Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/6KvSi4PYL3wtd7Bg--1W2kDep3Y.mft
File:                     6KvSi4PYL3wtd7Bg--1W2kDep3Y.mft (raw, json)
Hash identifier:          RbkNl+3Brj5bVPwU8ZowTItJaXaqxl1x3xtOuJVQtQc=
Subject key identifier:   1A:4A:86:B6:F2:C4:8C:6C:56:18:FF:BF:F3:14:F5:00:8F:3F:49:56
Authority key identifier: E8:AB:D2:8B:83:D8:2F:7C:2D:77:B0:60:FB:ED:56:DA:40:DE:A7:76
Certificate issuer:       /CN=e8abd28b83d82f7c2d77b060fbed56da40dea776
Certificate serial:       018B8A1CD1C3A91617FBADD8805294BB662A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvSi4PYL3wtd7Bg--1W2kDep3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/6KvSi4PYL3wtd7Bg--1W2kDep3Y.mft
Manifest number:          0667
Signing time:             Wed 01 Nov 2023 09:00:26 +0000
Manifest this update:     Wed 01 Nov 2023 09:00:26 +0000
Manifest next update:     Thu 02 Nov 2023 09:00:26 +0000
Files and hashes:         1: 6KvSi4PYL3wtd7Bg--1W2kDep3Y.crl (hash: hOFF4ybVf6Yo/3r5o2b9ZKQWAHvJPfCz4tuhdM0dKPM=)
                          2: viJv-JbqQN7-YAaovksEh0hSs2k.roa (hash: 1JRqhnkrJxQsywXWMz+LB2trhGGMFeNHKLl2n/RlpC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8a:1c:d1:c3:a9:16:17:fb:ad:d8:80:52:94:bb:66:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abd28b83d82f7c2d77b060fbed56da40dea776
        Validity
            Not Before: Nov  1 09:00:26 2023 GMT
            Not After : Nov  2 09:00:26 2023 GMT
        Subject: CN=1a4a86b6f2c48c6c5618ffbff314f5008f3f4956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:84:3d:26:bb:55:bb:05:03:0e:1c:32:11:
                    99:7a:44:a0:9d:a9:38:b4:e6:c6:8a:e5:3d:23:80:
                    30:cc:80:15:4e:d6:e4:07:0e:2a:4b:aa:03:d4:ab:
                    21:6c:1b:15:46:c3:a9:d7:89:b7:08:6d:b1:6f:89:
                    cf:a1:09:2e:09:10:52:48:a3:9e:cb:02:4b:02:c8:
                    e0:b1:69:b4:af:5f:45:4a:27:49:81:4a:39:62:b3:
                    1c:0e:b0:eb:c4:90:da:7d:81:23:e9:0f:79:88:97:
                    d8:60:e8:6e:16:90:34:2a:8f:fe:bf:35:5c:4c:d2:
                    2f:bc:48:32:aa:fe:b9:81:c7:26:96:cc:32:ed:93:
                    5f:dc:65:9f:bb:61:94:53:55:77:2d:bb:37:ed:35:
                    e4:25:e8:48:69:05:a5:ac:01:0c:4d:fd:69:c2:5b:
                    40:2c:18:49:1e:6b:02:4b:fd:71:8e:1d:ce:11:60:
                    58:0b:78:c1:6b:8b:5a:4e:7b:72:2c:85:4e:b3:f3:
                    12:86:ab:de:cd:17:b3:56:c0:31:e6:24:7b:9f:0e:
                    68:dd:9c:be:91:0b:c3:cf:96:5d:18:fb:7b:1c:73:
                    82:ba:75:2f:6b:4a:d7:48:f4:a0:41:a9:07:58:70:
                    55:e5:0c:1a:4a:da:5d:7d:7b:65:50:6e:9f:1e:54:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:86:B6:F2:C4:8C:6C:56:18:FF:BF:F3:14:F5:00:8F:3F:49:56
            X509v3 Authority Key Identifier:
                keyid:E8:AB:D2:8B:83:D8:2F:7C:2D:77:B0:60:FB:ED:56:DA:40:DE:A7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvSi4PYL3wtd7Bg--1W2kDep3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/6KvSi4PYL3wtd7Bg--1W2kDep3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/58580a-2119-4cf5-b687-c7ff145886d3/1/6KvSi4PYL3wtd7Bg--1W2kDep3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:48:c0:ea:5c:c6:2a:de:7e:d5:53:ca:42:43:7b:f4:2f:88:
         67:1d:8a:68:a9:39:29:b4:e1:41:1f:e0:ae:8b:6a:e3:20:e6:
         89:3d:9e:30:9f:76:35:e6:6d:53:7f:8b:da:36:24:19:42:dd:
         4f:23:05:9b:08:56:5e:55:e3:75:ae:09:ae:e3:46:e2:3e:b3:
         c8:38:3d:16:e8:c3:36:65:1d:de:2a:b8:bd:93:37:a3:5b:29:
         f3:d9:a5:23:ce:57:32:e9:b0:7c:0e:b3:82:bf:62:10:ac:5c:
         67:4c:8a:44:99:cf:dc:33:34:1c:31:95:f9:8d:d4:c9:0e:47:
         a8:9d:35:c5:14:a5:6f:dc:b0:fd:54:bb:39:b6:13:70:b4:9f:
         26:63:5a:e8:7e:af:bb:fa:6e:4d:9b:20:cb:89:b5:31:1a:46:
         7e:39:35:14:d6:1c:8d:84:75:4a:d2:e6:1b:09:80:cc:34:12:
         2a:65:70:f8:f4:9c:5a:be:df:96:7d:65:be:8e:bd:a6:5e:19:
         58:a7:92:e3:35:18:d1:e1:df:2e:b9:3c:ba:b6:6c:2d:61:63:
         91:6c:51:e9:33:68:4e:85:6e:af:bc:f9:12:9d:2e:84:64:d2:
         2b:2c:7b:9c:09:d0:d8:e7:fe:e4:79:c2:95:db:83:00:3c:7c:
         a3:a6:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----