Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.mft
File:                     SWp3YI8fRHL2_DAnPFVg6WfK8nM.mft (raw, json)
Hash identifier:          HLLD5u7Ucdzl+MVwwmuCpWL+x48yQRQizW8xpEOb4Yk=
Subject key identifier:   FC:64:DC:5C:5E:6E:C7:38:A3:11:58:7D:3E:47:31:44:79:2D:FF:D8
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Certificate issuer:       /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial:       018BB83FAEA402A13E7CFB368578C2091211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.mft
Manifest number:          0897
Signing time:             Fri 10 Nov 2023 08:01:02 +0000
Manifest this update:     Fri 10 Nov 2023 08:01:02 +0000
Manifest next update:     Sat 11 Nov 2023 08:01:02 +0000
Files and hashes:         1: GW5hQ-Cqh-N702VgE9WG3tKW20I.roa (hash: UaDQEueH2MnThC7EJKfwhwBGUr/0jdo8Hr5pSufoSrs=)
                          2: SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl (hash: 8tZgPsTD+gXAHJwsDl3AGk/F352B1Q43nA5oKoOM3Vs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:3f:ae:a4:02:a1:3e:7c:fb:36:85:78:c2:09:12:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
        Validity
            Not Before: Nov 10 08:01:02 2023 GMT
            Not After : Nov 11 08:01:02 2023 GMT
        Subject: CN=fc64dc5c5e6ec738a311587d3e473144792dffd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:2e:09:7d:73:c6:d4:63:b8:96:1a:36:28:
                    4f:b7:3f:eb:6c:bd:4d:c6:6c:b5:b1:be:76:c1:e8:
                    85:d8:1e:5f:7e:9c:3e:11:5d:49:13:6a:57:14:9a:
                    06:05:6a:0d:3a:c8:5b:54:ef:75:31:5a:7b:a0:c8:
                    60:0f:6e:4e:39:ca:ad:e1:d6:4a:70:24:7a:7e:78:
                    5b:33:62:97:ac:53:dd:c0:09:c7:cb:20:ce:7c:8c:
                    b7:fa:7a:64:fc:91:1f:38:12:f7:10:ee:2d:7d:01:
                    c0:7d:cf:ab:42:ee:84:83:eb:9c:d2:a5:72:1a:1d:
                    cf:57:15:b4:65:c5:dd:8e:55:ef:9f:3a:0c:2e:fb:
                    4b:26:c7:fc:9e:a6:4d:5f:97:a3:cc:a1:ae:cc:5b:
                    9c:9d:b5:78:6d:28:25:7c:6e:8f:2d:be:70:b9:a2:
                    cc:98:0a:01:6d:d1:8d:4a:dc:d3:ac:c7:2d:10:1b:
                    59:7c:70:16:52:49:f9:4d:b6:30:f3:b8:99:5f:7e:
                    46:1a:95:2a:1f:64:76:23:38:23:78:da:c7:fa:af:
                    70:d8:64:69:02:af:72:3a:1c:6e:70:f8:88:b4:00:
                    a7:3d:68:e5:48:33:50:61:df:4e:94:b3:31:02:1e:
                    57:03:10:4d:64:13:2a:3e:82:10:0c:1b:22:b8:9f:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:64:DC:5C:5E:6E:C7:38:A3:11:58:7D:3E:47:31:44:79:2D:FF:D8
            X509v3 Authority Key Identifier:
                keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:34:85:c1:eb:71:8e:68:e9:19:55:e2:34:99:e9:b3:88:e2:
         e5:8b:aa:c0:22:40:55:ba:16:35:09:99:7d:37:96:e4:0c:9d:
         5e:ea:03:96:25:a0:1d:77:76:da:50:d4:4a:f1:4e:25:a1:03:
         1c:19:25:3d:91:88:b2:89:77:59:e8:a7:b7:8d:45:c5:3b:bb:
         5e:b9:8e:79:e6:d9:43:e4:f9:71:a3:59:10:ac:28:d0:8f:d5:
         90:ca:53:d2:b3:5d:42:cf:2a:1b:01:9e:b3:85:d4:cf:ad:38:
         ac:13:8d:d8:95:00:d0:88:e9:33:cc:ff:5a:43:61:c7:28:68:
         c5:b3:f9:25:22:b9:dc:d4:22:c6:ab:0f:f5:1a:3d:49:14:c0:
         f8:66:f5:27:04:f4:ad:3a:56:15:d5:8d:dd:98:13:a5:64:67:
         bd:a8:a9:b6:1f:39:9b:94:d9:20:6a:08:58:e3:a1:0c:38:24:
         f0:5e:c4:3c:b8:58:89:c7:47:70:b0:80:d9:71:65:b3:bb:d9:
         eb:dc:66:62:c3:93:84:94:22:a7:4f:99:33:b9:7a:06:04:c5:
         5e:94:14:5e:5c:aa:f3:ba:ec:d1:24:7a:89:7c:15:f0:6f:03:
         42:5b:a6:30:2a:22:7c:b4:a8:f6:b5:46:51:62:ce:fa:fd:bd:
         01:4b:13:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----