Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft
File:                     1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft (raw, json)
Hash identifier:          jcaEJ/0gH5kmm1mE7UjPEaVNR8qBTU6nO04jz3RPuMk=
Subject key identifier:   6D:F1:6A:54:84:CB:AC:90:3C:0A:4E:34:98:12:46:86:33:37:CE:5E
Authority key identifier: F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
Certificate issuer:       /CN=f9b3937371b89908dfcee89e412c5e4b34af3ec0
Certificate serial:       018C61F9E3A1CED2FEE34FCFE3BA646A06AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft
Manifest number:          0871
Signing time:             Wed 13 Dec 2023 07:00:15 +0000
Manifest this update:     Wed 13 Dec 2023 07:00:15 +0000
Manifest next update:     Thu 14 Dec 2023 07:00:15 +0000
Files and hashes:         1: 1-bOTc3G4mQjfzuieQSxeSzSvPsA.crl (hash: BbjLMV4H+ZGlnmPPRtXs3xLdz9XZcC7qKCm+3N6j16Y=)
                          2: NQnOaiv4cAcLjtuhPNv6Gnbsa4M.roa (hash: mEVOTU9YjeeCJxiWFIrcq/pbdmQtS141y+UAW9c97Eg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:61:f9:e3:a1:ce:d2:fe:e3:4f:cf:e3:ba:64:6a:06:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b3937371b89908dfcee89e412c5e4b34af3ec0
        Validity
            Not Before: Dec 13 07:00:15 2023 GMT
            Not After : Dec 14 07:00:15 2023 GMT
        Subject: CN=6df16a5484cbac903c0a4e34981246863337ce5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:09:b7:6b:dc:35:cc:5d:f2:e6:ae:c2:24:03:
                    07:30:8b:75:cd:88:f9:a7:5a:46:e7:b7:17:fe:f9:
                    ea:a1:cd:cd:4a:b2:7d:77:16:d9:53:63:4a:47:1f:
                    c3:be:d9:ef:97:66:7e:aa:f5:e4:c1:45:4a:ee:98:
                    71:35:7b:fc:03:a9:59:3e:93:53:a6:93:fc:cf:7c:
                    ca:ae:0c:58:3e:03:b5:a0:4f:5a:50:60:10:a7:66:
                    16:a9:0b:95:a0:37:15:54:1b:40:62:cb:3a:f3:f7:
                    37:a4:56:ca:10:00:d9:6d:fe:52:2a:d4:0e:d5:c6:
                    4e:52:8a:3d:d0:f8:e4:35:6a:ab:5c:8f:af:dc:df:
                    5f:20:8a:e7:46:74:29:cf:ad:5b:74:36:63:9e:07:
                    f6:e2:e3:99:24:6e:88:43:46:f9:7e:ff:99:6a:b9:
                    1e:b4:b5:e1:05:88:15:39:34:79:99:29:9b:06:de:
                    05:eb:2b:b9:1e:68:19:ba:ab:b1:e4:f9:82:7d:f9:
                    66:fd:0d:f2:55:85:68:94:ca:45:d0:07:21:22:f6:
                    3b:90:86:69:54:e3:37:93:82:3e:0a:5f:c9:ef:c6:
                    10:15:f9:19:cd:e6:86:3d:3c:63:71:c1:db:5c:c1:
                    d7:72:8f:6e:d2:66:ae:12:08:db:ae:d0:11:b4:8f:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:6A:54:84:CB:AC:90:3C:0A:4E:34:98:12:46:86:33:37:CE:5E
            X509v3 Authority Key Identifier:
                keyid:F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:2b:b7:a0:1c:bd:6d:1d:61:27:a6:f7:01:11:9b:b9:b0:
         6f:11:cc:6d:89:d3:9c:c1:f6:94:55:bb:94:46:61:da:f8:65:
         80:02:97:91:1b:d8:3e:80:85:53:a6:21:7b:20:ff:a4:a9:ac:
         ae:c3:86:00:c3:55:73:96:44:05:19:aa:2f:4b:d7:03:4f:d7:
         3b:27:9d:84:08:b5:dc:7e:b0:66:3e:e9:5d:68:29:25:4a:44:
         f0:bd:53:0b:0b:f2:6c:9b:62:74:93:6c:f4:fb:37:58:eb:ec:
         be:88:cf:c3:51:1c:3c:86:d2:b4:6c:58:77:2d:d0:76:96:c5:
         51:8a:85:90:89:03:26:5d:f9:bf:02:70:b4:80:ed:1e:0c:be:
         70:17:ed:82:74:ae:b5:b4:92:2e:30:ba:14:63:83:61:2d:bb:
         47:7b:58:92:e8:88:af:d0:79:23:00:88:d9:11:c6:97:3b:5a:
         85:b8:a5:7e:68:2d:b4:58:0f:a0:a5:37:ed:a9:ee:59:67:25:
         4e:4c:7d:48:ac:bd:cd:69:22:ea:93:7f:0c:bf:16:01:14:6f:
         78:bb:95:f5:64:46:1b:68:89:f5:44:cd:c8:93:c2:ff:3a:79:
         25:e9:59:48:0d:24:99:bd:d6:1d:54:ce:9f:ee:e3:aa:b4:24:
         3c:b9:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----