Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.mft
File:                     8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.mft (raw, json)
Hash identifier:          zgO9OpPmPLdUJbWj0VGIkxXVVmOcxf0MtkxV7AW0IOU=
Subject key identifier:   24:6B:EB:71:72:E1:DC:D1:BF:70:64:3C:C4:DE:24:E6:E2:DB:7C:BA
Authority key identifier: F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1
Certificate issuer:       /CN=f21d5f37506de4905e173c0f581150817250efe1
Certificate serial:       018BC6D77471B7C54113E68F026F0BFC9290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.mft
Manifest number:          0901
Signing time:             Mon 13 Nov 2023 04:01:30 +0000
Manifest this update:     Mon 13 Nov 2023 04:01:30 +0000
Manifest next update:     Tue 14 Nov 2023 04:01:30 +0000
Files and hashes:         1: 8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl (hash: je+UNj0IO2+MCJvsZfQYARGrngoH8mICsLdIpPvSIxo=)
                          2: GxZ4pcHNxJWWZmo3QeLWFcOJ96w.roa (hash: kNugI+MqbUha2Kis69qN7eApEr+kh+K19k8AdkY1d4o=)
                          3: UihdNYIbT5K3hg6LQFahka_yLBc.roa (hash: ZSJrNDVWgfKGB60qdEHnPTlXOuVaqst9KCVKl7oKZ4Q=)
                          4: gqzdVcpuUbsuX8T0rr087q7RUfg.roa (hash: PVkK0/m0ztwnyIOh2a+tRYXZ/vbcfjzJzT1QmgMq6f0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c6:d7:74:71:b7:c5:41:13:e6:8f:02:6f:0b:fc:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21d5f37506de4905e173c0f581150817250efe1
        Validity
            Not Before: Nov 13 04:01:30 2023 GMT
            Not After : Nov 14 04:01:30 2023 GMT
        Subject: CN=246beb7172e1dcd1bf70643cc4de24e6e2db7cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:41:30:91:c4:04:f0:dd:2f:a7:b9:1a:55:
                    d2:32:4e:f4:8c:e8:1a:b4:c5:6c:77:dd:30:e2:8d:
                    e7:fc:c4:85:0a:38:bd:51:d3:c8:98:a1:06:84:00:
                    52:94:46:b8:e6:f2:8d:a6:ac:11:ee:c3:0a:2d:d4:
                    50:f2:0d:37:5a:a0:26:5c:8c:93:d9:c4:99:45:5d:
                    88:df:a6:6b:06:da:59:3e:2d:2f:bd:91:cd:4c:04:
                    b6:1a:5b:45:56:5f:40:ed:51:2d:04:83:32:e5:1d:
                    11:65:62:39:27:cd:6b:82:53:0c:f5:ce:83:49:e8:
                    46:06:a1:d3:d8:17:64:3c:30:2b:39:0f:b7:ef:c5:
                    25:72:90:b9:ca:98:6d:b2:0f:0b:9b:13:4c:7b:f7:
                    9e:40:23:e8:6c:ba:64:20:9a:b0:3a:2c:07:f1:d1:
                    da:45:c6:6f:e6:e1:4c:b7:01:97:a5:d1:5f:95:8f:
                    5a:a4:0f:51:96:66:0d:19:6f:0e:de:d4:2e:b8:a5:
                    6c:d1:61:ee:cc:50:2a:c3:ec:15:c8:54:53:d7:2f:
                    4e:12:53:60:0c:ab:35:06:ff:2d:d9:cc:35:a0:21:
                    5b:40:4a:84:e7:9f:3f:8c:d6:0e:0e:c0:08:3a:01:
                    06:c4:ba:d7:a2:27:30:33:a0:ad:69:1d:cd:e1:cf:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6B:EB:71:72:E1:DC:D1:BF:70:64:3C:C4:DE:24:E6:E2:DB:7C:BA
            X509v3 Authority Key Identifier:
                keyid:F2:1D:5F:37:50:6D:E4:90:5E:17:3C:0F:58:11:50:81:72:50:EF:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6c4d22-8ed7-4844-a298-21259dfb6ac0/1/8h1fN1Bt5JBeFzwPWBFQgXJQ7-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:04:41:0b:79:cb:39:d8:08:83:4e:e9:f1:a4:55:d4:a2:f5:
         ad:7c:50:5c:da:1d:96:21:d9:d4:7e:9b:21:1a:92:fa:2d:8b:
         67:65:bd:88:5c:fd:c2:ec:08:72:d7:6f:ce:97:56:69:75:21:
         3d:98:be:51:30:e2:e0:56:eb:82:2c:37:d8:ee:2a:82:c5:e4:
         83:0c:37:6e:f7:b3:48:e1:27:2e:ba:72:85:6a:60:09:e1:03:
         6f:34:76:35:8f:42:7f:04:24:97:17:49:65:3a:c6:71:3c:2b:
         ad:98:1f:87:87:bc:c3:81:b2:fb:4b:85:ed:9c:28:be:e5:84:
         d6:62:6d:d1:82:2c:c5:15:53:46:91:6a:cb:e6:ea:97:35:e4:
         38:e7:9e:74:4e:81:13:61:47:21:35:ff:30:f4:bd:18:66:8f:
         98:0b:cb:ae:19:41:f3:54:5f:32:c5:e3:4b:56:0c:42:6a:07:
         dd:f9:70:dc:8a:4d:5d:e4:cd:cb:51:21:ee:fa:e9:a5:f6:6f:
         c8:57:f8:c6:53:43:36:12:15:13:cc:26:aa:19:8a:3b:3d:b7:
         60:9f:0d:27:37:58:03:08:24:c2:4e:85:20:88:3b:84:35:a9:
         2c:7a:a2:a6:70:c3:0c:91:25:e8:27:78:f0:fb:9f:79:94:11:
         1c:b3:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----