Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft
File:                     9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft (raw, json)
Hash identifier:          P59/DcUuAYKlSEA6STv7mVntB0ntpi5rEP8MhSwQcYc=
Subject key identifier:   B4:AC:EF:EB:7A:19:75:1D:81:53:28:2A:47:A0:A4:5F:83:9D:F6:B9
Authority key identifier: F7:11:BB:84:6C:1B:04:34:62:7C:FD:C9:3A:CC:54:76:2C:2B:FF:54
Certificate issuer:       /CN=f711bb846c1b0434627cfdc93acc54762c2bff54
Certificate serial:       018B219DAF8EE75978474017CE6CFFEE8DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9xG7hGwbBDRifP3JOsxUdiwr_1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft
Manifest number:          0437
Signing time:             Thu 12 Oct 2023 02:01:04 +0000
Manifest this update:     Thu 12 Oct 2023 02:01:04 +0000
Manifest next update:     Fri 13 Oct 2023 02:01:04 +0000
Files and hashes:         1: 9xG7hGwbBDRifP3JOsxUdiwr_1Q.crl (hash: pdvliZCGcpTGwgL7lk14OvABxzwgm1X2D32ZbNA1Itc=)
                          2: yuZ1ceW7PBVe9yOi3EYUgxAWAR8.roa (hash: UFD1AaBC0dsyH+XA7dLG6x7Y5gw/BcUxK+MwriVgS5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:21:9d:af:8e:e7:59:78:47:40:17:ce:6c:ff:ee:8d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f711bb846c1b0434627cfdc93acc54762c2bff54
        Validity
            Not Before: Oct 12 02:01:04 2023 GMT
            Not After : Oct 13 02:01:04 2023 GMT
        Subject: CN=b4acefeb7a19751d8153282a47a0a45f839df6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f8:60:d0:a5:8c:55:7c:3b:a3:54:c8:ec:d5:
                    af:78:37:17:da:3b:9b:ef:4f:f9:8c:5e:d3:e4:6c:
                    d0:f8:9c:b2:f6:f4:49:f8:58:3c:69:09:b4:83:07:
                    c1:12:9a:de:06:cb:c0:59:be:46:5a:7f:dd:c9:4e:
                    18:22:69:a6:df:7a:94:5d:34:c6:c9:86:01:1d:38:
                    32:b6:7a:9a:3a:a0:cd:84:bc:7a:32:68:10:61:4f:
                    d8:ac:77:1b:dc:21:a0:95:eb:95:bd:3f:e4:3d:9b:
                    70:c1:de:6f:fe:7b:46:91:7b:cd:86:04:a9:fa:d5:
                    ae:30:00:93:e9:89:95:3b:fe:74:a1:fb:fc:e1:08:
                    e7:81:b7:34:41:76:fa:7b:ac:9d:86:67:2c:e0:9f:
                    61:b8:cc:5a:d9:14:72:4b:a1:03:41:a9:77:10:36:
                    33:5c:e7:fe:35:86:45:c4:e9:3a:bf:c5:e9:bf:2a:
                    4b:b0:60:c1:ec:06:20:0d:be:86:0b:06:ba:0c:0f:
                    e4:cb:72:db:d5:05:fa:f1:f2:6f:fc:c9:d2:77:68:
                    3d:fa:a1:07:db:83:23:df:df:67:11:b7:80:1a:0c:
                    fe:90:7c:c7:16:77:7d:b6:f7:3f:69:68:b2:48:42:
                    6c:21:0e:16:a5:b7:b4:ce:94:e6:a9:13:6a:3e:c8:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AC:EF:EB:7A:19:75:1D:81:53:28:2A:47:A0:A4:5F:83:9D:F6:B9
            X509v3 Authority Key Identifier:
                keyid:F7:11:BB:84:6C:1B:04:34:62:7C:FD:C9:3A:CC:54:76:2C:2B:FF:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xG7hGwbBDRifP3JOsxUdiwr_1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cf70-cb63-4515-ba8a-1e09c869df91/1/9xG7hGwbBDRifP3JOsxUdiwr_1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f3:0e:a5:c7:49:a3:6b:d5:ce:87:59:21:79:33:3d:9d:44:
         15:c6:3b:fc:9a:48:9a:fc:dd:3b:af:19:cb:f8:06:db:e8:fc:
         c1:18:3d:fc:a4:16:97:9d:94:56:9f:a5:a4:30:15:63:06:c5:
         fe:de:0d:d7:f6:5f:3d:0e:02:e7:c1:04:c3:57:47:ff:a2:e7:
         36:ef:28:87:af:97:17:4f:0e:52:91:2d:30:a5:0e:77:cd:de:
         13:57:ce:39:6a:2e:4b:de:56:cf:1f:16:0e:39:ce:93:ad:00:
         56:e1:a3:9b:0e:5d:73:17:89:92:3a:11:bc:87:5e:a5:71:3c:
         b3:4c:33:f6:e2:b8:a4:3b:29:a1:7b:cf:02:d2:e0:d1:4a:6e:
         83:6d:8b:90:3f:d5:5e:2b:43:96:2b:27:53:fe:d3:20:91:9b:
         ee:a8:20:f1:ec:40:1a:3c:eb:94:89:6f:2e:a5:d4:22:83:b8:
         66:a9:99:dd:4e:b2:3d:f2:32:10:f7:50:2e:37:68:12:0f:f7:
         4c:d2:d1:df:6c:c5:d3:d2:a5:3e:36:87:ac:5c:21:fc:37:00:
         96:6d:1c:50:bc:38:2b:9a:3e:43:b3:72:9b:ec:e7:76:cf:fd:
         df:b9:ed:f6:b9:02:8e:6d:c5:a2:38:37:7e:5f:ce:b4:9c:a8:
         d6:4a:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----