Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/arnecqjxiGK8SKoA5mRJ6xAEoVk.mft
File:                     arnecqjxiGK8SKoA5mRJ6xAEoVk.mft (raw, json)
Hash identifier:          RTgzXIn7d+eNBgAGuOxsr7qkOCcwrDCeIv9rUGqlhCA=
Subject key identifier:   9C:73:CD:3F:0F:11:59:5D:3C:B6:28:FF:49:88:4C:AF:9F:C5:DE:51
Authority key identifier: 6A:B9:DE:72:A8:F1:88:62:BC:48:AA:00:E6:64:49:EB:10:04:A1:59
Certificate issuer:       /CN=6ab9de72a8f18862bc48aa00e66449eb1004a159
Certificate serial:       018B859B40ADB083214BC27C5976F390B25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arnecqjxiGK8SKoA5mRJ6xAEoVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/arnecqjxiGK8SKoA5mRJ6xAEoVk.mft
Manifest number:          08F1
Signing time:             Tue 31 Oct 2023 12:00:26 +0000
Manifest this update:     Tue 31 Oct 2023 12:00:26 +0000
Manifest next update:     Wed 01 Nov 2023 12:00:26 +0000
Files and hashes:         1: BWrB1eLkTxU63kQ1Lc4hzPhkckU.roa (hash: m3bGl4Ecnpi8T98Sqp/pbwMSQBT6QYSCmaOmXuQiL2I=)
                          2: arnecqjxiGK8SKoA5mRJ6xAEoVk.crl (hash: sEqcYBycYgNh6ePSiSQDTm0wahtcsKJABU/DaFuXio8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:9b:40:ad:b0:83:21:4b:c2:7c:59:76:f3:90:b2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab9de72a8f18862bc48aa00e66449eb1004a159
        Validity
            Not Before: Oct 31 12:00:26 2023 GMT
            Not After : Nov  1 12:00:26 2023 GMT
        Subject: CN=9c73cd3f0f11595d3cb628ff49884caf9fc5de51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:e4:23:5d:c5:d5:b7:52:58:67:0e:2f:3d:
                    a8:49:dd:54:e9:e3:b9:57:87:f3:c0:32:60:c8:1f:
                    ac:a9:71:48:ec:38:ae:e4:da:36:1e:c2:03:d8:72:
                    e0:3d:7d:36:c0:28:62:32:87:33:95:0e:d3:89:12:
                    83:41:78:2a:c0:f4:df:20:a7:af:c3:a5:42:31:91:
                    bc:51:22:f5:10:7d:99:4c:67:d3:84:b0:6b:37:22:
                    c5:33:ff:0b:f9:00:c0:04:4d:60:a0:1d:fb:73:13:
                    80:e3:a2:47:87:b3:ea:31:52:fb:f0:e5:6b:8d:5e:
                    e2:a5:76:a7:97:12:45:bc:57:0a:85:b3:1b:8c:15:
                    a0:a3:cc:25:d9:48:f4:12:ba:82:79:d6:69:80:d2:
                    c9:cd:4e:14:3f:95:20:13:b2:85:92:0b:c7:bb:ee:
                    49:52:a0:02:c9:64:76:31:13:1c:b9:c1:20:0e:e2:
                    fc:e2:ef:9c:79:bb:46:24:65:fe:54:35:d8:d5:db:
                    95:5b:f3:4b:b6:32:f8:b7:99:d4:9a:fa:fa:d7:ae:
                    a4:38:ae:5d:d2:ea:a3:ec:cc:81:3f:a1:62:05:5a:
                    62:53:a6:dd:77:fd:bc:37:cd:19:6f:21:ca:36:a4:
                    a9:24:8b:5b:d8:e9:4d:7e:af:0f:34:bd:da:81:32:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:73:CD:3F:0F:11:59:5D:3C:B6:28:FF:49:88:4C:AF:9F:C5:DE:51
            X509v3 Authority Key Identifier:
                keyid:6A:B9:DE:72:A8:F1:88:62:BC:48:AA:00:E6:64:49:EB:10:04:A1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arnecqjxiGK8SKoA5mRJ6xAEoVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/arnecqjxiGK8SKoA5mRJ6xAEoVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/269252-7a19-4499-913c-527992ad2cb4/1/arnecqjxiGK8SKoA5mRJ6xAEoVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:41:12:84:2d:41:1b:22:75:67:c4:10:75:ae:cf:ef:b5:ff:
         5b:28:24:dd:cb:c5:31:47:9a:ae:f0:4f:cd:43:b6:d9:f9:c4:
         b8:11:c8:0c:d5:48:10:ae:d6:25:51:a0:94:4f:f6:af:96:58:
         f9:28:47:88:e8:40:06:45:c4:fa:c2:e7:dd:3a:23:97:55:96:
         eb:3a:b3:12:e9:e1:51:74:f5:7e:1a:00:b6:2d:9b:75:51:f6:
         97:df:db:fe:41:15:83:ec:59:56:fd:a8:09:ab:26:07:5e:e3:
         72:0c:22:ed:cc:14:da:ae:da:5b:dd:40:c6:b8:f9:8d:8b:1e:
         22:21:12:5f:73:13:04:5f:a1:a0:e1:42:b8:38:d5:2a:d9:da:
         a4:bc:9b:9f:69:05:c5:1f:85:06:e3:13:08:d3:6c:04:fb:07:
         eb:c6:d0:76:56:a7:ac:14:1d:84:67:94:13:6a:d5:a3:70:ac:
         5f:2b:27:7d:ab:ff:e3:ea:d3:b8:20:09:5d:08:4d:09:e9:39:
         df:77:18:b2:a6:b1:4d:87:c7:00:1e:b1:36:96:e3:ab:cc:c2:
         60:80:85:ff:35:21:b3:7e:34:33:08:3e:77:8f:75:94:9d:76:
         a2:17:80:bb:bd:6e:5b:0f:2e:49:47:6e:fe:44:1f:a9:73:70:
         7f:d2:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----