Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.mft
File:                     AYB7Z0CmNBv_r_RvFltYgfZg1hk.mft (raw, json)
Hash identifier:          NoWYedVwaMkn0DieME7tslo491f2iWv2lWb1/Hol1oc=
Subject key identifier:   A0:F6:79:EF:79:1A:24:67:E0:43:D4:7D:5F:7F:19:D8:D9:8C:74:90
Authority key identifier: 01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19
Certificate issuer:       /CN=01807b6740a6341bffaff46f165b5881f660d619
Certificate serial:       018C0EB8C39EE250A960BEE006D6B2110853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.mft
Manifest number:          0717
Signing time:             Mon 27 Nov 2023 03:00:38 +0000
Manifest this update:     Mon 27 Nov 2023 03:00:38 +0000
Manifest next update:     Tue 28 Nov 2023 03:00:38 +0000
Files and hashes:         1: AYB7Z0CmNBv_r_RvFltYgfZg1hk.crl (hash: n1B2Wgjvl0K6zz0fhqT0rR7CxeoqxLPfcdBM+ZuaQCo=)
                          2: Balmm3OhMojFwZcky-VyTExM1yo.roa (hash: jdVuWM7g20RCgv1/TXPMApuYvhwcjub2q0TSH+nyrks=)
                          3: q27NKkjV-wElI33spGgvlpdf07A.roa (hash: EPGO1MPBJiO0k4Y3muzpKwoxvC/UxouAPqKhJJz+t+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0e:b8:c3:9e:e2:50:a9:60:be:e0:06:d6:b2:11:08:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01807b6740a6341bffaff46f165b5881f660d619
        Validity
            Not Before: Nov 27 03:00:38 2023 GMT
            Not After : Nov 28 03:00:38 2023 GMT
        Subject: CN=a0f679ef791a2467e043d47d5f7f19d8d98c7490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:99:0b:d5:e4:dd:1c:94:7f:90:23:b8:0e:
                    e7:80:c5:bc:b5:73:b3:5e:5f:2e:f1:3d:dc:6a:b0:
                    52:ce:05:4b:d9:7d:44:05:d4:d5:f8:3a:a5:42:6f:
                    74:d2:32:b9:6d:db:78:f9:8b:6b:ff:bd:43:30:07:
                    60:a2:7c:4e:c4:e7:1b:51:d0:08:80:47:03:fa:d4:
                    4f:a8:7d:1c:dc:ce:3a:ef:a1:4b:23:ec:60:db:10:
                    af:a3:8c:37:9d:0c:1b:bb:67:aa:35:99:f4:54:ac:
                    1a:2e:fe:74:bc:3d:03:33:a7:ac:21:84:fc:71:b5:
                    97:a2:33:52:28:58:9d:07:66:17:39:74:95:da:ff:
                    fb:cf:9c:b6:76:c2:5f:cc:1f:2a:f9:d9:eb:21:46:
                    7e:38:a2:b8:e6:c7:35:1e:24:25:c7:d6:2e:0c:9d:
                    5e:2b:3d:42:1c:a0:ba:d4:55:15:b2:8d:06:94:96:
                    f0:07:fb:79:39:c4:0f:64:ff:be:d5:08:52:ed:2d:
                    3a:97:8a:8f:ce:92:01:35:cf:cb:39:ab:4b:37:1d:
                    6c:94:38:89:f7:0a:65:01:aa:1b:67:9f:46:a2:52:
                    28:aa:b9:57:2e:5a:d3:01:14:f8:fc:46:e5:e2:42:
                    81:15:7e:07:90:56:1b:cc:af:21:fc:20:64:7c:84:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F6:79:EF:79:1A:24:67:E0:43:D4:7D:5F:7F:19:D8:D9:8C:74:90
            X509v3 Authority Key Identifier:
                keyid:01:80:7B:67:40:A6:34:1B:FF:AF:F4:6F:16:5B:58:81:F6:60:D6:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYB7Z0CmNBv_r_RvFltYgfZg1hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67e280-da2b-4d92-af0a-cee82cad1c9c/1/AYB7Z0CmNBv_r_RvFltYgfZg1hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b8:5b:bc:89:87:62:c4:5d:73:c9:88:3e:ae:c0:12:b4:e7:
         1f:09:a3:c4:a4:00:de:4d:cc:16:5a:f7:20:f6:92:12:25:36:
         a6:66:22:66:ea:72:c3:40:14:06:ae:af:da:bc:dc:e7:72:80:
         15:b1:5e:37:57:e8:cb:c6:61:3b:2b:d0:f8:d8:44:08:ef:49:
         84:66:dd:38:24:39:44:b3:54:8e:ee:48:73:e3:e5:9b:3c:fe:
         a5:a1:49:97:eb:92:48:11:cf:04:71:51:5c:61:c7:ec:59:e4:
         fd:cc:cd:65:e8:6a:b3:34:67:ee:7d:6e:d4:98:02:52:fd:d5:
         d1:85:96:76:b8:4c:e8:b1:ca:44:92:3d:d3:ef:34:4c:c8:b4:
         eb:4d:24:d0:4a:f2:59:1c:f0:6a:af:24:16:66:32:9f:82:3a:
         32:a7:09:e0:93:3a:00:fa:41:ff:1d:99:f1:a3:4c:6b:99:a9:
         a4:c7:44:d4:84:a2:1d:a2:69:be:05:1e:53:56:97:e4:24:09:
         05:91:d6:a8:bd:ab:ed:8d:40:dd:08:ed:00:e6:7c:4b:7d:17:
         73:50:69:d5:d8:5f:f9:bb:a6:9c:ad:45:fc:9f:87:24:f5:73:
         73:a4:bc:a1:1f:3f:dc:e9:fc:aa:9b:41:9a:52:37:fd:76:f6:
         db:d1:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----