Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/FMapC9ln0ObYo2YGc9VOXQWK-Ww.mft
File:                     FMapC9ln0ObYo2YGc9VOXQWK-Ww.mft (raw, json)
Hash identifier:          HtuPbx1OazcsUfiTfHicb1AGXf+RfSIv0dgSwJlK1tM=
Subject key identifier:   0A:C6:1E:74:0A:3D:88:B6:19:ED:7E:CC:C7:EA:F5:5C:20:9A:2E:1F
Authority key identifier: 14:C6:A9:0B:D9:67:D0:E6:D8:A3:66:06:73:D5:4E:5D:05:8A:F9:6C
Certificate issuer:       /CN=14c6a90bd967d0e6d8a3660673d54e5d058af96c
Certificate serial:       018BF5D5279513DDE333DFAEDD3F8D79E862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMapC9ln0ObYo2YGc9VOXQWK-Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/FMapC9ln0ObYo2YGc9VOXQWK-Ww.mft
Manifest number:          0FA0
Signing time:             Wed 22 Nov 2023 07:01:09 +0000
Manifest this update:     Wed 22 Nov 2023 07:01:09 +0000
Manifest next update:     Thu 23 Nov 2023 07:01:09 +0000
Files and hashes:         1: FMapC9ln0ObYo2YGc9VOXQWK-Ww.crl (hash: ZyTOExP8cR5dbw61cFp8W96JoxPxocHG6dU1WWlE70c=)
                          2: Y8R4R8UMOg72X8oqj1rJeNmSaEg.roa (hash: IcHQcMowh2QdLzn0cc+9tyoCup97CkNPDyrh1nGm48U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f5:d5:27:95:13:dd:e3:33:df:ae:dd:3f:8d:79:e8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c6a90bd967d0e6d8a3660673d54e5d058af96c
        Validity
            Not Before: Nov 22 07:01:09 2023 GMT
            Not After : Nov 23 07:01:09 2023 GMT
        Subject: CN=0ac61e740a3d88b619ed7eccc7eaf55c209a2e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:0e:c6:f1:86:a5:0f:90:50:e3:84:71:ba:
                    3a:b6:e9:02:1e:95:44:ef:07:5a:e6:61:8f:6d:44:
                    73:0a:9f:21:7c:3b:30:2d:81:92:df:b0:d3:b6:29:
                    e2:a3:c8:d7:5f:98:49:3b:e6:e4:4f:73:72:45:04:
                    3b:6f:28:ee:9f:f6:fd:52:89:2c:dc:48:9a:4f:0e:
                    25:a1:3d:4d:a4:3e:cc:38:1e:38:0f:ff:a5:07:5f:
                    d6:db:cd:4c:df:4a:e1:53:d8:b6:82:7c:fb:5a:d3:
                    6f:7c:f6:aa:01:fe:40:97:8e:79:95:86:91:0c:67:
                    9d:2d:77:01:fc:1f:8c:ec:07:8a:cc:64:ae:ec:67:
                    86:33:2c:cb:29:f1:99:ac:f6:74:fe:f2:7a:37:cb:
                    08:f4:fc:a7:93:80:4d:a4:ed:26:d0:ab:dd:e9:16:
                    43:46:1f:0f:ba:3b:35:c2:fa:6d:fd:a3:73:8d:87:
                    20:90:b0:36:d2:28:0f:49:e6:17:b4:2c:64:c5:d3:
                    2e:ce:ed:26:76:fc:fc:15:9b:1d:c4:e2:20:01:f2:
                    28:c6:2d:ad:65:48:b7:60:05:ef:8b:3a:30:7c:14:
                    18:da:59:16:c9:6e:a4:5a:9f:3e:c4:66:5b:f4:76:
                    4f:d6:cd:de:52:b4:62:22:67:19:bd:03:e1:47:44:
                    45:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C6:1E:74:0A:3D:88:B6:19:ED:7E:CC:C7:EA:F5:5C:20:9A:2E:1F
            X509v3 Authority Key Identifier:
                keyid:14:C6:A9:0B:D9:67:D0:E6:D8:A3:66:06:73:D5:4E:5D:05:8A:F9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMapC9ln0ObYo2YGc9VOXQWK-Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/FMapC9ln0ObYo2YGc9VOXQWK-Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/127dfe-dce1-416b-8bd6-e7f458897576/1/FMapC9ln0ObYo2YGc9VOXQWK-Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b9:af:d8:f0:1d:70:54:07:0e:b1:d9:62:70:61:89:d7:2c:
         24:d9:ed:47:3b:a8:61:1b:8d:07:87:a2:4a:f5:bc:32:85:af:
         a0:07:11:8d:db:30:3f:26:56:56:9a:d9:7a:29:e5:c1:be:8f:
         cf:28:ab:6c:10:de:6a:ef:dd:f8:a9:c5:b4:35:41:dc:28:7a:
         84:ff:91:c1:42:7e:8e:2f:49:52:99:78:4b:5e:7d:8b:1e:cb:
         48:75:4c:cd:41:33:2a:55:fe:b1:2f:97:a6:42:e7:e5:b7:cd:
         87:b3:4a:65:f8:45:5f:b2:2e:50:e2:e7:39:cf:ce:78:6e:31:
         1e:6f:e5:fe:54:7b:f5:20:44:a5:da:f8:b7:00:d8:f2:1f:58:
         33:08:6f:64:fc:d0:5f:27:b5:af:db:c7:01:c4:68:bc:ed:c8:
         da:1b:4c:24:4e:92:96:bf:8c:d6:19:36:8f:2a:b0:1d:fb:35:
         ee:cc:00:b6:dc:dd:f5:4a:96:7c:b8:0f:ec:fe:58:ec:e9:09:
         97:a1:72:18:0d:a8:50:fe:5c:26:44:10:90:8c:b6:d5:54:7d:
         f3:f8:16:fe:53:98:88:21:97:34:d7:40:15:03:a4:01:df:33:
         7e:c2:b4:74:45:44:ef:66:45:65:2b:b2:00:28:88:dd:d8:f0:
         83:0e:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----