:8C:75:10:5A:13:12:9D:52:EA:27:E2:51:59:5C:BE:B0:F8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ix1EFoTEp1S6ifiUVlcvrD4pko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:46:fc:e6:2d:3d:4e:d2:55:39:8b:b9:93:61:79:79:65:
         2a:12:f3:e2:5a:d2:42:3b:22:ce:9d:8d:7e:2b:d8:59:ce:92:
         dd:c0:6e:b9:a3:df:49:89:a1:15:09:1b:e8:21:3f:4a:9d:32:
         4d:66:13:c8:50:ad:28:7c:db:71:23:78:6b:ce:76:97:de:26:
         c3:d6:a0:c2:89:a5:2e:50:cb:d0:a4:95:20:c0:07:97:d5:35:
         b1:8e:e4:f9:68:c4:fb:c3:09:9d:d7:fe:f8:2c:45:4c:fb:44:
         83:30:de:10:ee:69:28:87:8d:26:e3:7f:48:b3:05:43:72:56:
         97:27:09:b2:5e:ea:9b:66:7f:d6:0b:ef:2b:1e:c9:1b:e6:b6:
         4c:63:ac:59:f3:2d:db:6e:aa:1d:5f:fe:92:ce:7f:96:00:83:
         4a:16:e7:3c:76:47:a4:e4:29:d5:6e:2a:53:a8:70:f9:41:f3:
         a9:cd:1a:b8:6c:20:38:25:a7:2f:d7:d0:92:85:c1:43:4b:b1:
         13:d1:da:19:41:c4:b0:50:61:66:ff:fe:da:6b:21:99:1a:69:
         fa:c1:7e:73:17:f9:3f:d0:25:a4:ce:f2:bf:a9:31:29:bb:16:
         64:7e:83:93:2f:54:b1:a2:e8:8e:f9:54:f8:30:da:83:b4:30:
         e0:50:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----