Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft
File:                     64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft (raw, json)
Hash identifier:          4EljT1GOkYWVbyJkpiuPol0bGSWX4FF3mQb0MvfX89g=
Subject key identifier:   AA:CB:F3:83:8F:77:5F:FA:7F:11:8C:60:CD:0E:B9:41:A1:2C:25:ED
Authority key identifier: EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
Certificate issuer:       /CN=eb81f2566177790fad880d610e37cdd209847207
Certificate serial:       018B6A5AF453AF0A5B14D758A082D78F5E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft
Manifest number:          0C40
Signing time:             Thu 26 Oct 2023 05:00:27 +0000
Manifest this update:     Thu 26 Oct 2023 05:00:27 +0000
Manifest next update:     Fri 27 Oct 2023 05:00:27 +0000
Files and hashes:         1: 64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl (hash: RAaDuJBg23pwcb2sQGcxSSWotbpERpIQS1+xNL9BAg0=)
                          2: 84kRVEdiTmIzkX_UdDBUSnWVPZc.roa (hash: 6mo8Y43KxA2q68wPU2luyRL3umwUncIIG+IoCZyVpio=)
                          3: bC6T8wV40t_GG_ChIjL1WUHuKN0.roa (hash: +kJeByVr6iSU9WfeKvjfw3aoGJk+OasfizoPoqIgdMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6a:5a:f4:53:af:0a:5b:14:d7:58:a0:82:d7:8f:5e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb81f2566177790fad880d610e37cdd209847207
        Validity
            Not Before: Oct 26 05:00:27 2023 GMT
            Not After : Oct 27 05:00:27 2023 GMT
        Subject: CN=aacbf3838f775ffa7f118c60cd0eb941a12c25ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c6:a2:be:35:a4:a2:ba:6e:a6:d6:95:a3:54:
                    38:2b:dd:a0:06:f2:c1:ea:ca:fb:ad:5b:7f:cd:7d:
                    57:df:04:db:c4:05:da:d0:d0:03:3c:de:98:12:b6:
                    62:8b:72:2a:8f:59:a4:01:16:c3:4b:fb:d5:41:ae:
                    14:54:80:be:59:4d:ff:d6:bf:de:46:3e:cd:7a:23:
                    5c:fe:a4:c5:23:26:c6:0b:6b:84:81:10:10:bd:52:
                    32:5e:6f:a0:fe:e2:f2:6c:1b:f3:de:62:76:9a:38:
                    6f:5b:f9:5d:10:d5:16:02:10:7f:a1:4e:8c:c1:4d:
                    c6:fb:e0:ad:d4:1c:0a:f4:92:64:41:d0:94:7b:34:
                    ee:f7:72:9c:df:03:89:31:38:65:f7:b0:14:24:75:
                    e4:cb:34:34:54:71:54:c7:75:ca:eb:01:ab:60:64:
                    48:ac:61:49:70:92:53:73:15:78:c1:18:2c:37:eb:
                    cf:ad:9a:38:4f:3e:cc:27:0a:77:45:ee:0c:04:cd:
                    61:96:1b:09:81:ee:01:69:93:88:0b:d8:53:8d:7b:
                    de:ad:9a:5d:5d:a0:a9:41:93:a3:14:47:1b:4c:6c:
                    74:ea:86:0e:c6:48:8b:cd:39:cf:1b:b0:77:f4:14:
                    98:0d:c1:bf:f2:5a:62:a3:f4:9e:23:38:9e:b0:75:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CB:F3:83:8F:77:5F:FA:7F:11:8C:60:CD:0E:B9:41:A1:2C:25:ED
            X509v3 Authority Key Identifier:
                keyid:EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:be:34:42:c7:95:e8:07:b4:a0:96:dc:ff:4e:09:c0:da:c2:
         b7:51:21:e9:b1:aa:5a:32:76:64:bd:a7:6a:4c:6c:ba:72:5f:
         bf:5c:c4:75:3d:2a:22:be:62:8c:42:64:f8:60:3b:de:28:92:
         a7:a6:c6:62:a6:48:70:f2:fd:8c:f5:46:25:45:ab:e3:eb:34:
         43:12:af:a4:47:c4:c2:d4:e2:10:d1:53:eb:b3:6e:e4:92:d4:
         ef:97:48:99:61:d8:9f:6f:04:5d:0e:8c:f4:35:07:fc:37:35:
         7a:d9:7d:08:b9:0a:bc:f2:93:ba:dc:f6:1f:42:30:69:df:f4:
         69:90:7c:fd:d9:9b:4b:b0:d0:fc:00:3a:39:f9:17:9f:89:b7:
         be:59:e4:14:57:25:27:50:eb:d0:bf:a5:9d:b2:3e:56:9a:fa:
         ce:b1:de:d2:69:31:19:34:5e:3e:78:eb:c1:75:41:89:62:11:
         a5:3c:d1:c2:0d:73:f2:80:c3:97:ee:71:ae:b5:c8:01:a5:bc:
         38:96:94:d8:d7:ed:fe:e4:ed:71:e2:c7:dc:0a:4b:b0:e1:f0:
         a5:37:87:2d:cd:d3:a0:ce:07:c4:c3:8a:15:1f:74:34:06:cc:
         48:2e:b0:63:e8:d8:73:5a:90:36:d8:c2:03:3a:f8:fb:7b:b2:
         a7:78:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----