Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft
File:                     clUvPoe9QRNWViJE8vtQ76Um0gM.mft (raw, json)
Hash identifier:          ezsKgIBXRxlVxV4zjL3SCPENYlBQRmk/muGgzE3V+O0=
Subject key identifier:   3C:38:10:47:5C:8F:71:3D:79:03:38:68:29:93:9A:42:6A:53:8D:87
Authority key identifier: 72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03
Certificate issuer:       /CN=72552f3e87bd411356562244f2fb50efa526d203
Certificate serial:       018CB34E673551E6FA2A5B33935DDD4CFC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clUvPoe9QRNWViJE8vtQ76Um0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft
Manifest number:          086A
Signing time:             Fri 29 Dec 2023 02:01:48 +0000
Manifest this update:     Fri 29 Dec 2023 02:01:48 +0000
Manifest next update:     Sat 30 Dec 2023 02:01:48 +0000
Files and hashes:         1: 4l-2YI4lrMKjGC8ShNQEG5kY-WU.roa (hash: YNvP7hnfeN0yatS3A1Ei4RsxNPRKImoIazB5inmq4Gg=)
                          2: clUvPoe9QRNWViJE8vtQ76Um0gM.crl (hash: SsRseK9/QYqhSwSpJpwiMFdBNGJQPpmaHo+CvTqRlls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b3:4e:67:35:51:e6:fa:2a:5b:33:93:5d:dd:4c:fc:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72552f3e87bd411356562244f2fb50efa526d203
        Validity
            Not Before: Dec 29 02:01:48 2023 GMT
            Not After : Dec 30 02:01:48 2023 GMT
        Subject: CN=3c3810475c8f713d7903386829939a426a538d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0a:cf:77:58:1a:79:db:22:8f:e9:46:04:3e:
                    0b:e9:47:c9:f6:38:31:30:41:be:29:33:d0:44:d7:
                    d8:ee:bd:7d:2f:3a:1c:0f:0b:c8:ec:ca:fd:b9:39:
                    fe:9e:50:ee:d3:3f:4f:54:4b:9a:f9:e8:2a:5a:5a:
                    e5:48:57:c8:5e:16:a7:1f:bb:df:7f:e3:16:b7:3b:
                    94:8e:13:b2:50:bb:79:9d:2a:67:b4:b6:27:07:ae:
                    c6:1e:91:b0:26:01:22:5c:60:6a:d3:68:0a:05:65:
                    09:65:3a:c2:02:71:3e:09:d8:81:b0:cc:77:e6:21:
                    07:95:f3:56:87:4c:a8:76:1e:f3:d7:68:50:ac:7c:
                    2d:b5:6c:60:ac:93:62:16:da:9d:91:6e:40:c4:a0:
                    70:66:4f:76:d9:46:7e:c4:f7:5a:28:a8:0a:a0:14:
                    6f:b6:72:71:6d:17:78:3c:01:5b:65:7e:94:17:e5:
                    09:05:0a:fd:31:5f:4b:cd:ab:82:a0:98:99:29:e3:
                    fd:fe:4d:fe:63:02:6c:72:96:8b:f9:20:ff:4b:da:
                    ba:49:d3:ab:4c:3f:9e:ad:ab:cc:8d:39:1f:12:84:
                    cf:c5:05:ce:6c:b0:c1:58:d4:ab:12:dc:8e:d0:cb:
                    0c:af:fb:a2:6d:f5:a5:d7:6a:59:7b:e8:56:af:c9:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:38:10:47:5C:8F:71:3D:79:03:38:68:29:93:9A:42:6A:53:8D:87
            X509v3 Authority Key Identifier:
                keyid:72:55:2F:3E:87:BD:41:13:56:56:22:44:F2:FB:50:EF:A5:26:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clUvPoe9QRNWViJE8vtQ76Um0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6ee0de-06cb-4550-99da-23bf08171175/1/clUvPoe9QRNWViJE8vtQ76Um0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:67:fa:8f:54:8d:bb:49:75:d0:5c:01:af:eb:94:89:1e:15:
         37:4d:db:54:f0:02:cd:42:2d:5b:4d:c9:f9:f3:7e:04:e2:f7:
         0e:9d:b3:c2:ea:99:41:29:c2:88:88:30:65:a1:5a:b2:84:2b:
         46:ff:c2:6e:3f:1d:50:4b:00:13:51:90:e4:d6:e5:da:7f:a1:
         90:df:33:7c:51:d8:32:66:1a:04:00:8e:02:3e:6b:c0:81:53:
         97:e8:1a:d8:89:4a:28:cd:b0:9d:6b:1e:33:83:24:7c:51:c6:
         4e:be:7a:2d:89:ab:2b:80:62:b3:7f:95:2f:ae:0d:fc:d8:16:
         75:15:fb:f9:2e:0a:be:e2:67:13:73:ae:62:26:4e:86:67:ec:
         7d:e1:51:f0:84:32:b1:25:50:06:e0:50:40:f5:5c:02:ab:9e:
         54:6c:9a:92:a9:f0:83:96:d4:89:50:cc:db:84:d6:c8:e0:02:
         b3:44:c6:6f:1c:36:3b:d3:69:86:8d:42:19:2d:11:7c:38:fa:
         15:87:96:6a:0c:89:76:5e:60:5a:00:38:cb:f2:63:e0:2d:4b:
         f9:b6:18:79:6e:be:60:aa:c9:c4:fd:aa:32:f7:95:bb:af:f8:
         03:4a:b6:8e:00:25:e6:fa:ce:37:33:03:1e:c6:0c:5d:02:27:
         72:4f:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----